Enum AuditEvent 

pub enum AuditEvent {
    CertificateIssued,
    CertificateIssueFailed,
    CertificateRevoked,
    CertificateRevokeFailed,
    AccountDeactivated,
    AccountContactUpdated,
    AccountDeleted,
    OrderDeleted,
    EabCreated,
    EabRevoked,
    EabDeleted,
    OperatorCreated,
    OperatorRoleChanged,
    OperatorContactUpdated,
    OperatorPasswordChanged,
    OperatorDisabled,
    OperatorEnabled,
    OperatorDeleted,
    OperatorTotpEnrolled,
    OperatorTotpDisabled,
    OperatorRecoveryCodesRegenerated,
    SessionRevoked,
    JobCancelled,
    JobAdvanced,
    NonceCleanupCompleted,
    AuditPruned,
    DatabaseTransferred,
}

What this trail records: every action the CA takes on a certificate and its refusal, plus every administrative action taken on the CA itself.

A refusal is an audit record in its own right. “Who tried to revoke this certificate and was turned away” is the question the successes cannot answer, and it is the one asked after something has gone wrong.

Variants

CertificateIssued

CertificateIssueFailed

CertificateRevoked

CertificateRevokeFailed

AccountDeactivated

AccountContactUpdated

AccountDeleted

OrderDeleted

EabCreated

EabRevoked

EabDeleted

OperatorCreated

OperatorRoleChanged

OperatorContactUpdated

OperatorPasswordChanged

OperatorDisabled

OperatorEnabled

OperatorDeleted

OperatorTotpEnrolled

OperatorTotpDisabled

OperatorRecoveryCodesRegenerated

SessionRevoked

JobCancelled

JobAdvanced

NonceCleanupCompleted

AuditPruned

DatabaseTransferred

Implementations

impl AuditEvent

pub fn as_str(&self) -> &'static str

The stored form. This is the authority on the audit_log.event vocabulary: 20260809120000_add_audit_log.sql’s CHECK (event IN (…)) was dropped by a later rebuild precisely so this enum is the only place the set is defined, and AuditEntry::insert binds this, never a free string.

pub fn outcome(&self) -> &'static str

success or failure, and the only definition of which is which.

The column exists so “show me everything that was refused” is an index lookup rather than event LIKE '%_failed' written out in the CLI, the API and the page. Deriving it here rather than at each insert is what stops the two columns ever disagreeing. Exhaustive on purpose — no catch-all — so an admin *_failed event added later is a compile error until its author says which side it falls on.

pub fn parse(value: &str) -> Option<Self>

Parses the stored form back. None for anything this enum does not define, which is also how the CLI validates --event.

Trait Implementations

impl Clone for AuditEvent

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AuditEvent

impl Debug for AuditEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AuditEvent

impl PartialEq for AuditEvent

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AuditEvent