Struct VerifyPeerIdentity 

pub struct VerifyPeerIdentity<Side: SideData, T: Transport> { /* private fields */ }

The peer’s presented identity must be verified.

The caller has three choices:

• Call Self::with_config(). This calls the configured verifier trait (ClientVerifier::verify_identity() or ServerVerifier::verify_identity()) synchronously.

• Call Self::presented_identity() to obtain the peer’s presented identity, verify that outside the library (perhaps asynchronously), and then continue the handshake with Self::continue_with().

  Sessions established this way are stored for resumption exactly as if the configured verifier had been used. The external verification must therefore be equivalent to the configured verifier. If it applies a different policy, use a separate config with separate resumption storage.

  If the verification fails, the error can be passed into Self::continue_with() to follow a uniform error handling path.

• Abandon the handshake by discarding this object.

The returned object is a further handshake state for this side. Commonly this will contain a ServerHandshake::NeedsInput, ClientHandshake::NeedsInput, quic::ServerHandshake::NeedsInput or quic::ClientHandshake::NeedsInput which will accept and process further data.

Implementations

impl<Side: SideData, T: Transport> VerifyPeerIdentity<Side, T>

pub fn presented_identity(&self) -> Result<Side::PeerIdentity<'_>, Error>

Inspect the identity that the peer has provided.

impl<Side: SideData> VerifyPeerIdentity<Side, Tcp>

pub fn with_config(self, tls: &mut Vec<u8>) -> Result<Side::Handshake, Error>

Progress the handshake by calling the pre-configured certificate verification trait.

pub fn continue_with( self, verification_result: Result<VerifiedIdentity<'static>, Error>, tls: &mut Vec<u8>, ) -> Result<Side::Handshake, Error>

Progress the handshake by incorporating the result of an external verification.

Further data to send to the peer may be appended to tls.

See VerifyPeerIdentity for important requirements related to resumption safety.

If verification_result is an error, this error is returned and the handshake terminates. An alert may be appended to tls for sending to the peer.

impl<Side: SideData> VerifyPeerIdentity<Side, Quic>

pub fn with_config( self, output: &mut Vec<QuicEvent>, ) -> Result<Side::QuicHandshake, Error>

Progress the handshake by calling the pre-configured certificate verification trait.

pub fn continue_with( self, verification_result: Result<VerifiedIdentity<'static>, Error>, output: &mut Vec<QuicEvent>, ) -> Result<Side::QuicHandshake, Error>

Progress the handshake by incorporating the result of an external verification.

See VerifyPeerIdentity for important requirements related to resumption safety.

If verification_result is an error, this error is returned and the handshake terminates.

Events are appended to output.

Trait Implementations

impl<Side: SideData, T: Transport> Debug for VerifyPeerIdentity<Side, T>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.