Enum Error 

#[non_exhaustive]
pub enum Error {
    InappropriateMessage {
        expect_types: Vec<ContentType>,
        got_type: ContentType,
    },
    InappropriateHandshakeMessage {
        expect_types: Vec<HandshakeType>,
        got_type: HandshakeType,
    },
    InvalidEncryptedClientHello(EncryptedClientHelloError),
    InvalidMessage(InvalidMessage),
    UnsupportedNameType,
    DecryptError,
    EncryptError,
    PeerIncompatible(PeerIncompatible),
    PeerMisbehaved(PeerMisbehaved),
    AlertReceived(AlertDescription),
    InvalidCertificate(CertificateError),
    InvalidCertRevocationList(CertRevocationListError),
    General(String),
    FailedToGetCurrentTime,
    FailedToGetRandomBytes,
    HandshakeNotComplete,
    PeerSentOversizedRecord,
    NoApplicationProtocol,
    NoSuitableCertificate,
    BadMaxFragmentSize,
    InconsistentKeys(InconsistentKeys),
    RejectedEch(RejectedEch),
    Unreachable(&'static str),
    ApiMisuse(ApiMisuse),
    Other(OtherError),
}

rustls reports protocol errors using this type.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

InappropriateMessage

We received a TLS message that isn’t valid right now. expect_types lists the message types we can expect right now. got_type is the type we found. This error is typically caused by a buggy TLS stack (the peer or this one), a broken network, or an attack.

Fields

expect_types: Vec<ContentType>

Which types we expected

got_type: ContentType

What type we received

InappropriateHandshakeMessage

We received a TLS handshake message that isn’t valid right now. expect_types lists the handshake message types we can expect right now. got_type is the type we found.

Fields

expect_types: Vec<HandshakeType>

Which handshake type we expected

got_type: HandshakeType

What handshake type we received

InvalidEncryptedClientHello(EncryptedClientHelloError)

An error occurred while handling Encrypted Client Hello (ECH).

InvalidMessage(InvalidMessage)

The peer sent us a TLS message with invalid contents.

UnsupportedNameType

The certificate verifier doesn’t support the given type of name.

DecryptError

We couldn’t decrypt a message. This is invariably fatal.

EncryptError

We couldn’t encrypt a message because it was larger than the allowed message size. This should never happen if the application is using valid record sizes.

PeerIncompatible(PeerIncompatible)

The peer doesn’t support a protocol version/feature we require. The parameter gives a hint as to what version/feature it is.

PeerMisbehaved(PeerMisbehaved)

The peer deviated from the standard TLS protocol. The parameter gives a hint where.

AlertReceived(AlertDescription)

We received a fatal alert. This means the peer is unhappy.

InvalidCertificate(CertificateError)

We saw an invalid certificate.

The contained error is from the certificate validation trait implementation.

InvalidCertRevocationList(CertRevocationListError)

A provided certificate revocation list (CRL) was invalid.

General(String)

A catch-all error for unlikely errors.

FailedToGetCurrentTime

We failed to figure out what time it currently is.

FailedToGetRandomBytes

We failed to acquire random bytes from the system.

HandshakeNotComplete

This function doesn’t work until the TLS handshake is complete.

PeerSentOversizedRecord

The peer sent an oversized record/fragment.

NoApplicationProtocol

An incoming connection did not support any known application protocol.

NoSuitableCertificate

The server certificate resolver didn’t find an appropriate certificate.

BadMaxFragmentSize

The max_fragment_size value supplied in configuration was too small, or too large.

InconsistentKeys(InconsistentKeys)

Specific failure cases from Credentials::new() or a crate::crypto::SigningKey that cannot produce a corresponding public key.

If encountered while building a Credentials, consider if Credentials::new_unchecked() might be appropriate for your use case.

RejectedEch(RejectedEch)

The server rejected encrypted client hello (ECH) negotiation

It may have returned new ECH configurations that could be used to retry negotiation with a fresh connection.

See RejectedEch::can_retry() and crate::client::EchConfig::for_retry().

Unreachable(&'static str)

Errors of this variant should never be produced by the library.

Please file a bug if you see one.

ApiMisuse(ApiMisuse)

The caller misused the API

Generally we try to make error cases like this unnecessary by embedding the constraints in the type system, so misuses simply do not compile. But, for cases where that is not possible or exceptionally costly, we return errors of this variant.

This only results from the ordering, dependencies or parameter values of calls, so (assuming parameter values are fixed) these can be determined and fixed by reading the code. They are never caused by the values of untrusted data, or other non-determinism.

Other(OtherError)

Any other error.

This variant should only be used when the error is not better described by a more specific variant. For example, if a custom crypto provider returns a provider specific error.

Enums holding this variant will never compare equal to each other.

Trait Implementations

impl Clone for Error

fn clone(&self) -> Error

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Error

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for Error

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for Error

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0: use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0: replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<ApiMisuse> for Error

fn from(e: ApiMisuse) -> Self

Converts to this type from the input type.

impl From<CertRevocationListError> for Error

fn from(e: CertRevocationListError) -> Self

Converts to this type from the input type.

impl From<CertificateError> for Error

fn from(e: CertificateError) -> Self

Converts to this type from the input type.

impl From<EncryptedClientHelloError> for Error

fn from(e: EncryptedClientHelloError) -> Self

Converts to this type from the input type.

impl From<GetRandomFailed> for Error

fn from(_: GetRandomFailed) -> Self

Converts to this type from the input type.

impl From<InconsistentKeys> for Error

fn from(e: InconsistentKeys) -> Self

Converts to this type from the input type.

impl From<InvalidMessage> for Error

fn from(e: InvalidMessage) -> Self

Converts to this type from the input type.

impl From<OtherError> for Error

fn from(value: OtherError) -> Self

Converts to this type from the input type.

impl From<PeerIncompatible> for Error

fn from(e: PeerIncompatible) -> Self

Converts to this type from the input type.

impl From<PeerMisbehaved> for Error

fn from(e: PeerMisbehaved) -> Self

Converts to this type from the input type.

impl From<RejectedEch> for Error

fn from(rejected_error: RejectedEch) -> Self

Converts to this type from the input type.

impl From<SystemTimeError> for Error

Available on crate feature std only.

fn from(_: SystemTimeError) -> Self

Converts to this type from the input type.

impl From<UnsupportedOperationError> for Error

fn from(value: UnsupportedOperationError) -> Self

Converts to this type from the input type.

impl PartialEq for Error

fn eq(&self, other: &Error) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for Error