Skip to main content

VerificationPolicy

xml_sec::policy

Struct VerificationPolicy

pub struct VerificationPolicy {
    pub signature_algorithms: Option<HashSet<SignatureAlgorithm>>,
    pub digest_algorithms: Option<HashSet<DigestAlgorithm>>,
    pub key_trust: KeyTrustPolicy,
    pub reference_uri_types: UriTypeSet,
    pub retrieval_uri_types: UriTypeSet,
    pub transforms: Option<HashSet<String>>,
    pub process_manifests: bool,
    pub xml: XmlInputPolicy,
    pub xpath_here_semantics: XPathHereSemantics,
    pub resources: ResourcePolicy,
}

Expand description

Immutable policy snapshot for XMLDSig verification.

Fields§

§signature_algorithms: Option<HashSet<SignatureAlgorithm>>

Allowed signature methods; None accepts every implemented method subject to independent gates such as KeyTrustPolicy::allowed_legacy_signature_algorithms.

§digest_algorithms: Option<HashSet<DigestAlgorithm>>

Allowed reference digest methods; None accepts every implemented method.

§key_trust: KeyTrustPolicy

Key and certificate trust rules.

§reference_uri_types: UriTypeSet

Allowed Reference URI classes.

§retrieval_uri_types: UriTypeSet

Allowed RetrievalMethod URI classes.

§transforms: Option<HashSet<String>>

Allowed transform and canonicalization URIs; None accepts every implemented algorithm.

§process_manifests: bool

Whether authenticated Manifest references are processed.

§xml: XmlInputPolicy

XML parser rules.

§xpath_here_semantics: XPathHereSemantics

Node selected for the XPath here() extension function.

§resources: ResourcePolicy

Resource ceilings.

Implementations§

impl VerificationPolicy

pub fn validate(&self) -> Result<(), PolicyViolation>

Validate the complete snapshot against implementation hard ceilings.

pub fn check_signature_algorithm( &self, algorithm: SignatureAlgorithm, ) -> Result<(), PolicyViolation>

Enforce the signature algorithm after key resolution.

Trait Implementations§

impl Clone for VerificationPolicy

fn clone(&self) -> VerificationPolicy

Returns a duplicate of the value. Read more

1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more

impl Debug for VerificationPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

impl Default for VerificationPolicy

fn default() -> VerificationPolicy

Returns the “default value” for a type. Read more

Auto Trait Implementations§

impl Freeze for VerificationPolicy

impl RefUnwindSafe for VerificationPolicy

impl Send for VerificationPolicy

impl Sync for VerificationPolicy

impl Unpin for VerificationPolicy

impl UnsafeUnpin for VerificationPolicy

impl UnwindSafe for VerificationPolicy

Blanket Implementations§

impl<T> Any for T
where T: 'static + ?Sized,

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

impl<'a, T, E> AsTaggedExplicit<'a, E> for T
where T: 'a,

fn explicit(self, class: Class, tag: u32) -> TaggedParser<'a, Explicit, Self, E>

impl<'a, T, E> AsTaggedImplicit<'a, E> for T
where T: 'a,

fn implicit( self, class: Class, constructed: bool, tag: u32, ) -> TaggedParser<'a, Implicit, Self, E>

impl<T> Borrow<T> for T
where T: ?Sized,

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

impl<T> BorrowMut<T> for T
where T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

impl<T> CloneToUninit for T
where T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)

Performs copy-assignment from self to dest. Read more

impl<T> From<T> for T

fn from(t: T) -> T

Returns the argument unchanged.

impl<T, U> Into<U> for T
where U: From<T>,

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

impl<T> Same for T

type Output = T

Should always be Self

impl<T> ToOwned for T
where T: Clone,

type Owned = T

The resulting type after obtaining ownership.

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more

impl<T, U> TryFrom<U> for T
where U: Into<T>,

type Error = Infallible

The type returned in the event of a conversion error.

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.