Struct Extension

pub struct Extension { /* private fields */ }

RFC 5280 #4.1.2.9

Implementations

impl Extension

pub fn extn_id(&self) -> &ObjectIdentifierAsn1

pub fn critical(&self) -> bool

pub fn extn_value(&self) -> ExtensionView<'_>

pub fn into_critical(self) -> Self

pub fn into_non_critical(self) -> Self

pub fn set_critical(&mut self, critical: bool)

pub fn new_key_usage(key_usage: KeyUsage) -> Self

When present, conforming CAs SHOULD mark this extension as critical

Default is critical.

pub fn new_subject_key_identifier<V: Into<Vec<u8>>>(ski: V) -> Self

Conforming CAs MUST mark this extension as non-critical

Default is non-critical.

pub fn new_authority_key_identifier<KI, I, SN>( key_identifier: KI, authority_cert_issuer: I, authority_cert_serial_number: SN, ) -> Self

where KI: Into<Option<KeyIdentifier>>, I: Into<Option<GeneralName>>, SN: Into<Option<IntegerAsn1>>,

Conforming CAs MUST mark this extension as non-critical

Default is critical.

pub fn new_basic_constraints<CA: Into<Option<bool>>, PLC: Into<Option<u8>>>( ca: CA, path_len_constraints: PLC, ) -> Self

Marking this extension as critical is always acceptable. Check details here: https://tools.ietf.org/html/rfc5280#section-4.2.1.9 You may change this value using into_non_critical or set_critical methods.

Default is critical.

pub fn new_extended_key_usage<EKU>(extended_key_usage: EKU) -> Self

where EKU: Into<ExtendedKeyUsage>,

This extension MAY, at the option of the certificate issuer, be either critical or non-critical. Conforming CAs SHOULD NOT mark this extension as critical if the anyExtendedKeyUsage KeyPurposeId is present.

Default is non-critical if anyExtendedKeyUsage is present, critical otherwise.

pub fn new_subject_alt_name<N: Into<GeneralNames>>(name: N) -> Self

If the subject field contains an empty sequence, then the issuing CA MUST include a subjectAltName extension that is marked as critical. When including the subjectAltName extension in a certificate that has a non-empty subject distinguished name, conforming CAs SHOULD mark the subjectAltName extension as non-critical.

Default is critical.

pub fn new_issuer_alt_name<N: Into<GeneralNames>>(name: N) -> Self

Where present, conforming CAs SHOULD mark this extension as non-critical.

Default is non-critical.

pub fn new_crl_number<N: Into<OctetStringAsn1Container<IntegerAsn1>>>( number: N, ) -> Self

Trait Implementations

impl Clone for Extension

fn clone(&self) -> Extension

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Extension

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Extension

fn deserialize<D>( deserializer: D, ) -> Result<Self, <D as Deserializer<'de>>::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Extension

fn eq(&self, other: &Extension) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Extension

fn serialize<S>( &self, serializer: S, ) -> Result<<S as Serializer>::Ok, <S as Serializer>::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Extension

impl StructuralPartialEq for Extension