Struct AcmeClient 

pub struct AcmeClient { /* private fields */ }

ACME protocol client for automated certificate management.

Implementations

impl AcmeClient

pub async fn new(config: AcmeConfig) -> Result<Self>

Create a new ACME client and fetch the directory.

pub fn from_parts( config: AcmeConfig, key_pair: EcdsaKeyPair, directory: AcmeDirectory, ) -> Self

Create an ACME client from an existing key pair and directory (for testing).

pub fn directory(&self) -> &AcmeDirectory

Get the ACME directory resource.

pub async fn register_account(&self) -> Result<AcmeAccount>

Register a new ACME account (RFC 8555 §7.3).

pub async fn create_order(&self, domains: &[&str]) -> Result<AcmeOrder>

Create a new certificate order (RFC 8555 §7.4).

pub async fn get_authorization( &self, authz_url: &str, ) -> Result<AcmeAuthorization>

Fetch an authorization resource (RFC 8555 §7.5).

pub fn key_authorization(&self, token: &str) -> String

Compute the key authorization string for a challenge (RFC 8555 §8.1).

key_authorization = token || '.' || base64url(JWK_Thumbprint)

pub fn dns01_record_value(&self, token: &str) -> String

Compute the DNS-01 challenge record value (RFC 8555 §8.4).

Returns the base64url-encoded SHA-256 of the key authorization.

pub async fn respond_to_challenge( &self, challenge_url: &str, ) -> Result<AcmeChallenge>

Respond to a challenge to begin validation (RFC 8555 §7.5.1).

pub async fn finalize_order( &self, finalize_url: &str, csr_der: &[u8], ) -> Result<AcmeOrder>

Finalize an order by submitting a CSR (RFC 8555 §7.4).

pub async fn download_certificate(&self, cert_url: &str) -> Result<String>

Download the issued certificate chain (RFC 8555 §7.4.2).

pub fn account_thumbprint(&self) -> String

Get the JWK thumbprint of the account key.

pub async fn revoke_certificate( &self, cert_der: &[u8], reason: Option<u8>, ) -> Result<()>

Revoke a certificate (RFC 8555 §7.6).

The cert_der must be the DER-encoded end-entity certificate. reason is an optional RFC 5280 CRLReason code (0–10).