Struct Verifier

struct Verifier(Arc<WebPkiServerVerifier>);

Available on (crate features native-tls or rustls) and (crate features async-std or tokio) and crate feature rustls only.

A [rustls::client::danger::ServerCertVerifier] based on the Rustls’s [WebPkiServerVerifier].

This verifier is necessary since Tor relays doesn’t participate in the web browser PKI, and as such their certificates won’t check out as valid ones.

We enforce that the certificate itself has correctly authenticated the TLS connection, but nothing else.

Tuple Fields

0: Arc<WebPkiServerVerifier>

Implementations

impl Verifier

fn from_cert_der(cert: &[u8]) -> Self

Construct a Verifier from a dummy root certificate, which will not actually be used.

Panics

Panics if the certificate is not parseable.

Trait Implementations

impl Clone for Verifier

fn clone(&self) -> Verifier

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Verifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl ServerCertVerifier for Verifier

fn verify_server_cert( &self, end_entity: &CertificateDer<'_>, _roots: &[CertificateDer<'_>], _server_name: &ServerName<'_>, _ocsp_response: &[u8], _now: UnixTime, ) -> Result<ServerCertVerified, TLSError>

Verify the end-entity certificate end_entity is valid for the hostname dns_name and chains to at least one trust anchor.

fn verify_tls12_signature( &self, message: &[u8], cert: &CertificateDer<'_>, dss: &DigitallySignedStruct, ) -> Result<HandshakeSignatureValid, TLSError>

Verify a signature allegedly by the given server certificate.

fn verify_tls13_signature( &self, message: &[u8], cert: &CertificateDer<'_>, dss: &DigitallySignedStruct, ) -> Result<HandshakeSignatureValid, TLSError>

Verify a signature allegedly by the given server certificate.

fn supported_verify_schemes(&self) -> Vec<SignatureScheme>

Return the list of SignatureSchemes that this verifier will handle, in verify_tls12_signature and verify_tls13_signature calls.

fn root_hint_subjects(&self) -> Option<&[DistinguishedName]>

Return the [DistinguishedName]s of certificate authorities that this verifier trusts.

fn requires_raw_public_keys(&self) -> bool

Returns whether this verifier requires raw public keys as defined in RFC 7250.