dig-tls 0.2.0

Canonical DIG peer mTLS: a shipped public DigNetwork CA, per-peer node certs, rustls mutual-auth configs, peer_id = SHA-256(TLS SPKI DER), and the #1204 BLS-G1 cert binding. Mirrors the chia-blockchain / chia-tls model with the DigNetwork trust domain.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

//! The crate's single error type.

/// Errors from building, loading, or verifying DIG peer mTLS material.
#[derive(Debug, thiserror::Error)]
pub enum DigTlsError {
    /// The embedded or supplied CA PEM could not be parsed.
    #[error("DigNetwork CA material is invalid: {0}")]
    Ca(String),

    /// Building or signing a per-peer node certificate failed.
    #[error("node certificate generation failed: {0}")]
    CertGen(String),

    /// A stored certificate or key PEM could not be parsed back.
    #[error("certificate material could not be parsed: {0}")]
    Parse(String),

    /// A rustls configuration could not be assembled from the material.
    #[error("rustls configuration failed: {0}")]
    RustlsConfig(String),

    /// Reading or writing persisted certificate material failed.
    #[error("certificate persistence I/O failed: {0}")]
    Io(#[from] std::io::Error),
}

/// The crate result alias.
pub type Result<T> = std::result::Result<T, DigTlsError>;