Allow "required if present" EKUs

rustls · Feb 7, 2024 · 73af928 · 73af928
1 parent 4689881
commit 73af928
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/verify_cert.rs b/src/verify_cert.rs
@@ -466,6 +466,13 @@ impl KeyUsage {
             inner: ExtendedKeyUsage::Required(KeyPurposeId::new(oid)),
         }
     }
+
+    /// Construct a new [`KeyUsage`] requiring a certificate to support the specified OID, if the certificate has EKUs.
+    pub const fn required_if_present(oid: &'static [u8]) -> Self {
+        Self {
+            inner: ExtendedKeyUsage::RequiredIfPresent(KeyPurposeId::new(oid)),
+        }
+    }
 }
 
 /// Extended Key Usage (EKU) of a certificate.