Struct SslReport

Source

pub struct SslReport {
    pub domain: String,
    pub chain: Vec<CertDetail>,
    pub protocol_version: Option<String>,
    pub san_names: Vec<String>,
    pub is_valid: bool,
    pub hostname_verified: bool,
    pub days_until_expiry: i64,
    pub caa: Option<CaaPolicy>,
}

Expand description

Full SSL certificate report for a domain.

Fields§

§domain: String

The domain that was inspected

§chain: Vec<CertDetail>

Certificate chain from leaf to root (as many as the server provides)

§protocol_version: Option<String>

TLS protocol version (best-effort detection)

§san_names: Vec<String>

Subject Alternative Names from the leaf certificate

§is_valid: bool

Whether the leaf certificate is within its validity period.

This reflects ONLY the date-range check (notBefore <= now <= notAfter) of the leaf certificate. It does NOT verify the certificate chain’s trust (this checker uses danger_accept_invalid_certs(true) to inspect broken/self-signed certs) nor that the certificate matches the requested hostname — see SslReport::hostname_verified. A date-valid cert may still be self-signed, issued by an untrusted CA, or presented for the wrong host.

§hostname_verified: bool

Whether the leaf certificate’s SAN dNSNames (or CN as a legacy fallback) match the requested domain, per RFC 6125 (exact and single-label wildcard matches).

This is an additive signal independent of is_valid. Chain trust is NOT verified here: a true value means the cert was presented for the right host, not that it was issued by a trusted CA.

§days_until_expiry: i64

Days until the leaf certificate expires

§caa: Option<CaaPolicy>

CAA (Certification Authority Authorization) policy for the domain plus a comparison against the presented certificate’s issuer.

CAA is consulted by CAs at issuance time, not by clients at validation time, so a mismatch here is informational — see the note field on CaaPolicy.

SslReport

Struct SslReport Copy item path

Fields§

Trait Implementations§

impl Clone for SslReport

fn clone(&self) -> SslReport

fn clone_from(&mut self, source: &Self)

impl Debug for SslReport

fn fmt(&self, f: &mut Formatter<'_>) -> Result

impl<'de> Deserialize<'de> for SslReport

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where __D: Deserializer<'de>,

impl Serialize for SslReport

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>where __S: Serializer,

Auto Trait Implementations§

impl Freeze for SslReport

impl RefUnwindSafe for SslReport

impl Send for SslReport

impl Sync for SslReport

impl Unpin for SslReport

impl UnsafeUnpin for SslReport

impl UnwindSafe for SslReport

Blanket Implementations§

impl<T> Any for Twhere T: 'static + ?Sized,

fn type_id(&self) -> TypeId

impl<'a, T, E> AsTaggedExplicit<'a, E> for Twhere T: 'a,

fn explicit(self, class: Class, tag: u32) -> TaggedParser<'a, Explicit, Self, E>

impl<'a, T, E> AsTaggedImplicit<'a, E> for Twhere T: 'a,

fn implicit( self, class: Class, constructed: bool, tag: u32, ) -> TaggedParser<'a, Implicit, Self, E>

impl<T> Borrow<T> for Twhere T: ?Sized,

fn borrow(&self) -> &T

impl<T> BorrowMut<T> for Twhere T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

impl<T> CloneToUninit for Twhere T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

impl<T> DeserializeOwned for Twhere T: for<'de> Deserialize<'de>,

impl<T> From<T> for T

fn from(t: T) -> T

impl<T> Instrument for T

fn instrument(self, span: Span) -> Instrumented<Self>

fn in_current_span(self) -> Instrumented<Self>

impl<T, U> Into<U> for Twhere U: From<T>,

fn into(self) -> U

impl<T> IntoEither for T

fn into_either(self, into_left: bool) -> Either<Self, Self>

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>where F: FnOnce(&Self) -> bool,

impl<T> Pointable for T

const ALIGN: usize

type Init = T

unsafe fn init(init: <T as Pointable>::Init) -> usize

unsafe fn deref<'a>(ptr: usize) -> &'a T

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

unsafe fn drop(ptr: usize)

impl<T> PolicyExt for Twhere T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>where T: Sized + Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>where T: Sized + Policy<B, E>, P: Policy<B, E>,

impl<T> ToOwned for Twhere T: Clone,

type Owned = T

fn to_owned(&self) -> T

fn clone_into(&self, target: &mut T)

impl<T, U> TryFrom<U> for Twhere U: Into<T>,

type Error = Infallible

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

impl<T, U> TryInto<U> for Twhere U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

impl<V, T> VZip<V> for Twhere V: MultiLane<T>,

fn vzip(self) -> V

impl<T> WithSubscriber for T

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>where S: Into<Dispatch>,

fn with_current_subscriber(self) -> WithDispatch<Self>

Struct SslReport

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
where __D: Deserializer<'de>,

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
where S: Serializer,

impl<T> Any for T
where T: 'static + ?Sized,

impl<'a, T, E> AsTaggedExplicit<'a, E> for T
where T: 'a,

impl<'a, T, E> AsTaggedImplicit<'a, E> for T
where T: 'a,

impl<T> Borrow<T> for T
where T: ?Sized,

impl<T> BorrowMut<T> for T
where T: ?Sized,

impl<T> CloneToUninit for T
where T: Clone,

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,

impl<T, U> Into<U> for T
where U: From<T>,

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
where F: FnOnce(&Self) -> bool,

impl<T> PolicyExt for T
where T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

impl<T> ToOwned for T
where T: Clone,

impl<T, U> TryFrom<U> for T
where U: Into<T>,

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,