特性 SigningKey

Source

pub trait SigningKey:
    Debug
    + Send
    + Sync {
    // Required methods
    fn choose_scheme(
        &self,
        offered: &[SignatureScheme],
    ) -> Option<Box<dyn Signer>>;
    fn algorithm(&self) -> SignatureAlgorithm;

    // Provided method
    fn public_key(&self) -> Option<SubjectPublicKeyInfoDer<'_>> { ... }
}

展开描述

抽象签名密钥。

This interface is 用于 rustls 到 use 一个 private signing key 用于 authentication. This includes server 并 client authentication.

Objects of this type are always 用 within Rustls as Arc<dyn SigningKey>。 There are no concrete public structs in Rustls that implement this trait.

There are two main ways 到 get 一个 signing key:

KeyProvider::load_private_key(), or
some other method outside of the KeyProvider extension trait, for instance:

此 KeyProvider method load_private_key() is called under the hood by ConfigBuilder::with_single_cert(), ConfigBuilder::with_client_auth_cert(), 并 ConfigBuilder::with_single_cert_with_ocsp()。

A signing key created outside of the KeyProvider extension trait can be 用到 create 一个 CertifiedKey, which in turn 可用于 create 一个 ResolvesServerCertUsingSni。 Alternately, 一个 CertifiedKey can be returned 从一个 custom implementation of the ResolvesServerCert 或 ResolvesClientCert traits.