Struct ScPrincipal 

pub struct ScPrincipal { /* private fields */ }

Who sent a request, as far as this node can prove it: the leaf certificate of a verified direct BACnet/SC connection.

It is the SHA-256 of the exact leaf certificate DER the TLS handshake verified, the same digest the hub’s certificate bindings pin (ScHubCertificateBinding, with the sc-tls feature). Unlike DirectScIdentity, it carries no connection incarnation, so it stays the same when that certificate reconnects. A renewed certificate is a new principal; list both while it rolls out.

Only direct SC ingress has one. Requests over B/IP, B/IPv6, MS/TP and Ethernet have none, and neither do requests a hub relays: the hub authenticated its own TLS client, and the origin’s certificate never reaches this node. The VMAC, UUID and routed SNET/SADR a peer sends are claims, never principals. A direct peer that forwards a routed request is only the router: the server’s policy contexts report its principal as the forwarding peer’s and give the routed request none.

A principal identifies; it doesn’t authorize. Compare it against the fingerprints an installation provisions. Building one with from_leaf_sha256 makes such a pin; it can’t make a request carry it.

Debug shows only the first eight hex digits; Display writes all 64 in lowercase, the form to copy into configuration. Neither shows any other certificate content.

Implementations

impl ScPrincipal

pub const fn from_leaf_sha256(leaf_sha256: [u8; 32]) -> ScPrincipal

The principal whose leaf certificate DER has SHA-256 leaf_sha256, for comparing against the principal a request carries.

pub const fn leaf_sha256(&self) -> [u8; 32]

SHA-256 of the leaf certificate DER.

Trait Implementations

impl Clone for ScPrincipal

fn clone(&self) -> ScPrincipal

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ScPrincipal

impl Debug for ScPrincipal

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for ScPrincipal

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for ScPrincipal

impl Hash for ScPrincipal

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for ScPrincipal

fn cmp(&self, other: &ScPrincipal) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

fn clamp_to<R>(self, range: R) -> Self

where Self: Sized, R: ClampBounds<Self>,

🔬This is a nightly-only experimental API. (clamp_to)

Restrict a value to a certain range.

impl PartialEq for ScPrincipal

fn eq(&self, other: &ScPrincipal) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for ScPrincipal

fn partial_cmp(&self, other: &ScPrincipal) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl StructuralPartialEq for ScPrincipal