pub enum Rule {
Show 16 variants
Value {
attribute: Oid<'static>,
field: &'static str,
},
Schema {
code: ErrorCode,
field: &'static str,
},
Missing(Oid<'static>),
Forbidden(Oid<'static>),
SigningCertificate,
CredentialReferences(Oid<'static>),
SignatureTimestamp,
ArchiveTimestamp,
Certificate,
ContentType,
DataTypeDescription,
PolicyStore,
Md5,
ArchiveAlgorithm,
SigningCertificateVersion,
IssuerHint,
}Expand description
Format-specific findings preserve their cause instead of a blanket invalid.
Variants§
Value
A present original value fails its attribute’s selected schema.
Fields
Schema
Existing CMS/ESS/CAdES schema diagnostic.
Fields
Missing(Oid<'static>)
Mandatory original attribute is absent.
Forbidden(Oid<'static>)
This original attribute is forbidden or discouraged at the requested level; the finding severity distinguishes SHALL NOT from SHOULD NOT.
SigningCertificate
No signing-certificate protection service exists.
CredentialReferences(Oid<'static>)
Credential references lack this signer’s protected certified attribute or signed assertion (Table1 requirement n).
SignatureTimestamp
The requested level needs a root signature timestamp.
ArchiveTimestamp
The requested archival level needs a root ATSv3.
Certificate
A baseline original container needs the signer’s certificate.
ContentType
CMS content must be id-data for this root baseline signature.
DataTypeDescription
A data-type description is recommended, not mandatory.
PolicyStore
A written store lacks its protected, nonzero policy document digest.
Md5
Actual use of MD5 violates the format, independently of backend support.
ArchiveAlgorithm
Known archive-index and timestamp-imprint digest identities disagree (EN319122-1 §5.5.2); no provider or mathematical comparison is implied.
SigningCertificateVersion
A V2 certificate reference uses SHA-1 instead of a different hash.
IssuerHint
Optional issuerSerial hint SHOULD be omitted (§6.3(g)).