Struct DefaultKeyResolver 

pub struct DefaultKeyResolver { /* private fields */ }

Configuration-driven resolver for embedded certificates, DER keys, and key names.

Implementations

impl DefaultKeyResolver

pub fn resolve_with_candidate_budget( &self, key_info: Option<&KeyInfo>, algorithm: SignatureAlgorithm, policy: &VerificationPolicy, provider: &dyn CryptoProvider, candidate_budget: &mut InspectedKeyCandidateBudget<'_>, ) -> Result<Option<ResolvedVerificationKey<'static>>, DsigError>

Resolve another candidate without resetting aggregate inspection work. The caller must keep the same budget throughout an operation, including failed attempts; policy denials must not be treated as candidate misses.

pub fn new(config: KeyResolverConfig) -> Self

Construct a resolver from explicit caller-owned key and certificate stores.

pub fn config(&self) -> &KeyResolverConfig

Borrow the active resolver configuration.

Trait Implementations

impl Clone for DefaultKeyResolver

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DefaultKeyResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DefaultKeyResolver

fn default() -> Self

Returns the “default value” for a type.

impl KeyResolver for DefaultKeyResolver

fn resolve_for_verification_with_budget<'a>( &'a self, key_info: Option<&KeyInfo>, algorithm: SignatureAlgorithm, policy: &VerificationPolicy, provider: &dyn CryptoProvider, budget: &mut InspectedKeyCandidateBudget<'_>, ) -> Result<Option<ResolvedVerificationKey<'a>>, DsigError>

Resolve using the core operation’s cumulative candidate and certificate account. The default charges one custom-resolver dispatch. Implementations searching multiple candidates override this method, charging each inspection through budget and using its execution account for certificate mechanism work.

fn resolve_for_verification<'a>( &'a self, key_info: Option<&KeyInfo>, algorithm: SignatureAlgorithm, policy: &VerificationPolicy, provider: &dyn CryptoProvider, ) -> Result<Option<ResolvedVerificationKey<'a>>, DsigError>

Discover and explicitly authorize a key for an end-to-end operation. The default preserves discovery only: applications that authorize keys themselves return ResolvedVerificationKey::CallerTrusted explicitly.

fn resolve<'a>( &'a self, key_info: Option<&KeyInfo>, algorithm: SignatureAlgorithm, ) -> Result<Option<Box<dyn VerifyingKey + 'a>>, DsigError>

Resolve a verification key from parsed <KeyInfo> sources.

fn resolve_with_policy<'a>( &'a self, key_info: Option<&KeyInfo>, algorithm: SignatureAlgorithm, policy: &VerificationPolicy, ) -> Result<Option<Box<dyn VerifyingKey + 'a>>, DsigError>

Resolve under the operation’s immutable policy snapshot.

fn resolve_with_policy_and_provider<'a>( &'a self, key_info: Option<&KeyInfo>, algorithm: SignatureAlgorithm, policy: &VerificationPolicy, provider: &dyn CryptoProvider, ) -> Result<Option<Box<dyn VerifyingKey + 'a>>, DsigError>

Resolve under both the operation policy and cryptographic provider.

fn consumes_document_key_info(&self) -> bool

Return true when this resolver consumes document <KeyInfo> material.