Enum CertificateVerifyError 

pub enum CertificateVerifyError {
    BadPublicKey(String),
    BadSignature(String),
    PayloadEncode(String),
    InvalidSignature,
    UnsupportedAlgorithm(String),
    UnsupportedSignedFields(String),
    UntrustedIssuer {
        key_id: String,
    },
    NoTrustConfigured,
}

Errors verifying an AgentCertificate signature.

Variants

BadPublicKey(String)

Public key in signature.public_key was not valid base64url or wrong length.

BadSignature(String)

Signature bytes were not valid base64url or wrong length.

PayloadEncode(String)

Could not reconstruct canonical signed payload.

InvalidSignature

Signature did not verify against the embedded public key.

UnsupportedAlgorithm(String)

Signature algorithm is not supported (only ed25519 is recognized).

UnsupportedSignedFields(String)

signed_fields does not name the expected payload composition.

UntrustedIssuer

The embedded signature.public_key is not pinned in the operator’s trust root store under kind AgentCert. The signature math may be internally consistent, but the issuer is unknown. Self-signed certificates an attacker mints to authorize their own agent’s tool calls land here.

Fields

key_id: String

NoTrustConfigured

No trust roots configured at all (or none for kind AgentCert). Distinct from UntrustedIssuer so the CLI can render the “configure trust” remediation rather than “key not in store”.

Trait Implementations

impl Debug for CertificateVerifyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CertificateVerifyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for CertificateVerifyError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.