Struct WebPkiVerifierWithCrl 

pub struct WebPkiVerifierWithCrl {
    roots: Vec<Certificate>,
    crls: Vec<OwnedCertRevocationList>,
}

Basicly the same as the upstream WebPkiVerifier, but instead of passing a empty vector to the verify_for_usage() function the content of the specfied certificate revocation list file is provided as input.

Fields

roots: Vec<Certificate>

crls: Vec<OwnedCertRevocationList>

Implementations

impl WebPkiVerifierWithCrl

pub fn new(roots: Vec<Certificate>, crls: Vec<OwnedCertRevocationList>) -> Self

Trait Implementations

impl ServerCertVerifier for WebPkiVerifierWithCrl

fn verify_server_cert( &self, end_entity: &Certificate, intermediates: &[Certificate], server_name: &ServerName, _scts: &mut dyn Iterator<Item = &[u8]>, ocsp_response: &[u8], now: SystemTime, ) -> Result<ServerCertVerified, Error>

Verify the end-entity certificate end_entity is valid for the hostname dns_name and chains to at least one trust anchor.

fn verify_tls12_signature( &self, message: &[u8], cert: &Certificate, dss: &DigitallySignedStruct, ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn verify_tls13_signature( &self, message: &[u8], cert: &Certificate, dss: &DigitallySignedStruct, ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn supported_verify_schemes(&self) -> Vec<SignatureScheme>

Return the list of SignatureSchemes that this verifier will handle, in verify_tls12_signature and verify_tls13_signature calls.

fn request_scts(&self) -> bool

Returns true if Rustls should ask the server to send SCTs.