Struct X509

pub struct X509(/* private fields */);

An X509 public key certificate.

Implementations

impl X509

pub fn builder() -> Result<X509Builder, ErrorStack>

Returns a new builder.

pub fn from_pem(pem: &[u8]) -> Result<X509, ErrorStack>

Deserializes a PEM-encoded X509 structure.

The input should have a header of -----BEGIN CERTIFICATE-----.

This corresponds to PEM_read_bio_X509.

pub fn from_der(der: &[u8]) -> Result<X509, ErrorStack>

Deserializes a DER-encoded X509 structure.

This corresponds to d2i_X509.

pub fn stack_from_pem(pem: &[u8]) -> Result<Vec<X509>, ErrorStack>

Deserializes a list of PEM-formatted certificates.

Methods from Deref<Target = X509Ref>

pub fn subject_name(&self) -> &X509NameRef

Returns this certificate’s subject name.

This corresponds to X509_get_subject_name.

pub fn subject_name_hash(&self) -> u32

Returns the hash of the certificates subject

This corresponds to X509_subject_name_hash.

pub fn subject_alt_names(&self) -> Option<Stack<GeneralName>>

Returns this certificate’s subject alternative name entries, if they exist.

This corresponds to X509_get_ext_d2i.

pub fn issuer_name(&self) -> &X509NameRef

Returns this certificate’s issuer name.

This corresponds to X509_get_issuer_name.

pub fn issuer_alt_names(&self) -> Option<Stack<GeneralName>>

Returns this certificate’s issuer alternative name entries, if they exist.

This corresponds to X509_get_ext_d2i.

pub fn subject_key_id(&self) -> Option<&Asn1StringRef>

Returns this certificate’s subject key id, if it exists.

This corresponds to X509_get0_subject_key_id.

pub fn authority_key_id(&self) -> Option<&Asn1StringRef>

Returns this certificate’s authority key id, if it exists.

This corresponds to X509_get0_authority_key_id.

pub fn public_key(&self) -> Result<PKey<Public>, ErrorStack>

pub fn digest( &self, hash_type: MessageDigest, ) -> Result<DigestBytes, ErrorStack>

Returns a digest of the DER representation of the certificate.

This corresponds to X509_digest.

pub fn fingerprint( &self, hash_type: MessageDigest, ) -> Result<Vec<u8>, ErrorStack>

👎Deprecated since 0.10.9: renamed to digest

pub fn not_after(&self) -> &Asn1TimeRef

Returns the certificate’s Not After validity period.

pub fn not_before(&self) -> &Asn1TimeRef

Returns the certificate’s Not Before validity period.

pub fn signature(&self) -> &Asn1BitStringRef

Returns the certificate’s signature

pub fn signature_algorithm(&self) -> &X509AlgorithmRef

Returns the certificate’s signature algorithm.

pub fn ocsp_responders(&self) -> Result<Stack<OpensslString>, ErrorStack>

Returns the list of OCSP responder URLs specified in the certificate’s Authority Information Access field.

pub fn issued(&self, subject: &X509Ref) -> Result<(), X509VerifyError>

Checks that this certificate issued subject.

pub fn verify<T>(&self, key: &PKeyRef<T>) -> Result<bool, ErrorStack>

where T: HasPublic,

Check if the certificate is signed using the given public key.

Only the signature is checked: no other checks (such as certificate chain validity) are performed.

Returns true if verification succeeds.

This corresponds to X509_verify.

pub fn serial_number(&self) -> &Asn1IntegerRef

Returns this certificate’s serial number.

This corresponds to X509_get_serialNumber.

pub fn check_host(&self, host: &str) -> Result<bool, ErrorStack>

pub fn to_pem(&self) -> Result<Vec<u8>, ErrorStack>

Serializes the certificate into a PEM-encoded X509 structure.

The output will have a header of -----BEGIN CERTIFICATE-----.

This corresponds to PEM_write_bio_X509.

pub fn to_der(&self) -> Result<Vec<u8>, ErrorStack>

Serializes the certificate into a DER-encoded X509 structure.

This corresponds to i2d_X509.

Trait Implementations

impl AsMut<X509Ref> for X509

fn as_mut(&mut self) -> &mut X509Ref

Converts this type into a mutable reference of the (usually inferred) input type.

impl AsRef<X509Ref> for X509

fn as_ref(&self) -> &X509Ref

Converts this type into a shared reference of the (usually inferred) input type.

impl Borrow<X509Ref> for X509

fn borrow(&self) -> &X509Ref

Immutably borrows from an owned value.

impl BorrowMut<X509Ref> for X509

fn borrow_mut(&mut self) -> &mut X509Ref

Mutably borrows from an owned value.

impl Clone for X509

fn clone(&self) -> X509

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for X509

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Deref for X509

type Target = X509Ref

The resulting type after dereferencing.

fn deref(&self) -> &X509Ref

Dereferences the value.

impl DerefMut for X509

fn deref_mut(&mut self) -> &mut X509Ref

Mutably dereferences the value.

impl Drop for X509

fn drop(&mut self)

Executes the destructor for this type.

impl ForeignType for X509

type CType = x509_st

The raw C type.

type Ref = X509Ref

The type representing a reference to this type.

unsafe fn from_ptr(ptr: *mut x509_st) -> X509

Constructs an instance of this type from its raw type.

fn as_ptr(&self) -> *mut x509_st

Returns a raw pointer to the wrapped value.

fn into_ptr(self) -> *mut Self::CType

Consumes the wrapper and returns the raw pointer.

impl Stackable for X509

type StackType = stack_st_X509

The C stack type for this element.

impl Send for X509

impl Sync for X509