Struct IssuingDistributionPoint

pub(crate) struct IssuingDistributionPoint<'a> {
    distribution_point: Option<Input<'a>>,
    pub(crate) only_contains_user_certs: bool,
    pub(crate) only_contains_ca_certs: bool,
    pub(crate) only_some_reasons: Option<BitStringFlags<'a>>,
    pub(crate) indirect_crl: bool,
    pub(crate) only_contains_attribute_certs: bool,
}

Fields

distribution_point: Option<Input<'a>>

only_contains_user_certs: bool

only_contains_ca_certs: bool

only_some_reasons: Option<BitStringFlags<'a>>

indirect_crl: bool

only_contains_attribute_certs: bool

Implementations

impl<'a> IssuingDistributionPoint<'a>

pub(crate) fn from_der(der: Input<'a>) -> Result<Self, Error>

pub(crate) fn names(&self) -> Result<Option<DistributionPointName<'a>>, Error>

Return the distribution point names (if any).

pub(crate) fn authoritative_for(&self, node: &PathNode<'a>) -> bool

Returns true if the CRL can be considered authoritative for the given certificate. We make this determination using the certificate and CRL issuers, and the distribution point names that may be present in extensions found on both.

We consider the CRL authoritative for the certificate if the CRL issuing distribution point has a scope that could include the cert and if the cert has CRL distribution points, that at least one CRL DP has a valid distribution point full name where one of the general names is a Uniform Resource Identifier (URI) general name that can also be found in the CRL issuing distribution point.

We do not consider:

• Distribution point names relative to an issuer.
• General names of a type other than URI.
• Malformed names or invalid IDP or CRL DP extensions.

fn uri_name_in_common( idp_general_names: &mut DerIterator<'a, GeneralName<'a>>, dp_general_names: &mut DerIterator<'a, GeneralName<'a>>, ) -> bool