Enum CertChainError 

#[non_exhaustive]
pub enum CertChainError {
    NoTrustAnchors,
    CertificateExpired {
        subject: String,
        not_after: String,
    },
    AllTrustAnchorsExpired {
        issuer: String,
    },
    SignatureVerification {
        subject: String,
    },
    PathLenViolated {
        intermediate_count: usize,
        path_len: u8,
    },
    NotACa {
        subject: String,
    },
    Cycle {
        subject: String,
    },
    NoMatchingIssuer {
        issuer: String,
    },
    TooDeep,
    Other(String),
}

Structured failure reason for certificate chain validation.

Returned inside SmimeError::CertChain. Callers can match on this enum to distinguish specific failure modes (e.g. expired certificate vs. missing trust anchor) without parsing error strings.

Compatibility stubs

Two variants — AllTrustAnchorsExpired and PathLenViolated — are marked #[deprecated] and are never emitted by the current validator. They exist solely so that serialized data produced by older versions of this crate can be deserialized without error. New code should not match on them; see each variant’s deprecation message for the current equivalent.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

NoTrustAnchors

No trust anchors were provided.

CertificateExpired

Certificate validity period does not contain the check time.

Fields

subject: String

Subject DN of the certificate that failed the validity check.

not_after: String

The certificate’s notAfter date (ISO 8601).

AllTrustAnchorsExpired

👎Deprecated since 0.2.0:

match CertificateExpired instead

All trust anchors matching the issuer DN are outside their validity period.

Present only for deserialization compatibility with data produced by older versions of this crate; never emitted by the current validator. Match CertChainError::TooDeep or CertChainError::CertificateExpired for the equivalent current failure modes.

Fields

issuer: String

👎Deprecated since 0.2.0:

match CertificateExpired instead

Issuer DN for which all matching trust anchors were expired.

SignatureVerification

Certificate signature does not match the issuer’s public key.

Fields

subject: String

Subject DN of the certificate whose signature could not be verified.

PathLenViolated

👎Deprecated:

never produced by the current pkix-chain-based validator; match TooDeep instead

A pathLen constraint in a CA certificate was violated.

Present only for deserialization compatibility with data produced by older versions of this crate; never emitted by the current validator. Match CertChainError::TooDeep for the equivalent current failure mode.

Fields

intermediate_count: usize

👎Deprecated:

never produced by the current pkix-chain-based validator; match TooDeep instead

Number of intermediate CA certificates below the constrained issuer.

path_len: u8

👎Deprecated:

never produced by the current pkix-chain-based validator; match TooDeep instead

The pathLen value from the BasicConstraints extension.

NotACa

An intermediate certificate lacks the CA flag (BasicConstraints.cA = false).

Fields

subject: String

Subject DN of the certificate that was found not to be a CA.

Cycle

The certificate chain contains a cycle (A signed by B, B signed by A).

Fields

subject: String

Subject DN of the certificate that closed the cycle.

NoMatchingIssuer

No trust anchor or intermediate certificate matches the issuer DN.

Fields

issuer: String

Issuer DN for which no matching certificate was found.

TooDeep

Certificate chain exceeds the maximum allowed depth.

Other(String)

Other chain validation error (DER encoding failures, etc.).

Trait Implementations

impl Clone for CertChainError

fn clone(&self) -> CertChainError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertChainError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CertChainError

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for CertChainError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CertChainError

impl PartialEq for CertChainError

fn eq(&self, other: &CertChainError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for CertChainError

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CertChainError