Crate webpki

webpki: Web PKI X.509 Certificate Validation.

See EndEntityCert’s documentation for a description of the certificate processing steps necessary for a TLS connection.

Features

Feature	Description
alloc	Enable features that require use of the heap. Currently all RSA signature algorithms require this feature.
std	Enable features that require libstd. Implies alloc.
ring	Enable use of the ring crate for cryptography.
aws_lc_rs	Enable use of the aws-lc-rs crate for cryptography.

Re-exports

• pub use pki_types as types;

Modules

• alg_id
  Encodings of the PKIX AlgorithmIdentifier type.
• ring
  Signature verification algorithm implementations using the ring crypto library.

Structs

• BorrowedCertRevocationList
  Borrowed representation of a RFC 5280 profile Certificate Revocation List (CRL).
• BorrowedRevokedCert
  Borrowed representation of a RFC 5280 profile Certificate Revocation List (CRL) revoked certificate entry.
• Cert
  A parsed X509 certificate.
• EndEntityCert
  An end-entity certificate.
• KeyUsage
  The expected key usage of a certificate.
• OwnedCertRevocationList
  Owned representation of a RFC 5280 profile Certificate Revocation List (CRL).
• OwnedRevokedCert
  Owned representation of a RFC 5280 profile Certificate Revocation List (CRL) revoked certificate entry.
• RevocationOptions
  Describes how revocation checking is performed, if at all. Can be constructed with a RevocationOptionsBuilder instance.
• RevocationOptionsBuilder
  Builds a RevocationOptions instance to control how revocation checking is performed.
• VerifiedPath
  Path from end-entity certificate to trust anchor that’s been verified.

Enums

• CertRevocationList
  A RFC 5280 profile Certificate Revocation List (CRL).
• DerTypeId
  Trailing data was found while parsing DER-encoded input for the named type.
• Error
  An error that occurs during certificate validation or name validation.
• ExpirationPolicy
  Describes how to handle the nextUpdate field of the CRL (i.e. expiration).
• RevocationCheckDepth
  Describes how much of a certificate chain is checked for revocation status.
• RevocationReason
  Identifies the reason a certificate was revoked. See RFC 5280 §5.3.1[^1]
• UnknownStatusPolicy
  Describes how to handle the case where a certificate’s revocation status is unknown.

Statics

• ALL_VERIFICATION_ALGS
  An array of all the verification algorithms exported by this crate.

Functions

• anchor_from_trusted_cert
  Interprets the given pre-validated DER-encoded certificate as a TrustAnchor.