Struct SecTrust

pub struct SecTrust(/* private fields */);

A type representing a trust evaluation for a certificate.

Implementations

impl SecTrust

pub fn create_with_certificates( certs: &[SecCertificate], policies: &[SecPolicy], ) -> Result<Self>

Creates a SecTrustRef that is configured with a certificate chain, for validating that chain against a collection of policies.

pub fn set_trust_verify_date(&mut self, date: &CFDate) -> Result<()>

Sets the date and time against which the certificates in this trust object are verified.

pub fn set_anchor_certificates( &mut self, certs: &[SecCertificate], ) -> Result<()>

Sets additional anchor certificates used to validate trust.

pub fn copy_anchor_certificates() -> Result<Vec<SecCertificate>>

Retrieves the anchor (root) certificates stored by macOS

pub fn set_trust_anchor_certificates_only(&mut self, only: bool) -> Result<()>

If set to true, only the certificates specified by set_anchor_certificates will be trusted, but not globally trusted certificates.

pub fn set_policy(&mut self, policy: &SecPolicy) -> Result<()>

Sets the policy used to evaluate trust.

pub fn set_options(&mut self, options: TrustOptions) -> Result<()>

Sets option flags for customizing evaluation of a trust object.

pub fn get_network_fetch_allowed(&mut self) -> Result<bool>

Indicates whether this trust object is permitted to fetch missing intermediate certificates from the network.

pub fn set_network_fetch_allowed(&mut self, allowed: bool) -> Result<()>

Specifies whether this trust object is permitted to fetch missing intermediate certificates from the network.

pub fn set_trust_ocsp_response<I: Iterator<Item = impl AsRef<[u8]>>>( &mut self, ocsp_response: I, ) -> Result<()>

Attaches Online Certificate Status Protocol (OSCP) response data to this trust object.

pub fn set_signed_certificate_timestamps<I: Iterator<Item = impl AsRef<[u8]>>>( &mut self, scts: I, ) -> Result<()>

Attaches signed certificate timestamp data to this trust object.

pub fn copy_public_key(&mut self) -> Result<SecKey>

Returns the public key for a leaf certificate after it has been evaluated.

pub fn evaluate(&self) -> Result<TrustResult>

👎Deprecated: use evaluate_with_error

Evaluates trust.

pub fn evaluate_with_error(&self) -> Result<(), CFError>

Evaluates trust. Requires macOS 10.14 or iOS, otherwise it just calls evaluate()

pub fn certificate_count(&self) -> CFIndex

Returns the number of certificates in an evaluated certificate chain.

Note: evaluate must first be called on the SecTrust.

pub fn certificate_at_index(&self, ix: CFIndex) -> Option<SecCertificate>

👎Deprecated: deprecated by Apple

Returns a specific certificate from the certificate chain used to evaluate trust.

Note: evaluate must first be called on the SecTrust.

Trait Implementations

impl Clone for SecTrust

fn clone(&self) -> SecTrust

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Drop for SecTrust

fn drop(&mut self)

Executes the destructor for this type.

impl PartialEq for SecTrust

fn eq(&self, other: &SecTrust) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl TCFType for SecTrust

type Ref = *mut __SecTrust

The reference type wrapped inside this type.

fn as_concrete_TypeRef(&self) -> SecTrustRef

Returns the object as its concrete TypeRef.

unsafe fn wrap_under_get_rule(reference: SecTrustRef) -> Self

Returns an instance of the object, wrapping the underlying CFTypeRef subclass. Use this when following Core Foundation’s “Get Rule”. The reference count is bumped.

fn as_CFTypeRef(&self) -> CFTypeRef

Returns the object as a raw CFTypeRef. The reference count is not adjusted.

unsafe fn wrap_under_create_rule(reference: SecTrustRef) -> Self

Returns an instance of the object, wrapping the underlying CFTypeRef subclass. Use this when following Core Foundation’s “Create Rule”. The reference count is not bumped.

fn type_id() -> CFTypeID

Returns the type ID for this class.

fn as_CFType(&self) -> CFType

Returns the object as a wrapped CFType. The reference count is incremented by one.

fn into_CFType(self) -> CFType

where Self: Sized,

Returns the object as a wrapped CFType. Consumes self and avoids changing the reference count.

fn retain_count(&self) -> isize

Returns the reference count of the object. It is unwise to do anything other than test whether the return value of this method is greater than zero.

fn type_of(&self) -> usize

Returns the type ID of this object.

fn show(&self)

Writes a debugging version of this object on standard error.

fn instance_of<OtherCFType>(&self) -> bool

where OtherCFType: TCFType,

Returns true if this value is an instance of another type.

impl<'a> ToVoid<SecTrust> for &'a SecTrust

fn to_void(&self) -> *const c_void

impl ToVoid<SecTrust> for SecTrustRef

fn to_void(&self) -> *const c_void

impl ToVoid<SecTrust> for SecTrust

fn to_void(&self) -> *const c_void

impl ConcreteCFType for SecTrust

impl Eq for SecTrust

impl Send for SecTrust

impl Sync for SecTrust