Struct rustls::client::WebPkiServerVerifier

pub struct WebPkiServerVerifier { /* private fields */ }

Available on crate feature dangerous_configuration only.

Default ServerCertVerifier, see the trait impl for more information.

Implementations

impl WebPkiServerVerifier

pub fn new(roots: impl Into<Arc<RootCertStore>>) -> Self

Constructs a new WebPkiServerVerifier.

roots is the set of trust anchors to trust for issuing server certs.

pub fn default_supported_verify_schemes() -> Vec<SignatureScheme>

Which signature verification schemes the webpki crate supports.

pub fn default_verify_tls12_signature( message: &[u8], cert: &CertificateDer<'_>, dss: &DigitallySignedStruct ) -> Result<HandshakeSignatureValid, Error>

A full implementation of ServerCertVerifier::verify_tls12_signature or ClientCertVerifier::verify_tls12_signature.

pub fn default_verify_tls13_signature( message: &[u8], cert: &CertificateDer<'_>, dss: &DigitallySignedStruct ) -> Result<HandshakeSignatureValid, Error>

A full implementation of ServerCertVerifier::verify_tls13_signature or ClientCertVerifier::verify_tls13_signature.

Trait Implementations

impl ServerCertVerifier for WebPkiServerVerifier

fn verify_server_cert( &self, end_entity: &CertificateDer<'_>, intermediates: &[CertificateDer<'_>], server_name: &ServerName, ocsp_response: &[u8], now: SystemTime ) -> Result<ServerCertVerified, Error>

Will verify the certificate is valid in the following ways:

• Signed by a trusted RootCertStore CA
• Not Expired
• Valid for DNS entry

fn verify_tls12_signature( &self, message: &[u8], cert: &CertificateDer<'_>, dss: &DigitallySignedStruct ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn verify_tls13_signature( &self, message: &[u8], cert: &CertificateDer<'_>, dss: &DigitallySignedStruct ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn supported_verify_schemes(&self) -> Vec<SignatureScheme>

Return the list of SignatureSchemes that this verifier will handle, in verify_tls12_signature and verify_tls13_signature calls.