Struct rustls::AllowAnyAuthenticatedClient [−][src]
pub struct AllowAnyAuthenticatedClient { /* fields omitted */ }
Expand description
A ClientCertVerifier
that will ensure that every client provides a trusted
certificate, without any name checking.
Implementations
Construct a new AllowAnyAuthenticatedClient
.
roots
is the list of trust anchors to use for certificate validation.
Trait Implementations
Returns true
to enable the server to request a client certificate and
false
to skip requesting a client certificate. Defaults to true
. Read more
Return Some(true)
to require a client certificate and Some(false)
to make
client authentication optional. Return None
to abort the connection.
Defaults to Some(self.offer_client_auth())
. Read more
Returns the subject names of the client authentication trust anchors to share with the client when requesting client authentication. Read more
fn verify_client_cert(
&self,
presented_certs: &[Certificate],
_sni: Option<&DNSName>
) -> Result<ClientCertVerified, TLSError>
fn verify_client_cert(
&self,
presented_certs: &[Certificate],
_sni: Option<&DNSName>
) -> Result<ClientCertVerified, TLSError>
Verify a certificate chain. presented_certs
is the certificate chain from the client. Read more
fn verify_tls12_signature(
&self,
message: &[u8],
cert: &Certificate,
dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, TLSError>
fn verify_tls12_signature(
&self,
message: &[u8],
cert: &Certificate,
dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, TLSError>
Verify a signature allegedly by the given server certificate. Read more
fn verify_tls13_signature(
&self,
message: &[u8],
cert: &Certificate,
dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, TLSError>
fn verify_tls13_signature(
&self,
message: &[u8],
cert: &Certificate,
dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, TLSError>
Verify a signature allegedly by the given server certificate. Read more
Return the list of SignatureSchemes that this verifier will handle,
in verify_tls12_signature
and verify_tls13_signature
calls. Read more