Struct rustls::AllowAnyAnonymousOrAuthenticatedClient

pub struct AllowAnyAnonymousOrAuthenticatedClient { /* fields omitted */ }

A ClientCertVerifier that will allow both anonymous and authenticated clients, without any name checking.

Client authentication will be requested during the TLS handshake. If the client offers a certificate then this acts like AllowAnyAuthenticatedClient, otherwise this acts like NoClientAuth.

Methods

impl AllowAnyAnonymousOrAuthenticatedClient

pub fn new(roots: RootCertStore) -> Arc<dyn ClientCertVerifier>

Construct a new AllowAnyAnonymousOrAuthenticatedClient.

roots is the list of trust anchors to use for certificate validation.

Trait Implementations

impl ClientCertVerifier for AllowAnyAnonymousOrAuthenticatedClient

fn offer_client_auth(&self) -> bool

Returns true to enable the server to request a client certificate and false to skip requesting a client certificate. Defaults to true.

fn client_auth_mandatory(&self) -> bool

Returns true to require a client certificate and false to make client authentication optional. Defaults to self.offer_client_auth().

fn client_auth_root_subjects(&self) -> DistinguishedNames

Returns the subject names of the client authentication trust anchors to share with the client when requesting client authentication.

fn verify_client_cert(
    &self,
    presented_certs: &[Certificate]
) -> Result<ClientCertVerified, TLSError>

Verify a certificate chain presented_certs is rooted in roots. Does no further checking of the certificate.