Trait rustls::ResolvesClientCert

pub trait ResolvesClientCert: Send + Sync {
    fn resolve(&self,
               acceptable_issuers: &[&[u8]],
               sigschemes: &[SignatureScheme])
               -> Option<CertChainAndSigner>;
    fn has_certs(&self) -> bool;
}

A trait for the ability to choose a certificate chain and private key for the purposes of client authentication.

Required Methods

fn resolve(&self,
           acceptable_issuers: &[&[u8]],
           sigschemes: &[SignatureScheme])
           -> Option<CertChainAndSigner>

With the server-supplied acceptable issuers in acceptable_issuers, the server's supported signature schemes in sigschemes, return a certificate chain and signing key to authenticate.

acceptable_issuers is undecoded and unverified by the rustls library, but it should be expected to contain a DER encodings of X501 NAMEs.

Return None to continue the handshake without any client authentication. The server may reject the handshake later if it requires authentication.

fn has_certs(&self) -> bool

Return true if any certificates at all are available.

Implementors