Struct rustls::WebPKIVerifier

pub struct WebPKIVerifier {
    pub time: fn() -> Result<Time, TLSError>,
}

Default ServerCertVerifier, see the trait impl for more information.

Fields

time: fn() -> Result<Time, TLSError>

time provider

Implementations

impl WebPKIVerifier

pub fn new() -> WebPKIVerifier

Create a new WebPKIVerifier

pub fn verification_schemes() -> Vec<SignatureScheme>

Returns the signature verification methods supported by webpki.

Trait Implementations

impl ServerCertVerifier for WebPKIVerifier

fn verify_server_cert(
    &self,
    roots: &RootCertStore,
    presented_certs: &[Certificate],
    dns_name: DNSNameRef<'_>,
    ocsp_response: &[u8]
) -> Result<ServerCertVerified, TLSError>

Will verify the certificate is valid in the following ways:

• Signed by a trusted RootCertStore CA
• Not Expired
• Valid for DNS entry
• OCSP data is present

fn verify_tls12_signature(
    &self,
    message: &[u8],
    cert: &Certificate,
    dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, TLSError>

Verify a signature allegedly by the given server certificate.

fn verify_tls13_signature(
    &self,
    message: &[u8],
    cert: &Certificate,
    dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, TLSError>

Verify a signature allegedly by the given server certificate.

fn supported_verify_schemes(&self) -> Vec<SignatureScheme>

Return the list of SignatureSchemes that this verifier will handle, in verify_tls12_signature and verify_tls13_signature calls.