Struct PlatformVerifier 

pub struct PlatformVerifier(/* private fields */);

Available on crate features crypto and native-certs and std only.

A TLS server certificate verifier backed by the operating system.

Each instance owns its additional trust anchors. Building one may parse certificates or create platform objects, so share instances where possible; PlatformVerifier::shared is the process-wide instance without additional anchors.

Implementations

impl PlatformVerifier

pub const IS_AVAILABLE: bool = false

Whether this platform has an operating system verifier.

pub fn new() -> PlatformVerifier

Create a verifier that trusts what the operating system trusts.

pub fn try_with_extra_roots( roots: impl IntoIterator<Item = CertificateDer<'static>>, ) -> Result<PlatformVerifier, Box<dyn Error + Send + Sync>>

Create a verifier that also trusts roots, in addition to what the operating system trusts.

pub fn shared() -> Arc<PlatformVerifier>

The process-wide verifier, which also trusts the shared_extra_trust_anchors from the environment.

SSL_CERT_FILE and SSL_CERT_DIR are not consulted: they replace a root store, and the operating system’s verifier has none to replace.

pub fn verify_server_chain( &self, end_entity: &CertificateDer<'_>, intermediates: &[CertificateDer<'_>], server_name: &Host, ocsp_response: Option<&[u8]>, now: SystemTime, ) -> Result<Vec<CertificateDer<'static>>, PlatformVerifyError>

Verify a server certificate chain for server_name at time now.

Android’s initial TrustManager uses the wall clock. The supplied date additionally checks the leaf and the supplementary leaf revocation pass; it does not time-shift intermediate validation. Android therefore does not support general historical certificate validation.

intermediates are the other certificates the server presented, and ocsp_response a stapled OCSP response, if any. On success the chain the platform built is returned, leaf first and ending at the trust anchor.

This may block on network access, e.g. to fetch revocation information or missing intermediates, so do not call it on an async executor thread. A timeout cannot interrupt a running native call. Callers must bound concurrent work independently of handshake deadlines.

Trait Implementations

impl Debug for PlatformVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for PlatformVerifier

fn default() -> PlatformVerifier

Returns the “default value” for a type.