camber 0.1.3

Opinionated async Rust for IO-bound services on top of Tokio
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

use std::sync::Arc;

use super::acme::AcmeDns01;
use super::cloudflare::CloudflareProvider;
use crate::tls::{CertStore, build_tls_config_from_resolver};

/// Configuration for DNS-01 ACME stored on the RuntimeBuilder.
pub(crate) struct Dns01Setup {
    pub(crate) acme: AcmeDns01,
    pub(crate) api_token: Box<str>,
    pub(crate) domain: Box<str>,
}

/// State produced by DNS-01 initialization — cert loaded, store ready.
pub(crate) struct Dns01State {
    pub(crate) acme: AcmeDns01,
    pub(crate) provider: CloudflareProvider,
    pub(crate) store: CertStore,
    pub(crate) tls_config: Arc<rustls::ServerConfig>,
}

fn log_cache_miss(result: &Result<Option<rustls::sign::CertifiedKey>, crate::RuntimeError>) {
    match result {
        Ok(None) => tracing::info!("no cached cert found, provisioning fresh certificate"),
        Err(err) => {
            tracing::warn!(%err, "failed to load cached cert, provisioning fresh certificate")
        }
        Ok(Some(_)) => {}
    }
}

/// Initialize DNS-01: create provider, load or provision cert, build TLS config.
pub(crate) async fn init_dns01(setup: Dns01Setup) -> Result<Dns01State, crate::RuntimeError> {
    let provider = CloudflareProvider::new(setup.api_token, &setup.domain).await?;

    let cert = match setup.acme.load_cached_cert() {
        Ok(Some(cert)) if !setup.acme.needs_renewal() => cert,
        Ok(Some(_)) => {
            tracing::info!("cached cert needs renewal, provisioning fresh certificate");
            setup.acme.provision_cert(&provider).await?
        }
        result => {
            log_cache_miss(&result);
            setup.acme.provision_cert(&provider).await?
        }
    };

    let store = CertStore::new(cert);
    let tls_config = build_tls_config_from_resolver(store.clone())?;

    Ok(Dns01State {
        acme: setup.acme,
        provider,
        store,
        tls_config,
    })
}