Enum ServerTrustSource 

pub enum ServerTrustSource {
    Native,
    WebPki,
    Custom(TlsServerTrustAnchors),
    Platform,
}

Available on crate feature tls only.

Source of trust for normal server-certificate verification.

Variants

Native

A snapshot of the native roots, or the roots in SSL_CERT_FILE and SSL_CERT_DIR, which replace them. Bundled WebPKI roots are the fallback only without such an override. Roots in SSL_CERT_EXTRA_FILE and SSL_CERT_EXTRA_DIR are always added.

WebPki

Rama’s bundled Mozilla (CCADB) roots, independent of the host OS.

Custom(TlsServerTrustAnchors)

Only the supplied trust anchors.

Platform

The operating system’s certificate verifier validates the chain and server identity, including enterprise trust settings and the platform’s distrust and revocation policy. Roots in SSL_CERT_EXTRA_FILE and SSL_CERT_EXTRA_DIR are trusted in addition; SSL_CERT_FILE and SSL_CERT_DIR are ignored, as they replace a root store.

Available on Apple platforms, Windows and Android. Other platforms have no such verifier and verify against ServerTrustSource::Native instead, environment variables included. On Android it needs an initialized ndk-context; without one every verification fails.

Native verification may block on network access and is not cancellable. Boring runs it on Tokio’s blocking pool. rustls verifies synchronously: it uses block_in_place on a multithread runtime and runs inline on a current-thread runtime. A handshake timeout cannot preempt this call; current-thread executors can be stalled until native verification returns. Bound concurrent connections and size the blocking pool for native work; handshake deadlines alone do not bound running platform verifications. This matters especially for relays whose clients choose upstream hosts and can steer certificate AIA or OCSP fetches to slow endpoints. See rama_crypto::platform_verifier for revocation and Android limits.

Trait Implementations

impl Clone for ServerTrustSource

fn clone(&self) -> ServerTrustSource

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServerTrustSource

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for ServerTrustSource

fn default() -> ServerTrustSource

Returns the “default value” for a type.

impl Eq for ServerTrustSource

impl Hash for ServerTrustSource

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for ServerTrustSource

fn eq(&self, other: &ServerTrustSource) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ServerTrustSource