Struct tor_proto::channel::UnverifiedChannel

pub struct UnverifiedChannel<T: AsyncRead + AsyncWrite + Send + Unpin + 'static, S: SleepProvider> { /* private fields */ }

A client channel on which versions have been negotiated and the relay’s handshake has been read, but where the certs have not been checked.

Implementations

impl<T: AsyncRead + AsyncWrite + Send + Unpin + 'static, S: SleepProvider> UnverifiedChannel<T, S>

pub fn clock_skew(&self) -> ClockSkew

Return the reported clock skew from this handshake.

Note that the skew reported by this function might not be “true”: the relay might have its clock set wrong, or it might be lying to us.

The clock skew reported here is not yet authenticated; if you need to make sure that the skew is authenticated, use Channel::clock_skew instead.

pub fn check<U: ChanTarget + ?Sized>(
    self,
    peer: &U,
    peer_cert: &[u8],
    now: Option<SystemTime>
) -> Result<VerifiedChannel<T, S>>

Validate the certificates and keys in the relay’s handshake.

‘peer’ is the peer that we want to make sure we’re connecting to.

‘peer_cert’ is the x.509 certificate that the peer presented during its handshake.

‘now’ is the time at which to check that certificates are valid. None means to use the current time. It can be used for testing to override the current view of the time.

This is a separate function because it’s likely to be somewhat CPU-intensive.