Enum X509ChainError 

#[non_exhaustive]
pub enum X509ChainError {
    Policy(PolicyViolation),
    Provider(ProviderError),
    InvalidDepth,
    InvalidDer {
        kind: &'static str,
        message: String,
    },
    DuplicateExtension {
        position: usize,
        oid: String,
    },
    UntrustedRoot,
    DepthExceeded(usize),
    CertificateNotValid(usize),
    IssuerNotCa(usize),
    PathLengthExceeded {
        position: usize,
        limit: u32,
    },
    NameConstraintViolation {
        position: usize,
        constraining_position: usize,
    },
    UnsupportedCriticalExtension {
        position: usize,
        oid: String,
    },
    InvalidNameConstraints {
        position: usize,
    },
    InvalidKeyUsage {
        position: usize,
        required: &'static str,
    },
    InvalidSignature(usize),
    KeyPolicy {
        position: usize,
        source: PolicyViolation,
    },
    UnsupportedSignatureAlgorithm {
        oid: String,
    },
    InvalidCrl(usize),
    Revoked(usize),
}

Certificate-chain validation failure.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Policy(PolicyViolation)

The operation does not permit this certificate or CRL signature method.

Provider(ProviderError)

The selected cryptographic provider rejected path authentication.

InvalidDepth

The configured path limit cannot contain a certificate.

InvalidDer

A certificate or CRL is malformed DER.

Fields

kind: &'static str

Object type being parsed.

message: String

Parser diagnostic.

DuplicateExtension

A certificate repeats an extension OID, which RFC 5280 forbids.

Fields

position: usize

Position of the malformed certificate in the candidate path.

oid: String

Repeated extension object identifier.

UntrustedRoot

The ordered embedded path cannot be completed to a configured anchor.

DepthExceeded(usize)

The path contains more certificates than allowed.

CertificateNotValid(usize)

A certificate is outside its validity period.

IssuerNotCa(usize)

An issuer certificate is not authorized to issue certificates.

PathLengthExceeded

A CA path-length constraint is violated.

Fields

position: usize

Position of the constraining CA certificate.

limit: u32

Maximum permitted subordinate CA count.

NameConstraintViolation

A subordinate certificate is outside a CA’s permitted name space.

Fields

position: usize

Position of the subordinate certificate.

constraining_position: usize

Position of the CA carrying NameConstraints.

UnsupportedCriticalExtension

A critical certificate extension is not implemented by path validation.

Fields

position: usize

Position of the certificate in the validated path.

oid: String

Extension object identifier.

InvalidNameConstraints

NameConstraints is not a critical CA extension as required by RFC 5280.

Fields

position: usize

Position of the certificate carrying the invalid extension.

InvalidKeyUsage

A certificate key usage extension forbids the required operation.

Fields

position: usize

Position of the certificate in the validated path.

required: &'static str

RFC 5280 key usage required for the operation.

InvalidSignature(usize)

A certificate signature does not verify under its issuer key.

KeyPolicy

An issuer key violates the active key-strength policy.

Fields

position: usize

Position of the issuer certificate in the candidate path.

source: PolicyViolation

Typed key-policy rejection.

UnsupportedSignatureAlgorithm

The certificate or CRL declares an algorithm this build cannot verify.

Fields

oid: String

AlgorithmIdentifier object identifier.

InvalidCrl(usize)

A CRL is not valid for the selected verification time or issuer.

Revoked(usize)

A path certificate was revoked by an applicable CRL.

Trait Implementations

impl Clone for X509ChainError

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for X509ChainError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for X509ChainError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for X509ChainError

impl Error for X509ChainError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<PolicyViolation> for X509ChainError

fn from(source: PolicyViolation) -> Self

Converts to this type from the input type.

impl From<ProviderError> for X509ChainError

fn from(source: ProviderError) -> Self

Converts to this type from the input type.

impl From<X509ChainError> for KeyResolutionError

fn from(source: X509ChainError) -> Self

Converts to this type from the input type.

impl PartialEq for X509ChainError

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for X509ChainError