Struct SecurityConfig 

pub struct SecurityConfig<T, C> {
    pub trusted_store: T,
    pub certificate: C,
}

A security config has both a trusted store and a client certificate.

• This is used to configure the client certificate issuer: we need both
  1. When issuing client certificates: the certificate (+intermediates) to sign the CMS extension.
  2. When validating client certificates: the trusted roots to validate the issuing cert in the signed CMS extension
• This is also used to configure the Root CA
  • The Root CA doesn’t need to be secure. It’s just there to sanity check client certs are owned by us before the custom validation logic kicks in.
  • The Root CA is the issuer of client certificates. Technically we need an issuer, but the real validation is the CMS extension.

Fields

trusted_store: T

certificate: C

Trait Implementations

impl<T: IsGlobal, C: CertificateConfig> CertificateConfig for SecurityConfig<T, C>

type Error = <C as CertificateConfig>::Error

fn intermediates(&self) -> Result<Arc<Vec<X509>>, Self::Error>

Computes the list of intermediate certificates.

fn certificate(&self) -> Result<Arc<X509CertificateInfo>, Self::Error>

Computes the X509 leaf certificate

fn is_dynamic(&self) -> bool

Whether the certificate can change over time, ie Let’s Encrypt certificates.

fn memoize(self) -> MemoizedCertificate<Self>

where Self: Sized,

Returns a memoized CertificateConfig.

fn cache(self) -> Result<CachedCertificate, Self::Error>

where Self: Sized,

Returns a cached CertificateConfig.

impl<T: Clone, C: Clone> Clone for SecurityConfig<T, C>

fn clone(&self) -> SecurityConfig<T, C>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<T: Debug, C: Debug> Debug for SecurityConfig<T, C>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<T: TrustedStoreConfig, C: IsGlobal> TrustedStoreConfig for SecurityConfig<T, C>

type Error = <T as TrustedStoreConfig>::Error

fn root_certificates(&self) -> Result<Arc<X509Store>, Self::Error>