Struct PeerCapabilities 

pub struct PeerCapabilities {
    pub auth_plugin_class: Option<String>,
    pub crypto_plugin_class: Option<String>,
    pub access_plugin_class: Option<String>,
    pub supported_suites: Vec<SuiteHint>,
    pub offered_protection: ProtectionLevel,
    pub has_valid_cert: bool,
    pub validity_window: Option<Validity>,
    pub vendor_hint: Option<String>,
    pub cert_cn: Option<String>,
    pub delegation_chain: Option<DelegationChain>,
}

Security-relevant capabilities of a remote peer.

Populated from SPDP properties (auth/crypto/access plugin class, zerodds.sec.supported_suites, zerodds.sec.offered_protection) as well as from SEDP permissions tokens. Legacy peers without security properties land here with auth_plugin_class=None — no drop, the crate::PolicyEngine decides per domain rule whether legacy is accepted.

All fields are Option/Vec-based so that partial updates (upgrade path in §4.3 of the architecture doc) are cleanly possible.

Fields

auth_plugin_class: Option<String>

DDS:Auth:PKI-DH:1.2 (spec 1.2 §10.3.2.1) etc. None = legacy peer without an auth plugin.

crypto_plugin_class: Option<String>

DDS:Crypto:AES-GCM-GMAC:1.2 (spec 1.2 §10.5) etc.

access_plugin_class: Option<String>

DDS:Access:Permissions:1.2 (spec 1.2 §10.4) etc.

supported_suites: Vec<SuiteHint>

Suites the peer would accept according to its SPDP announce.

offered_protection: ProtectionLevel

Protection level the peer itself offers.

has_valid_cert: bool

true if the cert chain + OCSP were checked and ok — set by the authentication plugin, not from SPDP.

validity_window: Option<Validity>

Validity window from the permissions token.

vendor_hint: Option<String>

Vendor identification (e.g. "Cyclone DDS", "Fast DDS") for quirks.

cert_cn: Option<String>

Subject common name from the peer cert (e.g. "writer1.fast.example"). Set by the authentication plugin after a successful handshake; not propagated via SPDP. Used for <zerodds:peer_class><match cert_cn_pattern=...> .

delegation_chain: Option<DelegationChain>

Delegation chain. Propagated by the edge or sub-gateway via the SPDP property zerodds.sec.delegation_chain. Validation against a delegation profile happens in peer_matches_class (j-d). None = peer without a chain (= directly authenticated peer or legacy).

Implementations

impl PeerCapabilities

pub fn merge_update(&mut self, other: &PeerCapabilities)

Merges non-empty fields from other into self. Empty fields (None, []) stay unchanged — so multiple partial SPDP updates are idempotent and order-tolerant.

Special rules:

• offered_protection is always taken over (monotonically increasing via ProtectionLevel::stronger) — a peer can upgrade its level but not silently downgrade it.
• has_valid_cert=true is sticky: once validated, it cannot fall back to false (cert rotation requires an explicit PeerCache::forget).

Trait Implementations

impl Clone for PeerCapabilities

fn clone(&self) -> PeerCapabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PeerCapabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PeerCapabilities

fn default() -> PeerCapabilities

Returns the “default value” for a type.

impl Eq for PeerCapabilities

impl PartialEq for PeerCapabilities

fn eq(&self, other: &PeerCapabilities) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for PeerCapabilities