Enum SecretGenPolicy 

pub enum SecretGenPolicy {
    PasswordRandom {
        length: u8,
        charset: Charset,
        max_length: Option<u8>,
    },
    PreSharedKey {
        length_bytes: u8,
    },
    Token {
        length: u8,
        prefix: Option<String>,
    },
    WireguardKeypair,
    SshKeypair {
        algo: SshAlgo,
    },
    TlsKeypair {
        algo: TlsAlgo,
        validity_days: u32,
    },
}

Variants

PasswordRandom

A random password drawn from charset.

length is the requested length; max_length, when set, is a structural cap imposed by the consumer (e.g. macOS’s legacy VNC ARD-XOR scheme silently truncates beyond 16 bytes — pairing length: 32 with max_length: Some(16) is a validator failure).

Fields

length: u8

charset: Charset

max_length: Option<u8>

PreSharedKey

A pre-shared key — random bytes, length_bytes long, encoded as base64 url-safe. Used for WireGuard PSKs and similar.

Fields

length_bytes: u8

Token

A bearer token — random alphanumeric, length chars, with an optional human-readable prefix (prefix: Some("pat_") → pat_AbCdEf...).

Fields

length: u8

prefix: Option<String>

WireguardKeypair

A WireGuard X25519 keypair. Materializes TWO secrets at once: <path>.private and <path>.public, both base64 (32 bytes each).

SshKeypair

An SSH keypair (Ed25519 or RSA). Same dual-path materialization as WireGuard: <path>.private (OpenSSH PEM), <path>.public (ssh-ed25519 AAAA... comment line).

Fields

algo: SshAlgo

TlsKeypair

A self-signed TLS keypair, valid validity_days from generation. Materializes <path>.key (PEM) + <path>.crt (PEM).

Fields

algo: TlsAlgo

validity_days: u32

Implementations

impl SecretGenPolicy

pub fn backend_paths(&self) -> usize

How many distinct backend paths this policy materializes. Most policies are 1; keypair policies are 2.

Trait Implementations

impl Clone for SecretGenPolicy

fn clone(&self) -> SecretGenPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecretGenPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SecretGenPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SecretGenPolicy

impl Hash for SecretGenPolicy

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for SecretGenPolicy

fn eq(&self, other: &SecretGenPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SecretGenPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SecretGenPolicy