Enum TlsServerCertPin 

pub enum TlsServerCertPin {
    SpkiSha256([u8; 32]),
    ExactDer(CertificateDer<'static>),
}

Available on crate feature tls only.

A single accepted server leaf pin.

Serialized as sha256/<base64 digest> (the industry-standard key-pin format) or der/<base64 certificate>, via FromStr and Display. FromStr also accepts a PEM certificate, deriving its key pin.

Variants

SpkiSha256([u8; 32])

SHA-256 of the leaf’s SubjectPublicKeyInfo: the industry standard.

Survives certificate renewal as long as the key pair is unchanged.

ExactDer(CertificateDer<'static>)

The exact DER-encoded leaf certificate.

Stricter than a key pin: any re-issuance breaks it. Prefer TlsServerCertPin::SpkiSha256 unless you control the certificate file itself.

Implementations

impl TlsServerCertPin

pub fn spki_sha256_of( certificate: &CertificateDer<'_>, ) -> Result<TlsServerCertPin, Box<dyn Error + Send + Sync>>

Available on crate feature boring only.

Compute the key (SpkiSha256) pin of certificate.

Trait Implementations

impl Clone for TlsServerCertPin

fn clone(&self) -> TlsServerCertPin

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsServerCertPin

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for TlsServerCertPin

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for TlsServerCertPin

impl From<CertificateDer<'static>> for TlsServerCertPin

fn from(certificate: CertificateDer<'static>) -> TlsServerCertPin

Converts to this type from the input type.

impl From<TlsServerCertPin> for TlsServerCertPinSet

fn from(pin: TlsServerCertPin) -> TlsServerCertPinSet

Converts to this type from the input type.

impl FromStr for TlsServerCertPin

type Err = Box<dyn Error + Send + Sync>

The associated error which can be returned from parsing.

fn from_str( s: &str, ) -> Result<TlsServerCertPin, <TlsServerCertPin as FromStr>::Err>

Parses a string s to return a value of this type.

impl PartialEq for TlsServerCertPin

fn eq(&self, other: &TlsServerCertPin) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for TlsServerCertPin