Enum Error 

#[non_exhaustive]
pub enum Error {
    NoSvid,
    SourceClosed,
    NoBundle(TrustDomain),
    TrustDomainNotAllowed(TrustDomain),
    AuthorizerConfig(AuthorizerConfigError),
    CertifiedKey(String),
    CertParse(String),
    MissingSpiffeId,
    MultipleSpiffeIds,
    UnauthorizedSpiffeId(SpiffeId),
    VerifierBuilder(String),
    Rustls(Error),
    Source(X509SourceError),
    Internal(String),
    NoTokioRuntime,
    EmptyRootStore,
    NoUsableRootStores,
}

Errors returned by spiffe-rustls.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

NoSvid

The X509Source currently has no SVID.

SourceClosed

The X509Source is closed or cancelled.

NoBundle(TrustDomain)

The X509Source currently has no bundle for the requested trust domain.

TrustDomainNotAllowed(TrustDomain)

The trust domain is not allowed by the trust domain policy.

AuthorizerConfig(AuthorizerConfigError)

Failed to construct an authorizer due to invalid configuration.

CertifiedKey(String)

Failed to create a rustls::sign::CertifiedKey from SVID material.

CertParse(String)

Failed to parse a peer certificate.

MissingSpiffeId

The peer certificate is missing a SPIFFE ID URI SAN.

MultipleSpiffeIds

The peer certificate has multiple SPIFFE ID URI SANs (invalid).

UnauthorizedSpiffeId(SpiffeId)

The peer SPIFFE ID was rejected by the authorization hook.

VerifierBuilder(String)

Failed to build a rustls verifier.

Rustls(Error)

A rustls error occurred.

Source(X509SourceError)

An error from the underlying X509Source.

Internal(String)

Internal error.

NoTokioRuntime

Tokio runtime is required but not available in the current context.

EmptyRootStore

No root certificates were accepted into a root certificate store.

This occurs when building a root certificate store from a trust bundle and none of the provided certificates are valid or accepted by rustls.

NoUsableRootStores

No usable root certificate stores could be built from any trust domain bundle.

This occurs when build_material iterates through all trust domain bundles in the bundle set and fails to build a valid root certificate store for any of them. This is distinct from EmptyRootStore, which indicates a failure for a single trust domain bundle.

Trait Implementations

impl Debug for Error

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for Error

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for Error

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0: use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0: replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<Error> for Error

fn from(source: Error) -> Self

Converts to this type from the input type.

impl From<X509SourceError> for Error

fn from(source: X509SourceError) -> Self

Converts to this type from the input type.