Enum VerifyError 

pub enum VerifyError {
    ParseBlob(UnarchiveError),
    Fetch,
    BadSignature,
    SubjectMismatch,
    IssuerMismatch,
    Expired,
    ScopeNotSubset,
    MalformedCap,
    MalformedSig,
    LeafCapMissing,
    NonRootMissingParent,
    ChainTooDeep,
}

Errors returned by verify_chain.

Variants

ParseBlob(UnarchiveError)

The leaf or some intermediate sig/cap blob could not be parsed as a valid SimpleArchive.

Fetch

Fetching a referenced blob (cap or sig) from the caller-supplied fetch function failed.

BadSignature

A signature failed to verify against the expected pubkey + cap blob bytes.

SubjectMismatch

The leaf cap’s subject did not match the expected (connecting) peer pubkey.

IssuerMismatch

A cap’s cap_issuer did not match the accompanying sig’s signed_by.

Expired

A cap or one of its parent caps has expired.

ScopeNotSubset

A child cap’s scope was not a subset of its parent’s scope. (Enforcement deferred to the scope-subsumption module — for now this variant is reserved for future use.)

MalformedCap

A cap blob is missing required attributes (e.g. cap_subject, cap_issuer, cap_scope_root, expires_at) or has multiple conflicting values.

MalformedSig

A sig blob is missing required attributes or has multiple conflicting values.

LeafCapMissing

The leaf sig blob refers to a cap blob whose handle the verifier could not retrieve.

NonRootMissingParent

A non-root sig-blob entity (one whose signer differs from the team root) is missing either sig_parent_cap or sig_embedded_parent_proof.

ChainTooDeep

The chain exceeded a sanity-bound depth without terminating at the team root.

Trait Implementations

impl Debug for VerifyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<UnarchiveError> for VerifyError

fn from(e: UnarchiveError) -> Self

Converts to this type from the input type.