rustls-pki-types 1.15.1: rustls_pki_types

# This file is automatically @generated by Cargo.
# It is not intended for manual editing.
version = 4

[[package]]
name = "rustls-pki-types"
version = "1.15.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "2f4925028c7eb5d1fcdaf196971378ed9d2c1c4efc7dc5d011256f76c99c0a96"
dependencies = [
 "zeroize",
]

[[package]]
name = "sample-rustls-pki-types"
version = "1.0.0"
dependencies = [
 "rustls-pki-types",
]

[[package]]
name = "zeroize"
version = "1.9.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"

[package]
name = "sample-rustls-pki-types"
version = "1.0.0"
edition = "2021"
publish = false

[dependencies]
rustls-pki-types = "=1.15.1"

[[bin]]
name = "contract"
path = "test/contract.rs"

# rustls-pki-types 1.15.1 Core Types and Parsing API Contracts

## What `search_known_solution` answered
`search_known_solution` returned an unverified sample with 0 contract passes and mismatched environment. This sample verifies the rustls-pki-types 1.15.1 release contracts.

## What a model would have written instead
A model may assume `ServerName::try_from` returns a `Result<ServerName, &str>` or panic on invalid input, or assume `CertificateDer` implements `Clone` unconditionally without understanding the DER byte wrapper semantics and borrowing lifetimes.

## How the wrong version fails
Failing to handle the `ServerName` variants or trying to dereference private keys directly without `.secret_der()` leads to compilation errors.

Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify rustls_pki_types in pkg:cargo/rustls-pki-types@1.15.1
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:cargo/rustls-pki-types@1.15.1
Demonstrate these symbols/APIs:
  - rustls_pki_types

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.

{"case":{"caseId":"case:sha256:d947a3153e7db68cd86c37c01970191495be939298ba5a769c3a0297567528b9","contract":["CertificateDer wraps DER-encoded certificate bytes and provides slice dereferencing","ServerName parses valid DNS names into DnsName variant","ServerName rejects invalid DNS domain names","ServerName parses valid IP addresses into IpAddress variant","DnsName parses and converts to string slice","UnixTime constructs timestamps since unix epoch and exposes seconds","PrivateKeyDer encapsulates PKCS#8 private key format and exposes secret bytes"],"goal":"verify rustls_pki_types in pkg:cargo/rustls-pki-types@1.15.1","kind":"HOW","packages":["pkg:cargo/rustls-pki-types@1.15.1"],"schemaVersion":1,"symbols":["rustls_pki_types"]},"contractCommand":["cargo","run","--offline"],"environment":{"arch":"x64","distro":"alpine","ecosystem":"cargo","libc":"musl","os":"linux","packageManager":"cargo","schemaVersion":1},"license":"MIT-0","packages":["pkg:cargo/rustls-pki-types@1.15.1"],"schemaVersion":1,"subject":"pkg:cargo/rustls-pki-types@1.15.1","symbols":["rustls_pki_types"],"verifierAdapter":"cargo@1"}

{
  "schemaVersion": 1,
  "goal": "verify rustls_pki_types in pkg:cargo/rustls-pki-types@1.15.1",
  "kind": "HOW",
  "packages": [
    "pkg:cargo/rustls-pki-types@1.15.1"
  ],
  "symbols": [
    "rustls_pki_types"
  ]
}

//! Clean-room verification sample for rustls-pki-types.

pub use rustls_pki_types::*;

use core::time::Duration;
use rustls_pki_types::{
    CertificateDer, DnsName, PrivateKeyDer, PrivatePkcs8KeyDer, ServerName, UnixTime,
};

fn main() {
    // 1. CertificateDer wraps DER-encoded certificate bytes and provides slice dereferencing
    let raw_cert_bytes = vec![0x30, 0x03, 0x02, 0x01, 0x01];
    let cert = CertificateDer::from(raw_cert_bytes.clone());
    assert_eq!(&cert[..], &raw_cert_bytes[..]);
    assert_eq!(cert.as_ref(), raw_cert_bytes.as_slice());

    // 2. ServerName parses valid DNS names into DnsName variant
    let server_name = ServerName::try_from("example.com").expect("valid dns name");
    match &server_name {
        ServerName::DnsName(dns) => {
            assert_eq!(dns.as_ref(), "example.com");
        }
        _ => panic!("expected DnsName"),
    }

    // 3. ServerName rejects invalid DNS domain names
    let invalid_server_name = ServerName::try_from("bad..domain");
    assert!(invalid_server_name.is_err());

    // 4. ServerName parses valid IP addresses into IpAddress variant
    let ip_server_name = ServerName::try_from("127.0.0.1").expect("valid ipv4 address");
    assert!(matches!(ip_server_name, ServerName::IpAddress(_)));

    // 5. DnsName parses and converts to string slice
    let dns_name = DnsName::try_from("example.org").expect("valid dns name");
    assert_eq!(dns_name.as_ref(), "example.org");

    // 6. UnixTime constructs timestamps since unix epoch and exposes seconds
    let duration = Duration::from_secs(1_700_000_000);
    let unix_time = UnixTime::since_unix_epoch(duration);
    assert_eq!(unix_time.as_secs(), 1_700_000_000);

    // 7. PrivateKeyDer encapsulates PKCS#8 private key format and exposes secret bytes
    let key_bytes = vec![
        0x30, 0x10, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x04, 0x04,
        0x02, 0x00, 0x00,
    ];
    let pkcs8 = PrivatePkcs8KeyDer::from(key_bytes.clone());
    let key_der = PrivateKeyDer::from(pkcs8);
    assert_eq!(key_der.secret_der(), key_bytes.as_slice());

    println!("All rustls-pki-types contract assertions passed successfully.");
}