Struct esp_idf_sys::mbedtls_x509_crt

#[repr(C)]
pub struct mbedtls_x509_crt {

    pub private_own_buffer: c_int,
    pub raw: mbedtls_x509_buf,
    pub tbs: mbedtls_x509_buf,
    pub version: c_int,
    pub serial: mbedtls_x509_buf,
    pub sig_oid: mbedtls_x509_buf,
    pub issuer_raw: mbedtls_x509_buf,
    pub subject_raw: mbedtls_x509_buf,
    pub issuer: mbedtls_x509_name,
    pub subject: mbedtls_x509_name,
    pub valid_from: mbedtls_x509_time,
    pub valid_to: mbedtls_x509_time,
    pub pk_raw: mbedtls_x509_buf,
    pub pk: mbedtls_pk_context,
    pub issuer_id: mbedtls_x509_buf,
    pub subject_id: mbedtls_x509_buf,
    pub v3_ext: mbedtls_x509_buf,
    pub subject_alt_names: mbedtls_x509_sequence,
    pub subject_key_id: mbedtls_x509_buf,
    pub authority_key_id: mbedtls_x509_authority,
    pub certificate_policies: mbedtls_x509_sequence,
    pub private_ext_types: c_int,
    pub private_ca_istrue: c_int,
    pub private_max_pathlen: c_int,
    pub private_key_usage: c_uint,
    pub ext_key_usage: mbedtls_x509_sequence,
    pub private_ns_cert_type: c_uchar,
    pub private_sig: mbedtls_x509_buf,
    pub private_sig_md: mbedtls_md_type_t,
    pub private_sig_pk: mbedtls_pk_type_t,
    pub private_sig_opts: *mut c_void,
    pub next: *mut mbedtls_x509_crt,
}

Container for an X.509 certificate. The certificate may be chained.

Some fields of this structure are publicly readable. Do not modify them except via Mbed TLS library functions: the effect of modifying those fields or the data that those fields points to is unspecified.

Fields

private_own_buffer: c_int

< Indicates if \c raw is owned by the structure or not.

raw: mbedtls_x509_buf

< The raw certificate data (DER).

tbs: mbedtls_x509_buf

< The raw certificate body (DER). The part that is To Be Signed.

version: c_int

< The X.509 version. (1=v1, 2=v2, 3=v3)

serial: mbedtls_x509_buf

< Unique id for certificate issued by a specific CA.

sig_oid: mbedtls_x509_buf

< Signature algorithm, e.g. sha1RSA

issuer_raw: mbedtls_x509_buf

< The raw issuer data (DER). Used for quick comparison.

subject_raw: mbedtls_x509_buf

< The raw subject data (DER). Used for quick comparison.

issuer: mbedtls_x509_name

< The parsed issuer data (named information object).

subject: mbedtls_x509_name

< The parsed subject data (named information object).

valid_from: mbedtls_x509_time

< Start time of certificate validity.

valid_to: mbedtls_x509_time

< End time of certificate validity.

pk_raw: mbedtls_x509_buf

pk: mbedtls_pk_context

< Container for the public key context.

issuer_id: mbedtls_x509_buf

< Optional X.509 v2/v3 issuer unique identifier.

subject_id: mbedtls_x509_buf

< Optional X.509 v2/v3 subject unique identifier.

v3_ext: mbedtls_x509_buf

< Optional X.509 v3 extensions.

subject_alt_names: mbedtls_x509_sequence

< Optional list of raw entries of Subject Alternative Names extension. These can be later parsed by mbedtls_x509_parse_subject_alt_name.

subject_key_id: mbedtls_x509_buf

< Optional X.509 v3 extension subject key identifier.

authority_key_id: mbedtls_x509_authority

< Optional X.509 v3 extension authority key identifier.

certificate_policies: mbedtls_x509_sequence

< Optional list of certificate policies (Only anyPolicy is printed and enforced, however the rest of the policies are still listed).

private_ext_types: c_int

< Bit string containing detected and parsed extensions

private_ca_istrue: c_int

< Optional Basic Constraint extension value: 1 if this certificate belongs to a CA, 0 otherwise.

private_max_pathlen: c_int

< Optional Basic Constraint extension value: The maximum path length to the root certificate. Path length is 1 higher than RFC 5280 ‘meaning’, so 1+

private_key_usage: c_uint

< Optional key usage extension value: See the values in x509.h

ext_key_usage: mbedtls_x509_sequence

< Optional list of extended key usage OIDs.

private_ns_cert_type: c_uchar

< Optional Netscape certificate type extension value: See the values in x509.h

private_sig: mbedtls_x509_buf

< Signature: hash of the tbs part signed with the private key.

private_sig_md: mbedtls_md_type_t

< Internal representation of the MD algorithm of the signature algorithm, e.g. MBEDTLS_MD_SHA256

private_sig_pk: mbedtls_pk_type_t

< Internal representation of the Public Key algorithm of the signature algorithm, e.g. MBEDTLS_PK_RSA

private_sig_opts: *mut c_void

< Signature options to be passed to mbedtls_pk_verify_ext(), e.g. for RSASSA-PSS

next: *mut mbedtls_x509_crt

Next certificate in the linked list that constitutes the CA chain. \p NULL indicates the end of the list. Do not modify this field directly.

Trait Implementations

impl Clone for mbedtls_x509_crt

fn clone(&self) -> mbedtls_x509_crt

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for mbedtls_x509_crt

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for mbedtls_x509_crt

fn default() -> Self

Returns the “default value” for a type.

impl Copy for mbedtls_x509_crt