Struct webauthn_rs_core::interface::AttestationCa

pub struct AttestationCa {
    pub ca: X509,
}

A structure representing an Attestation CA and other options associated to this CA.

Generally depending on the Attestation CA in use, this can help determine properties of the authenticator that is in use.

Fields

ca: X509

The x509 root CA of the attestation chain that a security key will be attested to.

Implementations

impl AttestationCa

pub fn new_from_der(data: &[u8]) -> Result<Self, WebauthnError>

Create a customised attestation CA from a DER public key.

pub fn apple_webauthn_root_ca() -> Self

The Apple TouchID and FaceID root CA.

pub fn yubico_u2f_root_ca_serial_457200631() -> Self

The yubico u2f root ca. Applies to all devices up to and including series 5.

pub fn microsoft_tpm_root_certificate_authority_2014() -> Self

The microsoft root CA for TPM attestation.

Not eligible for strict - many TPM’s use SHA1 in signatures, which means they are potentially weak.

In the future we may reject RS1 signatures, allowing this to be moved into the strict category.

pub fn nitrokey_fido2_root_ca() -> Self

Nitrokey root CA for their FIDO2 device range.

Not eligible for strict - hardware is difficult to interact with, low quality, and easy to break or destroy.

pub fn nitrokey_u2f_root_ca() -> Self

Nitrokey root CA for their U2F device range.

Not eligible for strict - hardware is difficult to interact with, low quality, and easy to break or destroy.

pub fn android_root_ca_1() -> Self

Android ROOT CA 1

pub fn android_root_ca_2() -> Self

Android ROOT CA 2

pub fn android_root_ca_3() -> Self

Android ROOT CA 3

pub fn android_software_ca() -> Self

Android SOFTWARE ONLY root CA

pub fn google_safetynet_ca() -> Self

Google SafetyNet CA (for android)

Trait Implementations

impl Clone for AttestationCa

fn clone(&self) -> AttestationCa

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AttestationCa

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AttestationCa

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
    __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Into<SerialisableAttestationCa> for AttestationCa

fn into(self) -> SerialisableAttestationCa

Converts this type into the (usually inferred) input type.

impl Serialize for AttestationCa

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>where
    __S: Serializer,

Serialize this value into the given Serde serializer.

impl TryFrom<SerialisableAttestationCa> for AttestationCa

type Error = WebauthnError

The type returned in the event of a conversion error.

fn try_from(data: SerialisableAttestationCa) -> Result<Self, Self::Error>

Performs the conversion.