Struct WebPkiSupportedAlgorithms

pub struct WebPkiSupportedAlgorithms {
    pub all: &'static [&'static dyn SignatureVerificationAlgorithm],
    pub mapping: &'static [(SignatureScheme, &'static [&'static dyn SignatureVerificationAlgorithm])],
}

Describes which webpki signature verification algorithms are supported and how they map to TLS SignatureSchemes.

Fields

all: &'static [&'static dyn SignatureVerificationAlgorithm]

A list of all supported signature verification algorithms.

Used for verifying certificate chains.

The order of this list is not significant.

mapping: &'static [(SignatureScheme, &'static [&'static dyn SignatureVerificationAlgorithm])]

A mapping from TLS SignatureSchemes to matching webpki signature verification algorithms.

This is one (SignatureScheme) to many (SignatureVerificationAlgorithm) because (depending on the protocol version) there is not necessary a 1-to-1 mapping.

For TLS1.2, all SignatureVerificationAlgorithms are tried in sequence.

For TLS1.3, only the first is tried.

The supported schemes in this mapping is communicated to the peer and the order is significant. The first mapping is our highest preference.

Implementations

impl WebPkiSupportedAlgorithms

pub fn supported_schemes(&self) -> Vec<SignatureScheme>

Return all the scheme items in mapping, maintaining order.

pub fn fips(&self) -> bool

Return true if all cryptography is FIPS-approved.

Trait Implementations

impl Clone for WebPkiSupportedAlgorithms

fn clone(&self) -> WebPkiSupportedAlgorithms

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WebPkiSupportedAlgorithms

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Copy for WebPkiSupportedAlgorithms