Enum X509Error

pub enum X509Error {
    Generic,
    InvalidVersion,
    InvalidSerial,
    InvalidAlgorithmIdentifier,
    InvalidX509Name,
    InvalidDate,
    InvalidSPKI,
    InvalidSubjectUID,
    InvalidIssuerUID,
    InvalidExtensions,
    InvalidAttributes,
    DuplicateExtensions,
    DuplicateAttributes,
    InvalidSignatureValue,
    InvalidTbsCertificate,
    InvalidUserCertificate,
    InvalidCertificate,
    SignatureVerificationError,
    SignatureUnsupportedAlgorithm,
    InvalidNumber,
    Der(Error),
    NomError(ErrorKind),
}

Available on crate feature mtls only.

An error that can occur while parsing or validating a certificate.

Variants

Generic

InvalidVersion

InvalidSerial

InvalidAlgorithmIdentifier

InvalidX509Name

InvalidDate

InvalidSPKI

InvalidSubjectUID

InvalidIssuerUID

InvalidExtensions

InvalidAttributes

DuplicateExtensions

DuplicateAttributes

InvalidSignatureValue

InvalidTbsCertificate

InvalidUserCertificate

InvalidCertificate

Top-level certificate structure is invalid

SignatureVerificationError

SignatureUnsupportedAlgorithm

InvalidNumber

Der(Error)

NomError(ErrorKind)

Trait Implementations

impl Clone for X509Error

fn clone(&self) -> X509Error

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for X509Error

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for X509Error

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Error for X509Error

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0: use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0: replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<Err<Error>> for X509Error

fn from(e: Err<Error>) -> X509Error

Converts to this type from the input type.

impl From<Err<X509Error>> for X509Error

fn from(e: Err<X509Error>) -> X509Error

Converts to this type from the input type.

impl From<Error> for X509Error

fn from(source: Error) -> X509Error

Converts to this type from the input type.

impl From<ErrorKind> for X509Error

fn from(e: ErrorKind) -> X509Error

Converts to this type from the input type.

impl From<X509Error> for Err<X509Error>

fn from(e: X509Error) -> Err<X509Error>

Converts to this type from the input type.

impl<'a> FromDer<'a, X509Error> for ASN1Time

fn from_der(i: &[u8]) -> Result<(&[u8], ASN1Time), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for AttributeTypeAndValue<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], AttributeTypeAndValue<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for AuthorityInfoAccess<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], AuthorityInfoAccess<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for AuthorityKeyIdentifier<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], AuthorityKeyIdentifier<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for BasicConstraints

fn from_der(i: &'a [u8]) -> Result<(&'a [u8], BasicConstraints), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for CRLDistributionPoints<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], CRLDistributionPoints<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for CertificateRevocationList<'a>

CertificateList  ::=  SEQUENCE  {
     tbsCertList          TBSCertList,
     signatureAlgorithm   AlgorithmIdentifier,
     signatureValue       BIT STRING  }

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], CertificateRevocationList<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for ExtendedKeyUsage<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], ExtendedKeyUsage<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for ExtensionRequest<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], ExtensionRequest<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for GeneralName<'a>

fn from_der(i: &'a [u8]) -> Result<(&'a [u8], GeneralName<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for InhibitAnyPolicy

fn from_der(i: &'a [u8]) -> Result<(&'a [u8], InhibitAnyPolicy), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for IssuerAlternativeName<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], IssuerAlternativeName<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for KeyIdentifier<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], KeyIdentifier<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for KeyUsage

fn from_der(i: &'a [u8]) -> Result<(&'a [u8], KeyUsage), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for NSCertType

fn from_der(i: &'a [u8]) -> Result<(&'a [u8], NSCertType), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for NameConstraints<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], NameConstraints<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for PolicyConstraints

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], PolicyConstraints), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for PolicyMappings<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], PolicyMappings<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for RSAPublicKey<'a>

fn from_der( bytes: &'a [u8], ) -> Result<(&'a [u8], RSAPublicKey<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for RelativeDistinguishedName<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], RelativeDistinguishedName<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for RevokedCertificate<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], RevokedCertificate<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for SubjectAlternativeName<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], SubjectAlternativeName<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for SubjectPublicKeyInfo<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], SubjectPublicKeyInfo<'a>), Err<X509Error>>

Parse the SubjectPublicKeyInfo struct portion of a DER-encoded X.509 Certificate

impl<'a> FromDer<'a, X509Error> for TbsCertList<'a>

fn from_der(i: &'a [u8]) -> Result<(&'a [u8], TbsCertList<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for TbsCertificate<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], TbsCertificate<'a>), Err<X509Error>>

Parse a DER-encoded TbsCertificate object

TBSCertificate  ::=  SEQUENCE  {
     version         [0]  Version DEFAULT v1,
     serialNumber         CertificateSerialNumber,
     signature            AlgorithmIdentifier,
     issuer               Name,
     validity             Validity,
     subject              Name,
     subjectPublicKeyInfo SubjectPublicKeyInfo,
     issuerUniqueID  [1]  IMPLICIT UniqueIdentifier OPTIONAL,
                          -- If present, version MUST be v2 or v3
     subjectUniqueID [2]  IMPLICIT UniqueIdentifier OPTIONAL,
                          -- If present, version MUST be v2 or v3
     extensions      [3]  Extensions OPTIONAL
                          -- If present, version MUST be v3 --  }

impl<'a> FromDer<'a, X509Error> for Validity

fn from_der(i: &[u8]) -> Result<(&[u8], Validity), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for X509Certificate<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], X509Certificate<'a>), Err<X509Error>>

Parse a DER-encoded X.509 Certificate, and return the remaining of the input and the built object.

The returned object uses zero-copy, and so has the same lifetime as the input.

Note that only parsing is done, not validation.

Certificate  ::=  SEQUENCE  {
        tbsCertificate       TBSCertificate,
        signatureAlgorithm   AlgorithmIdentifier,
        signatureValue       BIT STRING  }

Example

To parse a certificate and print the subject and issuer:

let res = parse_x509_certificate(DER);
match res {
    Ok((_rem, x509)) => {
        let subject = x509.subject();
        let issuer = x509.issuer();
        println!("X.509 Subject: {}", subject);
        println!("X.509 Issuer: {}", issuer);
    },
    _ => panic!("x509 parsing failed: {:?}", res),
}

impl<'a> FromDer<'a, X509Error> for X509CertificationRequest<'a>

CertificationRequest ::= SEQUENCE {
    certificationRequestInfo CertificationRequestInfo,
    signatureAlgorithm AlgorithmIdentifier{{ SignatureAlgorithms }},
    signature          BIT STRING
}

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], X509CertificationRequest<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for X509CertificationRequestInfo<'a>

CertificationRequestInfo ::= SEQUENCE {
     version       INTEGER { v1(0) } (v1,...),
     subject       Name,
     subjectPKInfo SubjectPublicKeyInfo{{ PKInfoAlgorithms }},
     attributes    [0] Attributes{{ CRIAttributes }}
}

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], X509CertificationRequestInfo<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for X509CriAttribute<'a>

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], X509CriAttribute<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for X509Extension<'a>

Extension  ::=  SEQUENCE  {
    extnID      OBJECT IDENTIFIER,
    critical    BOOLEAN DEFAULT FALSE,
    extnValue   OCTET STRING  }

fn from_der( i: &'a [u8], ) -> Result<(&'a [u8], X509Extension<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'a> FromDer<'a, X509Error> for X509Name<'a>

fn from_der(i: &'a [u8]) -> Result<(&'a [u8], X509Name<'a>), Err<X509Error>>

Parse the X.501 type Name, used for ex in issuer and subject of a X.509 certificate

impl<'a> FromDer<'a, X509Error> for X509Version

fn from_der(i: &'a [u8]) -> Result<(&'a [u8], X509Version), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<'ber, 'a> FromDer<'ber, X509Error> for AlgorithmIdentifier<'a>

where 'ber: 'a,

fn from_der( bytes: &'ber [u8], ) -> Result<(&'ber [u8], AlgorithmIdentifier<'a>), Err<X509Error>>

Attempt to parse input bytes into a DER object (enforcing constraints)

impl<I> ParseError<I> for X509Error

fn from_error_kind(_input: I, kind: ErrorKind) -> X509Error

Creates an error from the input position and an ErrorKind

fn append(_input: I, kind: ErrorKind, _other: X509Error) -> X509Error

Combines an existing error with a new one created from the input position and an ErrorKind. This is useful when backtracking through a parse tree, accumulating error context on the way

fn from_char(input: I, _: char) -> Self

Creates an error from an input position and an expected character

fn or(self, other: Self) -> Self

Combines two existing errors. This function is used to compare errors generated in various branches of alt.

impl<'a> Parser<&'a [u8], TbsCertificate<'a>, X509Error> for TbsCertificateParser

fn parse( &mut self, input: &'a [u8], ) -> Result<(&'a [u8], TbsCertificate<'a>), Err<X509Error>>

A parser takes in input type, and returns a Result containing either the remaining input and the output value, or an error

fn map<G, O2>(self, g: G) -> Map<Self, G, O>

where G: Fn(O) -> O2, Self: Sized,

Maps a function over the result of a parser

fn flat_map<G, H, O2>(self, g: G) -> FlatMap<Self, G, O>

where G: FnMut(O) -> H, H: Parser<I, O2, E>, Self: Sized,

Creates a second parser from the output of the first one, then apply over the rest of the input

fn and_then<G, O2>(self, g: G) -> AndThen<Self, G, O>

where G: Parser<O, O2, E>, Self: Sized,

Applies a second parser over the output of the first one

fn and<G, O2>(self, g: G) -> And<Self, G>

where G: Parser<I, O2, E>, Self: Sized,

Applies a second parser after the first one, return their results as a tuple

fn or<G>(self, g: G) -> Or<Self, G>

where G: Parser<I, O, E>, Self: Sized,

Applies a second parser over the input if the first one failed

fn into<O2, E2>(self) -> Into<Self, O, O2, E, E2>

where O2: From<O>, E2: From<E>, Self: Sized,

automatically converts the parser’s output and error values to another type, as long as they implement the From trait

impl<'a> Parser<&'a [u8], X509Certificate<'a>, X509Error> for X509CertificateParser

fn parse( &mut self, input: &'a [u8], ) -> Result<(&'a [u8], X509Certificate<'a>), Err<X509Error>>

A parser takes in input type, and returns a Result containing either the remaining input and the output value, or an error

fn map<G, O2>(self, g: G) -> Map<Self, G, O>

where G: Fn(O) -> O2, Self: Sized,

Maps a function over the result of a parser

fn flat_map<G, H, O2>(self, g: G) -> FlatMap<Self, G, O>

where G: FnMut(O) -> H, H: Parser<I, O2, E>, Self: Sized,

Creates a second parser from the output of the first one, then apply over the rest of the input

fn and_then<G, O2>(self, g: G) -> AndThen<Self, G, O>

where G: Parser<O, O2, E>, Self: Sized,

Applies a second parser over the output of the first one

fn and<G, O2>(self, g: G) -> And<Self, G>

where G: Parser<I, O2, E>, Self: Sized,

Applies a second parser after the first one, return their results as a tuple

fn or<G>(self, g: G) -> Or<Self, G>

where G: Parser<I, O, E>, Self: Sized,

Applies a second parser over the input if the first one failed

fn into<O2, E2>(self) -> Into<Self, O, O2, E, E2>

where O2: From<O>, E2: From<E>, Self: Sized,

automatically converts the parser’s output and error values to another type, as long as they implement the From trait

impl<'a> Parser<&'a [u8], X509Extension<'a>, X509Error> for X509ExtensionParser

fn parse( &mut self, input: &'a [u8], ) -> Result<(&'a [u8], X509Extension<'a>), Err<X509Error>>

A parser takes in input type, and returns a Result containing either the remaining input and the output value, or an error

fn map<G, O2>(self, g: G) -> Map<Self, G, O>

where G: Fn(O) -> O2, Self: Sized,

Maps a function over the result of a parser

fn flat_map<G, H, O2>(self, g: G) -> FlatMap<Self, G, O>

where G: FnMut(O) -> H, H: Parser<I, O2, E>, Self: Sized,

Creates a second parser from the output of the first one, then apply over the rest of the input

fn and_then<G, O2>(self, g: G) -> AndThen<Self, G, O>

where G: Parser<O, O2, E>, Self: Sized,

Applies a second parser over the output of the first one

fn and<G, O2>(self, g: G) -> And<Self, G>

where G: Parser<I, O2, E>, Self: Sized,

Applies a second parser after the first one, return their results as a tuple

fn or<G>(self, g: G) -> Or<Self, G>

where G: Parser<I, O, E>, Self: Sized,

Applies a second parser over the input if the first one failed

fn into<O2, E2>(self) -> Into<Self, O, O2, E, E2>

where O2: From<O>, E2: From<E>, Self: Sized,

automatically converts the parser’s output and error values to another type, as long as they implement the From trait

impl PartialEq for X509Error

fn eq(&self, other: &X509Error) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for X509Error