Struct webpki::BorrowedCertRevocationList
source · pub struct BorrowedCertRevocationList<'a> { /* private fields */ }
Expand description
Borrowed representation of a RFC 52801 profile Certificate Revocation List (CRL).
Implementations§
source§impl<'a> BorrowedCertRevocationList<'a>
impl<'a> BorrowedCertRevocationList<'a>
sourcepub fn from_der(crl_der: &'a [u8]) -> Result<Self, Error>
pub fn from_der(crl_der: &'a [u8]) -> Result<Self, Error>
Try to parse the given bytes as a RFC 52801 profile Certificate Revocation List (CRL).
Webpki does not support:
- CRL versions other than version 2.
- CRLs missing the next update field.
- CRLs missing certificate revocation list extensions.
- Delta CRLs.
- CRLs larger than (2^32)-1 bytes in size.
sourcepub fn to_owned(&self) -> Result<OwnedCertRevocationList, Error>
pub fn to_owned(&self) -> Result<OwnedCertRevocationList, Error>
Convert the CRL to an OwnedCertRevocationList
. This may error if any of the revoked
certificates in the CRL are malformed or contain unsupported features.
Trait Implementations§
source§impl CertRevocationList for BorrowedCertRevocationList<'_>
impl CertRevocationList for BorrowedCertRevocationList<'_>
source§fn find_serial(
&self,
serial: &[u8]
) -> Result<Option<BorrowedRevokedCert<'_>>, Error>
fn find_serial( &self, serial: &[u8] ) -> Result<Option<BorrowedRevokedCert<'_>>, Error>
Try to find a revoked certificate in the CRL by DER encoded serial number. This
may yield an error if the CRL has malformed revoked certificates.
source§fn verify_signature(
&self,
supported_sig_algs: &[&SignatureAlgorithm],
issuer_spki: &[u8]
) -> Result<(), Error>
fn verify_signature( &self, supported_sig_algs: &[&SignatureAlgorithm], issuer_spki: &[u8] ) -> Result<(), Error>
Verify the CRL signature using the issuer’s subject public key information (SPKI)
and a list of supported signature algorithms.