19 lines
4.8 KiB
HTML
19 lines
4.8 KiB
HTML
<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta name="generator" content="rustdoc"><meta name="description" content="Interprets the given pre-validated DER-encoded certificate as a `TrustAnchor`."><title>anchor_from_trusted_cert in webpki - Rust</title><script>if(window.location.protocol!=="file:")document.head.insertAdjacentHTML("beforeend","SourceSerif4-Regular-6b053e98.ttf.woff2,FiraSans-Italic-81dc35de.woff2,FiraSans-Regular-0fe48ade.woff2,FiraSans-MediumItalic-ccf7e434.woff2,FiraSans-Medium-e1aa3f0a.woff2,SourceCodePro-Regular-8badfe75.ttf.woff2,SourceCodePro-Semibold-aa29a496.ttf.woff2".split(",").map(f=>`<link rel="preload" as="font" type="font/woff2"href="../static.files/${f}">`).join(""))</script><link rel="stylesheet" href="../static.files/normalize-9960930a.css"><link rel="stylesheet" href="../static.files/rustdoc-ca0dd0c4.css"><meta name="rustdoc-vars" data-root-path="../" data-static-root-path="../static.files/" data-current-crate="webpki" data-themes="" data-resource-suffix="" data-rustdoc-version="1.93.1 (01f6ddf75 2026-02-11) (Arch Linux rust 1:1.93.1-1)" data-channel="1.93.1" data-search-js="search-9e2438ea.js" data-stringdex-js="stringdex-a3946164.js" data-settings-js="settings-c38705f0.js" ><script src="../static.files/storage-e2aeef58.js"></script><script defer src="sidebar-items.js"></script><script defer src="../static.files/main-a410ff4d.js"></script><noscript><link rel="stylesheet" href="../static.files/noscript-263c88ec.css"></noscript><link rel="alternate icon" type="image/png" href="../static.files/favicon-32x32-eab170b8.png"><link rel="icon" type="image/svg+xml" href="../static.files/favicon-044be391.svg"></head><body class="rustdoc fn"><!--[if lte IE 11]><div class="warning">This old browser is unsupported and will most likely display funky things.</div><![endif]--><rustdoc-topbar><h2><a href="#">anchor_from_trusted_cert</a></h2></rustdoc-topbar><nav class="sidebar"><div class="sidebar-crate"><h2><a href="../webpki/index.html">webpki</a><span class="version">0.103.9</span></h2></div><div class="sidebar-elems"><div id="rustdoc-modnav"></div></div></nav><div class="sidebar-resizer" title="Drag to resize sidebar"></div><main><div class="width-limiter"><section id="main-content" class="content"><div class="main-heading"><div class="rustdoc-breadcrumbs"><a href="index.html">webpki</a></div><h1>Function <span class="fn">anchor_<wbr>from_<wbr>trusted_<wbr>cert</span> <button id="copy-path" title="Copy item path to clipboard">Copy item path</button></h1><rustdoc-toolbar></rustdoc-toolbar><span class="sub-heading"><a class="src" href="../src/webpki/trust_anchor.rs.html#27-44">Source</a> </span></div><pre class="rust item-decl"><code>pub fn anchor_from_trusted_cert<'a>(
|
||
cert: &'a <a class="struct" href="../rustls_pki_types/struct.CertificateDer.html" title="struct rustls_pki_types::CertificateDer">CertificateDer</a><'a>,
|
||
) -> <a class="enum" href="https://doc.rust-lang.org/1.93.1/core/result/enum.Result.html" title="enum core::result::Result">Result</a><<a class="struct" href="../rustls_pki_types/struct.TrustAnchor.html" title="struct rustls_pki_types::TrustAnchor">TrustAnchor</a><'a>, <a class="enum" href="enum.Error.html" title="enum webpki::Error">Error</a>></code></pre><details class="toggle top-doc" open><summary class="hideme"><span>Expand description</span></summary><div class="docblock"><p>Interprets the given pre-validated DER-encoded certificate as a <code>TrustAnchor</code>.</p>
|
||
<p>This function extracts the components of a trust anchor (see <a href="https://datatracker.ietf.org/doc/html/rfc5280#section-6.1.1">RFC 5280 6.1.1</a>) from
|
||
an X.509 certificate obtained from a source trusted to have appropriately validated
|
||
the subject name, public key, and name constraints in the certificate, for example your
|
||
operating system’s trust store.</p>
|
||
<p>No additional checks on the content of the certificate, including whether it is self-signed,
|
||
or has a basic constraints extension indicating the <code>cA</code> boolean is true, will be performed.
|
||
<a href="https://www.rfc-editor.org/rfc/rfc5280#section-6.2">RFC 5280 6.2</a> notes:</p>
|
||
<blockquote>
|
||
<p>Implementations that use self-signed certificates to specify trust
|
||
anchor information are free to process or ignore such information.</p>
|
||
</blockquote>
|
||
<p>This function is intended for users constructing <code>TrustAnchor</code>’s from existing trust stores
|
||
that express trust anchors as X.509 certificates. It should <strong>not</strong> be used to treat an
|
||
end-entity certificate as a <code>TrustAnchor</code> in an effort to validate the same end-entity
|
||
certificate during path building. Webpki has no support for self-signed certificates.</p>
|
||
</div></details></section></div></main></body></html> |