Struct Certificate 

pub struct Certificate { /* private fields */ }

Implementations

impl Certificate

pub fn from_der(der: &[u8]) -> Result<Self>

Examples found in repository

examples/11_cms_cert_bag.rs (line 7)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::from_der(&support::fixture("test-cert.der"))?;
    let encoded = Cms::encode_supporting_certificates(&[certificate])?;
    let decoded = Cms::decode_all_certificates(&encoded)?;
    println!("cms_len={} certs={}", encoded.len(), decoded.len());
    Ok(())
}

examples/05_trust_evaluate.rs (line 7)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::from_der(&support::fixture("test-cert.der"))?;
    let policy = Policy::basic_x509()?;
    let mut trust = Trust::new(&certificate, &[policy])?;
    trust.set_anchor_certificates(&[certificate])?;
    trust.set_anchor_certificates_only(true)?;
    trust.set_network_fetch_allowed(false)?;
    trust.evaluate()?;
    println!("chain_len={}", trust.certificate_chain()?.len());
    Ok(())
}

pub fn import_item( data: &[u8], file_name_or_extension: Option<&str>, format: ExternalFormat, item_type: ExternalItemType, ) -> Result<Self>

Examples found in repository

examples/03_certificate_inspect.rs (lines 7-12)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::import_item(
        &support::fixture("test-cert.pem"),
        Some(".pem"),
        ExternalFormat::Unknown,
        ExternalItemType::Certificate,
    )?;
    let exported_pem = certificate.export_item(ExternalFormat::X509Certificate, true)?;
    println!(
        "subject={:?} emails={:?} serial_len={} exported_pem_len={}",
        certificate.subject_summary()?,
        certificate.email_addresses()?,
        certificate.serial_number()?.len(),
        exported_pem.len()
    );
    Ok(())
}

pub fn export_item( &self, format: ExternalFormat, pem_armour: bool, ) -> Result<Vec<u8>>

Examples found in repository

examples/03_certificate_inspect.rs (line 13)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::import_item(
        &support::fixture("test-cert.pem"),
        Some(".pem"),
        ExternalFormat::Unknown,
        ExternalItemType::Certificate,
    )?;
    let exported_pem = certificate.export_item(ExternalFormat::X509Certificate, true)?;
    println!(
        "subject={:?} emails={:?} serial_len={} exported_pem_len={}",
        certificate.subject_summary()?,
        certificate.email_addresses()?,
        certificate.serial_number()?.len(),
        exported_pem.len()
    );
    Ok(())
}

pub fn from_pem(pem: &[u8]) -> Result<Self>

Examples found in repository

examples/14_key_import_sign_verify.rs (line 16)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let raw_key = PrivateKey::from_data(
        &support::fixture("test-key-rsa.pkcs1.der"),
        KeyType::Rsa,
        2048,
    )?;
    let signature = raw_key.sign(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs",
    )?;
    let certificate = Certificate::from_pem(&support::fixture("test-cert.pem"))?;
    let verified = certificate.public_key()?.verify_signature(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs",
        &signature,
    )?;
    println!("signature_len={} verified={verified}", signature.len());
    Ok(())
}

pub fn subject_summary(&self) -> Result<Option<String>>

Examples found in repository

examples/02_identity_pkcs12.rs (line 13)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let identity = Identity::import_pkcs12_first(&support::fixture("test-identity.p12"), "password")?;
    let certificate = identity.certificate()?;
    println!(
        "label={:?} chain_count={} subject={:?}",
        identity.label()?,
        identity.chain_count(),
        certificate.subject_summary()?
    );
    Ok(())
}

examples/03_certificate_inspect.rs (line 16)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::import_item(
        &support::fixture("test-cert.pem"),
        Some(".pem"),
        ExternalFormat::Unknown,
        ExternalItemType::Certificate,
    )?;
    let exported_pem = certificate.export_item(ExternalFormat::X509Certificate, true)?;
    println!(
        "subject={:?} emails={:?} serial_len={} exported_pem_len={}",
        certificate.subject_summary()?,
        certificate.email_addresses()?,
        certificate.serial_number()?.len(),
        exported_pem.len()
    );
    Ok(())
}

pub fn common_name(&self) -> Result<Option<String>>

pub fn email_addresses(&self) -> Result<Vec<String>>

Examples found in repository

examples/03_certificate_inspect.rs (line 17)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::import_item(
        &support::fixture("test-cert.pem"),
        Some(".pem"),
        ExternalFormat::Unknown,
        ExternalItemType::Certificate,
    )?;
    let exported_pem = certificate.export_item(ExternalFormat::X509Certificate, true)?;
    println!(
        "subject={:?} emails={:?} serial_len={} exported_pem_len={}",
        certificate.subject_summary()?,
        certificate.email_addresses()?,
        certificate.serial_number()?.len(),
        exported_pem.len()
    );
    Ok(())
}

pub fn normalized_subject_sequence(&self) -> Result<Vec<u8>>

pub fn normalized_issuer_sequence(&self) -> Result<Vec<u8>>

pub fn serial_number(&self) -> Result<Vec<u8>>

Examples found in repository

examples/03_certificate_inspect.rs (line 18)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::import_item(
        &support::fixture("test-cert.pem"),
        Some(".pem"),
        ExternalFormat::Unknown,
        ExternalItemType::Certificate,
    )?;
    let exported_pem = certificate.export_item(ExternalFormat::X509Certificate, true)?;
    println!(
        "subject={:?} emails={:?} serial_len={} exported_pem_len={}",
        certificate.subject_summary()?,
        certificate.email_addresses()?,
        certificate.serial_number()?.len(),
        exported_pem.len()
    );
    Ok(())
}

pub fn not_valid_before(&self) -> Result<Option<SystemTime>>

pub fn not_valid_after(&self) -> Result<Option<SystemTime>>

pub fn der_data(&self) -> Result<Vec<u8>>

pub fn public_key(&self) -> Result<PublicKey>

Examples found in repository

examples/14_key_import_sign_verify.rs (line 17)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let raw_key = PrivateKey::from_data(
        &support::fixture("test-key-rsa.pkcs1.der"),
        KeyType::Rsa,
        2048,
    )?;
    let signature = raw_key.sign(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs",
    )?;
    let certificate = Certificate::from_pem(&support::fixture("test-cert.pem"))?;
    let verified = certificate.public_key()?.verify_signature(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs",
        &signature,
    )?;
    println!("signature_len={} verified={verified}", signature.len());
    Ok(())
}

Trait Implementations

impl Debug for Certificate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.