Struct Certificate 

pub struct Certificate { /* private fields */ }

Wraps SecCertificateRef.

Implementations

impl Certificate

pub fn type_id() -> usize

Wraps the corresponding SecCertificateRef operation.

pub fn from_der(der: &[u8]) -> Result<Self>

Wraps the corresponding SecCertificateRef operation.

Examples found in repository

examples/11_cms_cert_bag.rs (line 7)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::from_der(&support::fixture("test-cert.der"))?;
    let encoded = Cms::encode_supporting_certificates(&[certificate])?;
    let decoded = Cms::decode_all_certificates(&encoded)?;
    println!("cms_len={} certs={}", encoded.len(), decoded.len());
    Ok(())
}

examples/05_trust_evaluate.rs (line 7)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::from_der(&support::fixture("test-cert.der"))?;
    let policy = Policy::basic_x509()?;
    let mut trust = Trust::new(&certificate, &[policy])?;
    trust.set_anchor_certificates(&[certificate])?;
    trust.set_anchor_certificates_only(true)?;
    trust.set_network_fetch_allowed(false)?;
    trust.evaluate()?;
    println!("chain_len={}", trust.certificate_chain()?.len());
    Ok(())
}

pub fn import_item( data: &[u8], file_name_or_extension: Option<&str>, format: ExternalFormat, item_type: ExternalItemType, ) -> Result<Self>

Wraps the corresponding SecCertificateRef operation.

Examples found in repository

examples/03_certificate_inspect.rs (lines 7-12)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::import_item(
        &support::fixture("test-cert.pem"),
        Some(".pem"),
        ExternalFormat::Unknown,
        ExternalItemType::Certificate,
    )?;
    let exported_pem = certificate.export_item(ExternalFormat::X509Certificate, true)?;
    println!(
        "subject={:?} emails={:?} serial_len={} exported_pem_len={}",
        certificate.subject_summary()?,
        certificate.email_addresses()?,
        certificate.serial_number()?.len(),
        exported_pem.len()
    );
    Ok(())
}

pub fn export_item( &self, format: ExternalFormat, pem_armour: bool, ) -> Result<Vec<u8>>

Wraps the corresponding SecCertificateRef operation.

Examples found in repository

examples/03_certificate_inspect.rs (line 13)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::import_item(
        &support::fixture("test-cert.pem"),
        Some(".pem"),
        ExternalFormat::Unknown,
        ExternalItemType::Certificate,
    )?;
    let exported_pem = certificate.export_item(ExternalFormat::X509Certificate, true)?;
    println!(
        "subject={:?} emails={:?} serial_len={} exported_pem_len={}",
        certificate.subject_summary()?,
        certificate.email_addresses()?,
        certificate.serial_number()?.len(),
        exported_pem.len()
    );
    Ok(())
}

pub fn from_pem(pem: &[u8]) -> Result<Self>

Wraps the corresponding SecCertificateRef operation.

Examples found in repository

examples/14_key_import_sign_verify.rs (line 16)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let raw_key = PrivateKey::from_data(
        &support::fixture("test-key-rsa.pkcs1.der"),
        KeyType::Rsa,
        2048,
    )?;
    let signature = raw_key.sign(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs",
    )?;
    let certificate = Certificate::from_pem(&support::fixture("test-cert.pem"))?;
    let verified = certificate.public_key()?.verify_signature(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs",
        &signature,
    )?;
    println!("signature_len={} verified={verified}", signature.len());
    Ok(())
}

examples/15_key_encrypt_export.rs (line 25)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let private_key = PrivateKey::from_data(
        &std::fs::read("tests/fixtures/test-key-rsa.pkcs1.der")?,
        KeyType::Rsa,
        2048,
    )?;
    let public_key = private_key.public_key()?;

    let ciphertext = public_key.encrypt(
        EncryptionAlgorithm::RsaEncryptionOaepSha256,
        b"security-rs example",
    )?;
    let plaintext =
        private_key.decrypt(EncryptionAlgorithm::RsaEncryptionOaepSha256, &ciphertext)?;
    assert_eq!(plaintext, b"security-rs example");

    let signature = private_key.sign(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs example",
    )?;
    let certificate = Certificate::from_pem(&std::fs::read("tests/fixtures/test-cert.pem")?)?;
    assert!(certificate.public_key()?.verify_signature(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs example",
        &signature,
    )?);

    println!(
        "key_type_id={} block_size={} exported_private={} exported_public={}",
        PrivateKey::type_id(),
        public_key.block_size(),
        private_key.external_representation()?.len(),
        public_key.external_representation()?.len(),
    );

    Ok(())
}

pub fn subject_summary(&self) -> Result<Option<String>>

Wraps the corresponding SecCertificateRef operation.

Examples found in repository

examples/02_identity_pkcs12.rs (line 14)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let identity =
        Identity::import_pkcs12_first(&support::fixture("test-identity.p12"), "password")?;
    let certificate = identity.certificate()?;
    println!(
        "label={:?} chain_count={} subject={:?}",
        identity.label()?,
        identity.chain_count(),
        certificate.subject_summary()?
    );
    Ok(())
}

examples/03_certificate_inspect.rs (line 16)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::import_item(
        &support::fixture("test-cert.pem"),
        Some(".pem"),
        ExternalFormat::Unknown,
        ExternalItemType::Certificate,
    )?;
    let exported_pem = certificate.export_item(ExternalFormat::X509Certificate, true)?;
    println!(
        "subject={:?} emails={:?} serial_len={} exported_pem_len={}",
        certificate.subject_summary()?,
        certificate.email_addresses()?,
        certificate.serial_number()?.len(),
        exported_pem.len()
    );
    Ok(())
}

pub fn common_name(&self) -> Result<Option<String>>

Wraps the corresponding SecCertificateRef operation.

pub fn email_addresses(&self) -> Result<Vec<String>>

Wraps the corresponding SecCertificateRef operation.

Examples found in repository

examples/03_certificate_inspect.rs (line 17)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::import_item(
        &support::fixture("test-cert.pem"),
        Some(".pem"),
        ExternalFormat::Unknown,
        ExternalItemType::Certificate,
    )?;
    let exported_pem = certificate.export_item(ExternalFormat::X509Certificate, true)?;
    println!(
        "subject={:?} emails={:?} serial_len={} exported_pem_len={}",
        certificate.subject_summary()?,
        certificate.email_addresses()?,
        certificate.serial_number()?.len(),
        exported_pem.len()
    );
    Ok(())
}

pub fn normalized_subject_sequence(&self) -> Result<Vec<u8>>

Wraps the corresponding SecCertificateRef operation.

pub fn normalized_issuer_sequence(&self) -> Result<Vec<u8>>

Wraps the corresponding SecCertificateRef operation.

pub fn serial_number(&self) -> Result<Vec<u8>>

Wraps the corresponding SecCertificateRef operation.

Examples found in repository

examples/03_certificate_inspect.rs (line 18)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let certificate = Certificate::import_item(
        &support::fixture("test-cert.pem"),
        Some(".pem"),
        ExternalFormat::Unknown,
        ExternalItemType::Certificate,
    )?;
    let exported_pem = certificate.export_item(ExternalFormat::X509Certificate, true)?;
    println!(
        "subject={:?} emails={:?} serial_len={} exported_pem_len={}",
        certificate.subject_summary()?,
        certificate.email_addresses()?,
        certificate.serial_number()?.len(),
        exported_pem.len()
    );
    Ok(())
}

pub fn not_valid_before(&self) -> Result<Option<SystemTime>>

Wraps the corresponding SecCertificateRef operation.

pub fn not_valid_after(&self) -> Result<Option<SystemTime>>

Wraps the corresponding SecCertificateRef operation.

pub fn der_data(&self) -> Result<Vec<u8>>

Wraps the corresponding SecCertificateRef operation.

pub fn public_key(&self) -> Result<PublicKey>

Wraps the corresponding SecCertificateRef operation.

Examples found in repository

examples/14_key_import_sign_verify.rs (line 17)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let raw_key = PrivateKey::from_data(
        &support::fixture("test-key-rsa.pkcs1.der"),
        KeyType::Rsa,
        2048,
    )?;
    let signature = raw_key.sign(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs",
    )?;
    let certificate = Certificate::from_pem(&support::fixture("test-cert.pem"))?;
    let verified = certificate.public_key()?.verify_signature(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs",
        &signature,
    )?;
    println!("signature_len={} verified={verified}", signature.len());
    Ok(())
}

examples/15_key_encrypt_export.rs (line 26)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let private_key = PrivateKey::from_data(
        &std::fs::read("tests/fixtures/test-key-rsa.pkcs1.der")?,
        KeyType::Rsa,
        2048,
    )?;
    let public_key = private_key.public_key()?;

    let ciphertext = public_key.encrypt(
        EncryptionAlgorithm::RsaEncryptionOaepSha256,
        b"security-rs example",
    )?;
    let plaintext =
        private_key.decrypt(EncryptionAlgorithm::RsaEncryptionOaepSha256, &ciphertext)?;
    assert_eq!(plaintext, b"security-rs example");

    let signature = private_key.sign(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs example",
    )?;
    let certificate = Certificate::from_pem(&std::fs::read("tests/fixtures/test-cert.pem")?)?;
    assert!(certificate.public_key()?.verify_signature(
        SignatureAlgorithm::RsaSignatureMessagePkcs1v15Sha256,
        b"security-rs example",
        &signature,
    )?);

    println!(
        "key_type_id={} block_size={} exported_private={} exported_public={}",
        PrivateKey::type_id(),
        public_key.block_size(),
        private_key.external_representation()?.len(),
        public_key.external_representation()?.len(),
    );

    Ok(())
}

pub fn add_to_keychain(&self) -> Result<()>

Wraps the corresponding SecCertificateRef operation.

pub fn values(&self, keys: &[&str]) -> Result<Value>

Wraps the corresponding SecCertificateRef operation.

pub fn long_description(&self) -> Result<String>

Wraps the corresponding SecCertificateRef operation.

pub fn short_description(&self) -> Result<String>

Wraps the corresponding SecCertificateRef operation.

pub fn preferred(name: &str, key_usage: &[&str]) -> Result<Option<Self>>

Wraps the corresponding SecCertificateRef operation.

pub fn set_preferred( certificate: Option<&Self>, name: &str, key_usage: &[&str], ) -> Result<()>

Wraps the corresponding SecCertificateRef operation.

Trait Implementations

impl Debug for Certificate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.