Struct rustls::RootCertStore

pub struct RootCertStore {
    pub roots: Vec<OwnedTrustAnchor>,
}

A container for root certificates able to provide a root-of-trust for connection authentication.

Fields

roots: Vec<OwnedTrustAnchor>

The list of roots.

Implementations

impl RootCertStore

pub fn empty() -> Self

Make a new, empty RootCertStore.

pub fn is_empty(&self) -> bool

Return true if there are no certificates.

pub fn len(&self) -> usize

Say how many certificates are in the container.

pub fn add(&mut self, der: &Certificate) -> Result<(), Error>

Add a single DER-encoded certificate to the store.

This is suitable for a small set of root certificates that are expected to parse successfully. For large collections of roots (for example from a system store) it is expected that some of them might not be valid according to the rules rustls implements. As long as a relatively limited number of certificates are affected, this should not be a cause for concern. Use RootCertStore::add_parsable_certificates in order to add as many valid roots as possible and to understand how many certificates have been diagnosed as malformed.

pub fn add_server_trust_anchors( &mut self, trust_anchors: impl Iterator<Item = OwnedTrustAnchor> )

Adds all the given TrustAnchors anchors. This does not fail.

pub fn add_parsable_certificates( &mut self, der_certs: &[impl AsRef<[u8]>] ) -> (usize, usize)

Parse the given DER-encoded certificates and add all that can be parsed in a best-effort fashion.

This is because large collections of root certificates often include ancient or syntactically invalid certificates.

Returns the number of certificates added, and the number that were ignored.

Trait Implementations

impl Clone for RootCertStore

fn clone(&self) -> RootCertStore

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RootCertStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.