Enum TrustAnchors 

pub enum TrustAnchors<'a> {
    KeyFile(&'a Path),
    Keys(&'a [TrustedKey]),
}

Where the keys a caller accepts come from.

Every entry point in this crate takes one of these rather than a path, because a library cannot know whether its caller’s trust decision is administrative or compiled in, and choosing for them would decide their threat model. Resolution happens once, at the entry point, and the rest of the crate only ever sees &[TrustedKey].

Variants

KeyFile(&'a Path)

A trust file, read at the moment of verification. Whoever can write it decides what verifies.

Keys(&'a [TrustedKey])

Keys the caller already holds — parsed from a compiled-in bundle, a keychain, wherever.

Implementations

impl<'a> TrustAnchors<'a>

pub fn resolve(&self) -> Result<Cow<'a, [TrustedKey]>>

Produces the keys to verify against, reading the trust file only when there is one.

Errors

See load_trusted_keys.

Trait Implementations

impl<'a> Clone for TrustAnchors<'a>

fn clone(&self) -> TrustAnchors<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for TrustAnchors<'a>

impl<'a> Debug for TrustAnchors<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.