Enum CertFailure 

#[non_exhaustive]
pub enum CertFailure {
    Expired,
    NotYetValid,
    NameMismatch {
        presented: Vec<String>,
    },
    UnknownIssuer,
    Revoked,
    BadSignature,
    PinMismatch,
    Malformed,
    Other(String),
}

Why a server’s certificate was refused.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Expired

The certificate’s validity period has ended.

NotYetValid

The certificate’s validity period has not begun.

NameMismatch

The certificate is valid, but for other names. RFC 5922 §7.3 requires the account’s SIP domain, not the host an SRV record named.

Fields

presented: Vec<String>

The names the certificate did present.

UnknownIssuer

The chain did not reach a trusted root.

Revoked

The issuer has revoked the certificate.

BadSignature

The certificate’s signature does not verify against its issuer’s key.

PinMismatch

The chain was fine, but the leaf is not the certificate pinned by TlsPolicy::Pinned.

Malformed

The certificate could not be parsed.

Usually still carries a fingerprint: the verifier records the leaf’s SHA-256 over the raw wire bytes before delegating to the policy verifier that raises this failure, so under TlsPolicy::SystemRoots a malformed leaf still reaches you as a typed UntrustedCertificate with a usable fingerprint — this variant exists for the narrower case where parsing fails before that point. Under TlsPolicy::Pinned it cannot arise at all: that verifier compares raw bytes and never parses X.509.

Other(String)

A TLS failure this enum has no dedicated variant for. This can still be a certificate problem — one of the less common rustls::CertificateError variants this crate has not given its own case — in which case the message is prefixed "certificate: ", or it can be a non-certificate TLS failure (a protocol error, no shared cipher suite) reported as-is.

Trait Implementations

impl Clone for CertFailure

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertFailure

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CertFailure

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CertFailure

impl PartialEq for CertFailure

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CertFailure