Struct webpki::BorrowedCertRevocationList

pub struct BorrowedCertRevocationList<'a> { /* private fields */ }

Borrowed representation of a RFC 5280¹ profile Certificate Revocation List (CRL).

---

1. https://www.rfc-editor.org/rfc/rfc5280#section-5 ↩

Implementations

impl<'a> BorrowedCertRevocationList<'a>

pub fn from_der(crl_der: &'a [u8]) -> Result<Self, Error>

Try to parse the given bytes as a RFC 5280¹ profile Certificate Revocation List (CRL).

Webpki does not support:

• CRL versions other than version 2.
• CRLs missing the next update field.
• CRLs missing certificate revocation list extensions.
• Delta CRLs.
• CRLs larger than (2^32)-1 bytes in size.

---

1. https://www.rfc-editor.org/rfc/rfc5280#section-5 ↩

pub fn to_owned(&self) -> Result<OwnedCertRevocationList, Error>

Convert the CRL to an OwnedCertRevocationList. This may error if any of the revoked certificates in the CRL are malformed or contain unsupported features.

This function is only available when the “alloc” feature is enabled.

Trait Implementations

impl CertRevocationList for BorrowedCertRevocationList<'_>

fn issuer(&self) -> &[u8]

Return the DER encoded issuer of the CRL.

fn find_serial(
    &self,
    serial: &[u8]
) -> Result<Option<BorrowedRevokedCert<'_>>, Error>

Try to find a revoked certificate in the CRL by DER encoded serial number. This may yield an error if the CRL has malformed revoked certificates.

fn verify_signature(
    &self,
    supported_sig_algs: &[&SignatureAlgorithm],
    issuer_spki: &[u8]
) -> Result<(), Error>

Verify the CRL signature using the issuer’s subject public key information (SPKI) and a list of supported signature algorithms.

impl<'a> IntoIterator for &'a BorrowedCertRevocationList<'a>

type Item = Result<BorrowedRevokedCert<'a>, Error>

The type of the elements being iterated over.

type IntoIter = RevokedCerts<'a>

Which kind of iterator are we turning this into?

fn into_iter(self) -> Self::IntoIter

Creates an iterator from a value.