Enum CredentialFileError 

pub enum CredentialFileError {
    Io(Error),
    InsecurePermissions {
        path: PathBuf,
        mode: u32,
    },
    ForeignOwner {
        path: PathBuf,
    },
    EnvOverrideRejected {
        env: &'static str,
    },
    UnsupportedPlatform,
}

Error surface for credential-file invariants. Session and signing-key modules each map these to their own error taxonomies with From conversions so callers never see a bare CredentialFileError in the top-level CLI error — the wrapping surfaces the context (which credential failed).

Variants

Io(Error)

Filesystem failure reading the file or its metadata.

InsecurePermissions

File mode is wider than 0o600. §5.1 / §5.3 rejection — the actual mode bits (lower 9) are surfaced for diagnostics.

Fields

path: PathBuf

Path to the offending credential file.

mode: u32

Actual mode bits (lower 9 bits).

ForeignOwner

File owner UID doesn’t match the running effective UID (§5.1 / §5.3 enforcement).

Fields

path: PathBuf

Path to the offending credential file.

EnvOverrideRejected

A named env var was set when reject_env_override was called — guarded against operators trying to deliver key material via env.

Fields

env: &'static str

Name of the forbidden env var.

UnsupportedPlatform

Running on a non-Unix platform where the 0600 + owner checks can’t be enforced.

Trait Implementations

impl Debug for CredentialFileError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CredentialFileError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for CredentialFileError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<CredentialFileError> for OperatorSessionError

fn from(source: CredentialFileError) -> Self

Converts to this type from the input type.

impl From<CredentialFileError> for SessionError

fn from(e: CredentialFileError) -> Self

Converts to this type from the input type.

impl From<CredentialFileError> for KeyLoadError

fn from(source: CredentialFileError) -> Self

Converts to this type from the input type.

impl From<Error> for CredentialFileError

fn from(source: Error) -> Self

Converts to this type from the input type.