Struct TrustAnchor

pub struct TrustAnchor<'a> {
    pub subject: Der<'a>,
    pub subject_public_key_info: Der<'a>,
    pub name_constraints: Option<Der<'a>>,
}

A trust anchor (a.k.a. root CA)

Traditionally, certificate verification libraries have represented trust anchors as full X.509 root certificates. However, those certificates contain a lot more data than is needed for verifying certificates. The TrustAnchor representation allows an application to store just the essential elements of trust anchors.

The most common way to get one of these is to call rustls_webpki::anchor_from_trusted_cert().

Fields

subject: Der<'a>

Value of the subject field of the trust anchor

subject_public_key_info: Der<'a>

Value of the subjectPublicKeyInfo field of the trust anchor

name_constraints: Option<Der<'a>>

Value of DER-encoded NameConstraints, containing name constraints to the trust anchor, if any

Implementations

impl TrustAnchor<'_>

pub fn to_owned(&self) -> TrustAnchor<'static>

Yield a 'static lifetime of the TrustAnchor by allocating owned Der variants

Trait Implementations

impl<'a> Clone for TrustAnchor<'a>

fn clone(&self) -> TrustAnchor<'a>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Debug for TrustAnchor<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Extend<TrustAnchor<'static>> for RootCertStore

fn extend<T: IntoIterator<Item = TrustAnchor<'static>>>(&mut self, iter: T)

Extends a collection with the contents of an iterator.

fn extend_one(&mut self, item: A)

🔬This is a nightly-only experimental API. (extend_one)

Extends a collection with exactly one element.

fn extend_reserve(&mut self, additional: usize)

🔬This is a nightly-only experimental API. (extend_one)

Reserves capacity in a collection for the given number of additional elements.

impl<'a> From<Cert<'a>> for TrustAnchor<'a>

fn from(cert: Cert<'a>) -> TrustAnchor<'a>

Converts to this type from the input type.

impl<'a> PartialEq for TrustAnchor<'a>

fn eq(&self, other: &TrustAnchor<'a>) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<'a> Eq for TrustAnchor<'a>

impl<'a> StructuralPartialEq for TrustAnchor<'a>