Enum PolicyViolation

Source

#[non_exhaustive]pub enum PolicyViolation {
Show 15 variants    Configuration {
        reason: &'static str,
    },
    ManifestProcessingDisabled,
    SignatureProfile {
        profile: SignatureConstraints,
        reason: &'static str,
    },
    AuthorizationExpired,
    Algorithm {
        operation: &'static str,
        algorithm: String,
    },
    HmacOutputLength {
        minimum: usize,
        maximum: usize,
        actual: usize,
    },
    ResourceLimit {
        resource: &'static str,
        maximum: usize,
        actual: usize,
    },
    ResourceLimitExceeded {
        resource: &'static str,
        maximum: usize,
    },
    KdfIterationsOutsideLimit {
        maximum: usize,
    },
    InvalidResourceLimit {
        resource: &'static str,
        requirement: &'static str,
        actual: usize,
    },
    KeyTrust {
        reason: &'static str,
    },
    XmlInput {
        reason: &'static str,
    },
    Uri {
        operation: &'static str,
        reason: &'static str,
    },
    KeySize {
        operation: &'static str,
        key_type: &'static str,
        minimum_bits: usize,
        maximum_bits: usize,
        actual_bits: usize,
    },
    InvalidKeyMaterial {
        operation: &'static str,
        key_type: &'static str,
        reason: &'static str,
    },
}

Expand description

A typed rejection produced by an operation policy.

Variants (Non-exhaustive)§

This enum is marked as non-exhaustive

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

§

Configuration

Contradictory policy layers or an unavailable compiled requirement.

Fields

§reason: &'static str

Stable, non-secret diagnostic.

§

ManifestProcessingDisabled

The immutable operation policy forbids executing Manifest references.

§

SignatureProfile

Untrusted XML does not satisfy the selected signature profile.

Fields

§profile: SignatureConstraints

Compiled protocol constraint being enforced.

§reason: &'static str

Stable, non-secret explanation of the document defect.

§

AuthorizationExpired

An explicitly authorized exception is not valid at operation time.

§

Algorithm

An algorithm is outside the operation allowlist.

Fields

§operation: &'static str

Operation evaluating the algorithm.

§algorithm: String

Stable algorithm URI or diagnostic name.

§

HmacOutputLength

An HMAC output length is outside the operation’s configured bounds.

Fields

§minimum: usize

Minimum output length selected by policy.

§maximum: usize

Full output width of the selected HMAC algorithm.

§actual: usize

Parsed output length.

§

ResourceLimit

An input exceeds a configured resource ceiling.

Fields

§resource: &'static str

Resource whose consumption was rejected.

§maximum: usize

Effective policy ceiling.

§actual: usize

Observed consumption.

§

ResourceLimitExceeded

An import exceeded a resource ceiling, but its parser did not expose the measured value.

Fields

§resource: &'static str

Resource whose consumption was rejected.

§maximum: usize

Effective policy ceiling.

§

KdfIterationsOutsideLimit

A protected import supplied zero or too many KDF iterations; the parser did not expose the count.

Fields

§maximum: usize

Effective iteration ceiling.

§

InvalidResourceLimit

A configured resource limit violates a structural policy requirement.

Fields

§resource: &'static str

Resource whose configured limit was rejected.

§requirement: &'static str

Required property of the configured limit.

§actual: usize

Rejected configured value.

§

KeyTrust

The selected key source or trust mode is disallowed.

Fields

§reason: &'static str

Non-secret reason suitable for diagnostics.

§

XmlInput

XML parser behavior is disallowed.

Fields

§reason: &'static str

Non-secret reason suitable for diagnostics.

§

Uri

A URI class is outside the operation policy.

Fields

§operation: &'static str

Operation evaluating the URI.

§reason: &'static str

Non-sensitive reason suitable for diagnostics.

§

KeySize

An asymmetric key/domain falls outside the operation’s strength range.

Fields

§operation: &'static str

Operation evaluating the key.

§key_type: &'static str

Stable key-family diagnostic.

§minimum_bits: usize

Configured minimum width of the named key/domain component.

§maximum_bits: usize

Effective maximum, bounded by the implementation ceiling.

§actual_bits: usize

Observed normalized width of the named key/domain component.

§

InvalidKeyMaterial

RSA key material is structurally invalid.

Fields

§operation: &'static str

Operation evaluating the key.

§key_type: &'static str

Stable key-family diagnostic.

§reason: &'static str

Non-secret structural rejection reason.

Trait Implementations§

Source §

impl Clone for PolicyViolation

Source §

fn clone(&self) -> Self

Returns a duplicate of the value. Read more

1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more

Source §

impl Debug for PolicyViolation

Source §

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

Source §

impl Display for PolicyViolation

Source §

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

Source §

impl Eq for PolicyViolation

Source §

impl Error for PolicyViolation

1.30.0 · Source§

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any. Read more

1.0.0 · Source§

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

Source §

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports. Read more

Source §