Struct KeyResolverConfig 

pub struct KeyResolverConfig {
    pub trusted_certs: Vec<Vec<u8>>,
    pub named_keys: HashMap<String, VerificationKey>,
    pub verify_chains: bool,
    pub verification_time: Option<SystemTime>,
    pub max_chain_depth: usize,
}

Configuration for the default XMLDSig key resolver.

The configuration owns all key material and has no global registry. Chain verification is opt-in so callers that pin an embedded certificate can use the documented TOFU model without constructing a certificate path.

Fields

trusted_certs: Vec<Vec<u8>>

DER-encoded certificates accepted as trust anchors.

named_keys: HashMap<String, VerificationKey>

Verification keys addressable by <KeyName> content.

verify_chains: bool

Whether embedded X.509 certificate chains must terminate at a trust anchor.

verification_time: Option<SystemTime>

Certificate verification time override; None selects the system clock.

max_chain_depth: usize

Maximum certificates in a validated path, including the trust anchor.

Trait Implementations

impl Clone for KeyResolverConfig

fn clone(&self) -> KeyResolverConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyResolverConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KeyResolverConfig

fn default() -> Self

Returns the “default value” for a type.

impl Eq for KeyResolverConfig

impl PartialEq for KeyResolverConfig

fn eq(&self, other: &KeyResolverConfig) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for KeyResolverConfig