Struct KeyResolverConfig 

pub struct KeyResolverConfig {
    pub lookup_certs: Vec<Vec<u8>>,
    pub trusted_certs: Vec<Vec<u8>>,
    pub crls: Vec<Vec<u8>>,
    pub named_keys: HashMap<String, VerificationKey>,
}

Configuration for the default XMLDSig key resolver.

The configuration owns all key material and has no global registry. Chain verification is opt-in so callers that pin an embedded certificate can use the documented TOFU model without constructing a certificate path.

Fields

lookup_certs: Vec<Vec<u8>>

DER-encoded certificates available to X.509 selectors and as untrusted path intermediates. They establish trust only by chaining to an entry in Self::trusted_certs.

trusted_certs: Vec<Vec<u8>>

DER-encoded certificates accepted as trust anchors.

crls: Vec<Vec<u8>>

Caller-owned revocation evidence applied without copying it into each XML source.

named_keys: HashMap<String, VerificationKey>

Verification keys addressable by <KeyName> content.

Trait Implementations

impl Clone for KeyResolverConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyResolverConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KeyResolverConfig

fn default() -> Self

Returns the “default value” for a type.

impl Eq for KeyResolverConfig

impl PartialEq for KeyResolverConfig

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for KeyResolverConfig