Struct ServerHashVerification 

pub struct ServerHashVerification { /* private fields */ }

A custom ServerCertVerifier implementation.

Configures the client to skip some server certificates validation.

This verifier is configured to accept server certificates whose digests match the specified SHA-256 hashes and fulfill some additional constraints (see notes below).

This is useful for scenarios where clients need to accept known self-signed certificates or certificates from non-standard authorities.

Notes

• The current time MUST be within the validity period of the certificate.
• The total length of the validity period MUST NOT exceed two weeks.
• Only certificates for which the public key algorithm is ECDSA with the secp256r1 are accepted.

Implementations

impl ServerHashVerification

pub fn new<H>(hashes: H) -> Self

where H: IntoIterator<Item = Sha256Digest>,

Creates a new instance of ServerHashVerification.

Arguments

• hashes: An iterator yielding Sha256Digest instances representing the accepted certificate hashes.

pub fn add(&mut self, digest: Sha256Digest)

Adds a digest to the list of accepted certificates.

Trait Implementations

impl Debug for ServerHashVerification

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromIterator<Sha256Digest> for ServerHashVerification

fn from_iter<T: IntoIterator<Item = Sha256Digest>>(iter: T) -> Self

Creates a value from an iterator.

impl ServerCertVerifier for ServerHashVerification

fn verify_server_cert( &self, end_entity: &CertificateDer<'_>, _intermediates: &[CertificateDer<'_>], _server_name: &ServerName<'_>, _ocsp_response: &[u8], now: UnixTime, ) -> Result<ServerCertVerified, Error>

Verify the end-entity certificate end_entity is valid for the hostname dns_name and chains to at least one trust anchor.

fn verify_tls12_signature( &self, message: &[u8], cert: &CertificateDer<'_>, dss: &DigitallySignedStruct, ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn verify_tls13_signature( &self, message: &[u8], cert: &CertificateDer<'_>, dss: &DigitallySignedStruct, ) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn supported_verify_schemes(&self) -> Vec<SignatureScheme>

Return the list of SignatureSchemes that this verifier will handle, in verify_tls12_signature and verify_tls13_signature calls.

fn requires_raw_public_keys(&self) -> bool

Returns whether this verifier requires raw public keys as defined in RFC 7250.

fn root_hint_subjects(&self) -> Option<&[DistinguishedName]>

Return the DistinguishedNames of certificate authorities that this verifier trusts.