Module rustls::verify

Structs

• AllowAnyAnonymousOrAuthenticatedClient
  A ClientCertVerifier that will allow both anonymous and authenticated clients, without any name checking.
• AllowAnyAuthenticatedClient
  A ClientCertVerifier that will ensure that every client provides a trusted certificate, without any name checking. Optionally, client certificates will have their revocation status checked using the DER encoded CRLs provided.
• CertificateTransparencyPolicy
  Policy for enforcing Certificate Transparency.
• ClientCertVerified
  Zero-sized marker type representing verification of a client cert chain.
• DigitallySignedStruct
  This type combines a SignatureScheme and a signature payload produced with that scheme.
• FinishedMessageVerified 🔒
• HandshakeSignatureValid
  Zero-sized marker type representing verification of a signature.
• NoClientAuth
  Turns off client authentication.
• ServerCertVerified
  Zero-sized marker type representing verification of a server cert chain.
• UnparsedCertRevocationList
  An unparsed DER encoded Certificate Revocation List (CRL).
• WebPkiVerifier
  Default ServerCertVerifier, see the trait impl for more information.

Statics

• ECDSA_SHA256 🔒
• ECDSA_SHA384 🔒
• ED25519 🔒
• RSA_PSS_SHA256 🔒
• RSA_PSS_SHA384 🔒
• RSA_PSS_SHA512 🔒
• RSA_SHA256 🔒
• RSA_SHA384 🔒
• RSA_SHA512 🔒
• SUPPORTED_SIG_ALGS 🔒
  Which signature verification mechanisms we support. No particular order.

Traits

• ClientCertVerifier
  Something that can verify a client certificate chain
• ServerCertVerifier
  Something that can verify a server certificate chain, and verify signatures made by certificates.

Functions

• construct_tls13_client_verify_message 🔒
  Constructs the signature message specified in section 4.4.3 of RFC8446.
• construct_tls13_server_verify_message 🔒
  Constructs the signature message specified in section 4.4.3 of RFC8446.
• construct_tls13_verify_message 🔒
• convert_alg_tls13 🔒
• convert_scheme 🔒
• intermediate_chain 🔒
• pki_error 🔒
• trust_roots 🔒
• unix_time_millis 🔒
• verify_server_cert_signed_by_trust_anchor
  Verify that the end-entity certificate end_entity is a valid server cert and chains to at least one of the OwnedTrustAnchor in the roots RootCertStore.
• verify_server_name
  Verify that the end_entity has a name or alternative name matching the server_name note: this only verifies the name and should be used in conjuction with more verification like verify_server_cert_signed_by_trust_anchor
• verify_sig_using_any_alg 🔒
• verify_signed_struct 🔒
• verify_tls13 🔒

Type Aliases

• SignatureAlgorithms 🔒