Struct SigningPolicy 

pub struct SigningPolicy {

    pub validity: Option<PolicyValidity>,
    pub signature_constraints: SignatureConstraints,
    pub key_establishment: KeyEstablishmentPolicy,
    pub parameterized_rsa_pss: RsaPssPermission,
    pub signature_algorithms: Option<HashSet<SignatureAlgorithm>>,
    pub digest_algorithms: Option<HashSet<DigestAlgorithm>>,
    pub hmac: HmacPolicy,
    pub ecdsa_signature_value_encoding: EcdsaSignatureValueEncoding,
    pub rsa_keys: RsaKeyPolicy,
    pub dsa_keys: DsaKeyPolicy,
    pub uris: UriPolicy,
    pub transforms: TransformPolicy,
    pub manifest_processing: ManifestProcessing,
    pub xml: XmlInputPolicy,
    pub resources: ResourcePolicy,
}

Immutable policy snapshot for XMLDSig signing.

Fields

validity: Option<PolicyValidity>

Explicitly authorized lifetime; checked again at operation entry.

signature_constraints: SignatureConstraints

XML Security requirements, not application protocol validation.

key_establishment: KeyEstablishmentPolicy

Shared key-establishment permissions and cumulative operation limits.

parameterized_rsa_pss: RsaPssPermission

Explicit parameterized RSA-PSS family permission, including legacy hashes.

signature_algorithms: Option<HashSet<SignatureAlgorithm>>

Exact signing methods, supplemented by parameterized_rsa_pss. None uses the implemented secure defaults.

digest_algorithms: Option<HashSet<DigestAlgorithm>>

Allowed reference digest methods; None uses the implemented secure defaults.

hmac: HmacPolicy

HMAC secret and output-length requirements.

ecdsa_signature_value_encoding: EcdsaSignatureValueEncoding

ECDSA SignatureValue wire representation emitted by signing.

rsa_keys: RsaKeyPolicy

RSA requirements enforced before producing a signature.

dsa_keys: DsaKeyPolicy

DSA requirements enforced before producing a signature.

uris: UriPolicy

Reference URI permissions. External URIs resolve only from caller-supplied request bytes and never enable filesystem or network access.

transforms: TransformPolicy

Transform and canonicalization permissions.

manifest_processing: ManifestProcessing

Whether direct <Object>/<Manifest> reference digests are populated.

xml: XmlInputPolicy

XML parser rules.

resources: ResourcePolicy

Resource ceilings.

Implementations

impl SigningPolicy

pub fn validate(&self) -> Result<(), PolicyViolation>

Validate the complete snapshot before signing work begins.

Trait Implementations

impl Clone for SigningPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SigningPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SigningPolicy

fn default() -> Self

Returns the “default value” for a type.

impl XmlDocumentPolicy for SigningPolicy