pub struct IssueArgs {
pub from_kel: PathBuf,
pub sans: Vec<String>,
pub tls_key: Option<PathBuf>,
pub sign_key: Option<PathBuf>,
pub sign_key_index: usize,
pub out: Option<PathBuf>,
}Expand description
auths tls-cert issue — mint a KEL-rooted leaf for one of our AIDs.
Fields§
§from_kel: PathBufReplay this KEL file and project its current key-state into the leaf’s
did:keri SAN + binding extension. The KEL is the root of trust.
sans: Vec<String>Extra Subject-Alternative-Name host the leaf must serve (DNS name or IP
literal). Repeatable. Typically localhost, 127.0.0.1, the LAN host.
tls_key: Option<PathBuf>Use this PKCS#8-PEM TLS keypair as the leaf’s subject key instead of a fresh ephemeral one (e.g. to reuse a key the acceptor already holds).
sign_key: Option<PathBuf>The AID’s current signing key (PKCS#8 PEM). When given, the leaf carries an
AID authorization over its TLS key (a KERI signature over the leaf SPKI), so
verify can reject a forged binding minted over an attacker’s TLS key.
Without it the leaf only chains to the key-state (the discovery surface) and
is rejected by the adversarial verifier.
sign_key_index: usizeWhich current key (index into the KEL’s current key-state) --sign-key
corresponds to. Defaults to 0 (single-sig AIDs).
out: Option<PathBuf>Write <PREFIX>.cert.pem + <PREFIX>.key.pem instead of printing to
stdout. Without it, the cert PEM is printed (the key never is, to avoid
leaking it into logs).
Trait Implementations§
Source§impl Args for IssueArgs
impl Args for IssueArgs
Source§fn augment_args<'b>(__clap_app: Command) -> Command
fn augment_args<'b>(__clap_app: Command) -> Command
Source§fn augment_args_for_update<'b>(__clap_app: Command) -> Command
fn augment_args_for_update<'b>(__clap_app: Command) -> Command
Command so it can instantiate self via
FromArgMatches::update_from_arg_matches_mut Read moreSource§impl CommandFactory for IssueArgs
impl CommandFactory for IssueArgs
Source§impl FromArgMatches for IssueArgs
impl FromArgMatches for IssueArgs
Source§fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>
fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>
Source§fn from_arg_matches_mut(
__clap_arg_matches: &mut ArgMatches,
) -> Result<Self, Error>
fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>
Source§fn update_from_arg_matches(
&mut self,
__clap_arg_matches: &ArgMatches,
) -> Result<(), Error>
fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>
ArgMatches to self.Source§fn update_from_arg_matches_mut(
&mut self,
__clap_arg_matches: &mut ArgMatches,
) -> Result<(), Error>
fn update_from_arg_matches_mut( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>
ArgMatches to self.