coil-tls 0.1.0

TLS management primitives for the Coil framework.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66

#[cfg_attr(test, allow(dead_code))]
#[cfg(test)]
mod issued;
mod manual;
mod real;

pub use manual::ManualImportTlsCertificateExecutor;
pub use real::{AcmeTlsCertificateExecutor, CloudflareTlsCertificateExecutor};

use std::fmt;

use super::planning::{IssuancePlan, RenewalPlan};
use crate::material::{CertificateMaterial, ManualCertificateBundle};
use crate::{
    CertificateId, CertificateProviderKind, CertificateRecord, ChallengeStrategy, TlsInstant,
    TlsModelError,
};

#[derive(Debug, Clone, PartialEq, Eq)]
pub struct ChallengeValidationCheck {
    pub name: &'static str,
    pub ok: bool,
    pub detail: String,
}

#[derive(Debug, Clone, PartialEq, Eq)]
pub struct ChallengeValidation {
    pub provider: CertificateProviderKind,
    pub configured_challenge: Option<ChallengeStrategy>,
    pub effective_challenge: Option<ChallengeStrategy>,
    pub shared_across_nodes: bool,
    pub requires_hot_reload: bool,
    pub checks: Vec<ChallengeValidationCheck>,
}

pub trait TlsCertificateExecutor: fmt::Debug + Send + Sync {
    fn import_manual_certificate(
        &self,
        bundle: ManualCertificateBundle,
    ) -> Result<(), TlsModelError>;

    fn issue_certificate(
        &self,
        plan: &IssuancePlan,
        certificate_id: CertificateId,
        issued_at: TlsInstant,
    ) -> Result<CertificateRecord, TlsModelError>;

    fn renew_certificate(
        &self,
        plan: &RenewalPlan,
        certificate_id: CertificateId,
        replacement_certificate_id: CertificateId,
        issued_at: TlsInstant,
    ) -> Result<CertificateRecord, TlsModelError>;

    fn certificate_material(
        &self,
        certificate_id: &CertificateId,
    ) -> Result<CertificateMaterial, TlsModelError>;

    fn validate_issuance_plan(
        &self,
        plan: &IssuancePlan,
    ) -> Result<ChallengeValidation, TlsModelError>;
}