Enum RejectionReason 

#[non_exhaustive]
pub enum RejectionReason<'a> {
    EmptyPath,
    DuplicateCertificate {
        earlier: usize,
    },
    AnchorIncluded,
    Validity,
    Issuer,
    NotAuthority,
    KeyCertSign,
    EmptyAuthorityName,
    PathLength {
        source: ConstraintSource,
        limit: u32,
    },
    Signature,
    UnsupportedSignature,
    CriticalExtension(Oid<'a>),
    MalformedExtension {
        extension: Oid<'a>,
        code: ErrorCode,
        field: &'static str,
        offset: u64,
    },
    NameConstraintsOnNonAuthority,
    NameConstraints {
        source: ConstraintSource,
        failure: NameConstraintFailure,
    },
    Policies,
}

A completed semantic rejection, distinct from inability to execute a check.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

EmptyPath

A certification path must contain at least one certificate.

DuplicateCertificate

The same encoded certificate already occurs at the named position.

Fields

earlier: usize

The earlier leaf-first position.

AnchorIncluded

The trust anchor’s own certificate is not part of a prospective path.

Validity

The certificate does not cover the requested validation interval.

Issuer

The certificate’s issuer name differs from the expected issuer.

NotAuthority

An intermediate does not assert certificate-authority status.

KeyCertSign

An intermediate’s KeyUsage forbids signing certificates.

EmptyAuthorityName

An asserted authority has an empty subject name.

PathLength

The path exceeds an authority’s pathLenConstraint.

Fields

source: ConstraintSource

The authority whose retained limit was exhausted.

limit: u32

The original pathLenConstraint, before counter decrements.

Signature

The provider completed the signature check with a negative answer.

UnsupportedSignature

The provider cannot verify this algorithm/key/parameter combination.

CriticalExtension(Oid<'a>)

A critical extension is not understood.

MalformedExtension

A relevant extension could not be decoded semantically.

Fields

extension: Oid<'a>

The extension’s type identifier.

code: ErrorCode

The original decoding code.

field: &'static str

The original schema field.

offset: u64

The original document offset.

NameConstraintsOnNonAuthority

A name constraint is carried by a certificate that is not a CA.

NameConstraints

A name violates a constraint originating above this certificate.

Fields

source: ConstraintSource

The authority or anchor that supplied the decisive constraint.

failure: NameConstraintFailure

The completed constraint result.

Policies

The path does not satisfy the requested/required certificate policies.

Trait Implementations

impl<'a> Clone for RejectionReason<'a>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for RejectionReason<'a>

impl<'a> Debug for RejectionReason<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> Eq for RejectionReason<'a>

impl<'a> PartialEq for RejectionReason<'a>

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl<'a> StructuralPartialEq for RejectionReason<'a>