Struct teaclave_attestation::verifier::AttestationReportVerifier

pub struct AttestationReportVerifier {
    pub accepted_enclave_attrs: Vec<EnclaveAttr>,
    pub root_ca: Vec<u8>,
    pub verifier: AttestationReportVerificationFn,
}

Type used to verify attestation reports (this can be set as a certificate verifier in rustls::ClientConfig).

Fields

accepted_enclave_attrs: Vec<EnclaveAttr>

Valid enclave attributes (only enclaves with attributes in this vector will be accepted).

root_ca: Vec<u8>

Root certificate of the attestation service provider (e.g., IAS).

verifier: AttestationReportVerificationFn

User defined function to verify the attestation report.

Implementations

impl AttestationReportVerifier

pub fn new(
    accepted_enclave_attrs: Vec<EnclaveAttr>,
    root_ca: &[u8],
    verifier: AttestationReportVerificationFn
) -> Self

Trait Implementations

impl ClientCertVerifier for AttestationReportVerifier

fn offer_client_auth(&self) -> bool

Returns true to enable the server to request a client certificate and false to skip requesting a client certificate. Defaults to true.

fn client_auth_root_subjects(&self) -> &[DistinguishedName]

Returns the Subjects of the client authentication trust anchors to share with the client when requesting client authentication.

fn verify_client_cert(
    &self,
    end_entity: &Certificate,
    _intermediates: &[Certificate],
    _now: SystemTime
) -> Result<ClientCertVerified, Error>

Verify the end-entity certificate end_entity is valid, acceptable, and chains to at least one of the trust anchors trusted by this verifier.

fn client_auth_mandatory(&self) -> bool

Return true to require a client certificate and false to make client authentication optional. Defaults to Some(self.offer_client_auth()).

fn verify_tls12_signature(
    &self,
    message: &[u8],
    cert: &Certificate,
    dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given client certificate.

fn verify_tls13_signature(
    &self,
    message: &[u8],
    cert: &Certificate,
    dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given client certificate.

fn supported_verify_schemes(&self) -> Vec<SignatureScheme, Global>

Return the list of SignatureSchemes that this verifier will handle, in verify_tls12_signature and verify_tls13_signature calls.

impl Clone for AttestationReportVerifier

fn clone(&self) -> AttestationReportVerifier

Returns a copy of the value.

const fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl ServerCertVerifier for AttestationReportVerifier

fn verify_server_cert(
    &self,
    end_entity: &Certificate,
    _intermediates: &[Certificate],
    _server_name: &ServerName,
    _scts: &mut dyn Iterator<Item = &[u8]>,
    _ocsp: &[u8],
    _now: SystemTime
) -> Result<ServerCertVerified, Error>

Verify the end-entity certificate end_entity is valid for the hostname dns_name and chains to at least one trust anchor.

fn verify_tls12_signature(
    &self,
    message: &[u8],
    cert: &Certificate,
    dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn verify_tls13_signature(
    &self,
    message: &[u8],
    cert: &Certificate,
    dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, Error>

Verify a signature allegedly by the given server certificate.

fn supported_verify_schemes(&self) -> Vec<SignatureScheme, Global>

Return the list of SignatureSchemes that this verifier will handle, in verify_tls12_signature and verify_tls13_signature calls.

fn request_scts(&self) -> bool

Returns true if Rustls should ask the server to send SCTs.