Struct rustls::verify::AllowAnyAuthenticatedClient

pub struct AllowAnyAuthenticatedClient {
    roots: RootCertStore,
    subjects: Vec<DistinguishedName>,
    crls: Vec<OwnedCertRevocationList>,
}

A ClientCertVerifier that will ensure that every client provides a trusted certificate, without any name checking. Optionally, client certificates will have their revocation status checked using the DER encoded CRLs provided.

Fields

roots: RootCertStore

subjects: Vec<DistinguishedName>

crls: Vec<OwnedCertRevocationList>

Implementations

impl AllowAnyAuthenticatedClient

pub fn new(roots: RootCertStore) -> Self

Construct a new AllowAnyAuthenticatedClient.

roots is the list of trust anchors to use for certificate validation.

pub fn with_crls( self, crls: impl IntoIterator<Item = UnparsedCertRevocationList>, ) -> Result<Self, CertRevocationListError>

Update the verifier to validate client certificates against the provided DER format unparsed certificate revocation lists (CRLs).

pub fn boxed(self) -> Arc<dyn ClientCertVerifier>

Wrap this verifier in an Arc and coerce it to dyn ClientCertVerifier

Trait Implementations

impl ClientCertVerifier for AllowAnyAuthenticatedClient

fn offer_client_auth(&self) -> bool

Returns true to enable the server to request a client certificate and false to skip requesting a client certificate. Defaults to true.

fn client_auth_root_subjects(&self) -> &[DistinguishedName]

Returns the Subjects of the client authentication trust anchors to share with the client when requesting client authentication.

fn verify_client_cert( &self, end_entity: &Certificate, intermediates: &[Certificate], now: SystemTime, ) -> Result<ClientCertVerified, Error>

Verify the end-entity certificate end_entity is valid, acceptable, and chains to at least one of the trust anchors trusted by this verifier.

fn client_auth_mandatory(&self) -> bool

Return true to require a client certificate and false to make client authentication optional. Defaults to Some(self.offer_client_auth()).

fn verify_tls12_signature( &self, message: &[u8], cert: &Certificate, dss: &DigitallySignedStruct, ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given client certificate.

fn verify_tls13_signature( &self, message: &[u8], cert: &Certificate, dss: &DigitallySignedStruct, ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given client certificate.

fn supported_verify_schemes(&self) -> Vec<SignatureScheme>

Return the list of SignatureSchemes that this verifier will handle, in verify_tls12_signature and verify_tls13_signature calls.