Struct security_framework::trust::SecTrust

pub struct SecTrust(_);

A type representing a trust evaluation for a certificate.

Implementations

impl SecTrust

pub fn create_with_certificates(
    certs: &[SecCertificate],
    policies: &[SecPolicy]
) -> Result<Self>

Creates a SecTrustRef that is configured with a certificate chain, for validating that chain against a collection of policies.

pub fn set_trust_verify_date(&mut self, date: &CFDate) -> Result<()>

Sets the date and time against which the certificates in this trust object are verified.

pub fn set_anchor_certificates(&mut self, certs: &[SecCertificate]) -> Result<()>

Sets additional anchor certificates used to validate trust.

pub fn copy_anchor_certificates() -> Result<Vec<SecCertificate>>

Retrieves the anchor (root) certificates stored by macOS

pub fn set_trust_anchor_certificates_only(&mut self, only: bool) -> Result<()>

If set to true, only the certificates specified by set_anchor_certificates will be trusted, but not globally trusted certificates.

pub fn set_policy(&mut self, policy: &SecPolicy) -> Result<()>

Sets the policy used to evaluate trust.

pub fn set_options(&mut self, options: TrustOptions) -> Result<()>

Sets option flags for customizing evaluation of a trust object.

pub fn get_network_fetch_allowed(&mut self) -> Result<bool>

Indicates whether this trust object is permitted to fetch missing intermediate certificates from the network.

pub fn set_network_fetch_allowed(&mut self, allowed: bool) -> Result<()>

Specifies whether this trust object is permitted to fetch missing intermediate certificates from the network.

pub fn set_trust_ocsp_response<I: Iterator<Item = impl AsRef<[u8]>>>(
    &mut self,
    ocsp_response: I
) -> Result<()>

Attaches Online Certificate Status Protocol (OSCP) response data to this trust object.

pub fn copy_public_key(&mut self) -> Result<SecKey>

Returns the public key for a leaf certificate after it has been evaluated.

pub fn evaluate(&self) -> Result<TrustResult>

👎 Deprecated:

use evaluate_with_error

Evaluates trust.

pub fn evaluate_with_error(&self) -> Result<(), CFError>

Evaluates trust. Requires macOS 10.14 or iOS, otherwise it just calls evaluate()

pub fn certificate_count(&self) -> CFIndex

Returns the number of certificates in an evaluated certificate chain.

Note: evaluate must first be called on the SecTrust.

pub fn certificate_at_index(&self, ix: CFIndex) -> Option<SecCertificate>

👎 Deprecated:

deprecated by Apple

Returns a specific certificate from the certificate chain used to evaluate trust.

Note: evaluate must first be called on the SecTrust.

Trait Implementations

impl Clone for SecTrust

fn clone(&self) -> SecTrust

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Drop for SecTrust

fn drop(&mut self)

Executes the destructor for this type.

impl PartialEq<SecTrust> for SecTrust

fn eq(&self, other: &SecTrust) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=.

impl TCFType for SecTrust

type Ref = *mut __SecTrust

The reference type wrapped inside this type.

fn as_concrete_TypeRef(&self) -> SecTrustRef

Returns the object as its concrete TypeRef.

unsafe fn wrap_under_get_rule(reference: SecTrustRef) -> Self

Returns an instance of the object, wrapping the underlying CFTypeRef subclass. Use this when following Core Foundation’s “Get Rule”. The reference count is bumped.

fn as_CFTypeRef(&self) -> CFTypeRef

Returns the object as a raw CFTypeRef. The reference count is not adjusted.

unsafe fn wrap_under_create_rule(reference: SecTrustRef) -> Self

Returns an instance of the object, wrapping the underlying CFTypeRef subclass. Use this when following Core Foundation’s “Create Rule”. The reference count is not bumped.

fn type_id() -> CFTypeID

Returns the type ID for this class.

fn as_CFType(&self) -> CFType

Returns the object as a wrapped CFType. The reference count is incremented by one.

fn into_CFType(self) -> CFType

Returns the object as a wrapped CFType. Consumes self and avoids changing the reference count.

fn retain_count(&self) -> isize

Returns the reference count of the object. It is unwise to do anything other than test whether the return value of this method is greater than zero.

fn type_of(&self) -> usize

Returns the type ID of this object.

fn show(&self)

Writes a debugging version of this object on standard error.

fn instance_of<OtherCFType>(&self) -> bool where
    OtherCFType: TCFType, 

Returns true if this value is an instance of another type.

impl<'a> ToVoid<SecTrust> for &'a SecTrust

fn to_void(&self) -> *const c_void

impl ToVoid<SecTrust> for SecTrust

fn to_void(&self) -> *const c_void

impl ToVoid<SecTrust> for SecTrustRef

fn to_void(&self) -> *const c_void

impl ConcreteCFType for SecTrust

impl Eq for SecTrust

impl Send for SecTrust

impl Sync for SecTrust