#[non_exhaustive]pub struct VerifyResult {
pub status: DsigStatus,
pub signed_info_references: Vec<ReferenceResult>,
pub manifest_references: Vec<ReferenceResult>,
pub canonicalized_signed_info: Option<Vec<u8>>,
}Expand description
End-to-end XMLDSig verification result for one <Signature>.
Fields (Non-exhaustive)§
This struct is marked as non-exhaustive
Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.status: DsigStatusCore XMLDSig status for the <SignedInfo> references and signature value.
Manifest reference failures do not alter this field; inspect
Self::manifest_references before accepting Manifest-backed data.
signed_info_references: Vec<ReferenceResult><Reference> verification results from <SignedInfo>.
On fail-fast, this includes references up to and including
the first digest mismatch only.
manifest_references: Vec<ReferenceResult><Manifest> reference results.
Populated only when VerifyContext::process_manifests(true) is enabled
and core signature validation succeeds.
Includes only references from signed direct-child <ds:Object>/<ds:Manifest>
blocks that are referenced from <SignedInfo>.
Each entry has an independent status that does not alter Self::status.
Callers must inspect every entry before accepting Manifest-backed data.
Unsigned/unreferenced direct-child Manifest blocks are skipped, so an
empty list does not imply that no Manifest elements existed in verify() input.
canonicalized_signed_info: Option<Vec<u8>>Canonicalized <SignedInfo> bytes when store_pre_digest is enabled
and verification reaches SignedInfo canonicalization.