Struct rustls::AllowAnyAuthenticatedClient

pub struct AllowAnyAuthenticatedClient { /* fields omitted */ }

A ClientCertVerifier that will ensure that every client provides a trusted certificate, without any name checking.

Implementations

impl AllowAnyAuthenticatedClient

pub fn new(roots: RootCertStore) -> Arc<dyn ClientCertVerifier>

Construct a new AllowAnyAuthenticatedClient.

roots is the list of trust anchors to use for certificate validation.

Trait Implementations

impl ClientCertVerifier for AllowAnyAuthenticatedClient

fn offer_client_auth(&self) -> bool

Returns true to enable the server to request a client certificate and false to skip requesting a client certificate. Defaults to true.

fn client_auth_mandatory(&self) -> bool

Returns true to require a client certificate and false to make client authentication optional. Defaults to self.offer_client_auth().

fn client_auth_root_subjects(&self) -> DistinguishedNames

Returns the subject names of the client authentication trust anchors to share with the client when requesting client authentication.

fn verify_client_cert(
    &self,
    presented_certs: &[Certificate]
) -> Result<ClientCertVerified, TLSError>

Verify a certificate chain presented_certs is rooted in roots. Does no further checking of the certificate.