Expand description

webpki: Web PKI X.509 Certificate Validation.

See EndEntityCert’s documentation for a description of the certificate processing steps necessary for a TLS connection.

Features

FeatureDescription
allocEnable features that require use of the heap. Currently all RSA signature algorithms require this feature.
stdEnable features that require libstd. Implies alloc.

Structs

A reference to a DNS Name suitable for use in the TLS Server Name Indication (SNI) extension and/or for use as the reference hostname for which to verify a certificate.

An end-entity certificate.

An error indicating that a DnsNameRef could not built because the input is not a syntactically-valid DNS Name.

A signature algorithm.

The time type.

Trust anchors which may be used for authenticating clients.

Trust anchors which may be used for authenticating servers.

A trust anchor (a.k.a. root CA).

Enums

An error that occurs during certificate validation or name validation.

Statics

ECDSA signatures using the P-256 curve and SHA-256.

ECDSA signatures using the P-256 curve and SHA-384. Deprecated.

ECDSA signatures using the P-384 curve and SHA-256. Deprecated.

ECDSA signatures using the P-384 curve and SHA-384.

ED25519 signatures according to RFC 8410

Type Definitions