Struct rustls::AllowAnyAnonymousOrAuthenticatedClient

pub struct AllowAnyAnonymousOrAuthenticatedClient { /* private fields */ }

A ClientCertVerifier that will allow both anonymous and authenticated clients, without any name checking.

Client authentication will be requested during the TLS handshake. If the client offers a certificate then this acts like AllowAnyAuthenticatedClient, otherwise this acts like NoClientAuth.

Implementations

impl AllowAnyAnonymousOrAuthenticatedClient

pub fn new(roots: RootCertStore) -> Arc<dyn ClientCertVerifier>

Construct a new AllowAnyAnonymousOrAuthenticatedClient.

roots is the list of trust anchors to use for certificate validation.

Trait Implementations

impl ClientCertVerifier for AllowAnyAnonymousOrAuthenticatedClient

fn offer_client_auth(&self) -> bool

Returns true to enable the server to request a client certificate and false to skip requesting a client certificate. Defaults to true.

fn client_auth_mandatory(&self, _sni: Option<&DNSName>) -> Option<bool>

Return Some(true) to require a client certificate and Some(false) to make client authentication optional. Return None to abort the connection. Defaults to Some(self.offer_client_auth()).

fn client_auth_root_subjects(
    &self,
    sni: Option<&DNSName>
) -> Option<DistinguishedNames>

Returns the subject names of the client authentication trust anchors to share with the client when requesting client authentication.

fn verify_client_cert(
    &self,
    presented_certs: &[Certificate],
    sni: Option<&DNSName>
) -> Result<ClientCertVerified, TLSError>

Verify a certificate chain. presented_certs is the certificate chain from the client.

fn verify_tls12_signature(
    &self,
    message: &[u8],
    cert: &Certificate,
    dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, TLSError>

Verify a signature allegedly by the given server certificate.

fn verify_tls13_signature(
    &self,
    message: &[u8],
    cert: &Certificate,
    dss: &DigitallySignedStruct
) -> Result<HandshakeSignatureValid, TLSError>

Verify a signature allegedly by the given server certificate.

fn supported_verify_schemes(&self) -> Vec<SignatureScheme>

Return the list of SignatureSchemes that this verifier will handle, in verify_tls12_signature and verify_tls13_signature calls.