Enum krill::daemon::ca::KeyState

pub enum KeyState {
    Pending(PendingKey),
    Active(CurrentKey),
    RollPending(PendingKey, CurrentKey),
    RollNew(NewKey, CurrentKey),
    RollOld(CurrentKey, OldKey),
}

This type contains the keys for a resource class and guards that keys are created, activated, rolled and retired properly.

Variants

Pending(PendingKey)

Active(CurrentKey)

RollPending(PendingKey, CurrentKey)

RollNew(NewKey, CurrentKey)

RollOld(CurrentKey, OldKey)

Implementations

impl KeyState

pub fn create(pending_key: KeyIdentifier) -> Self

pub fn add_request(&mut self, key_id: KeyIdentifier, req: IssuanceRequest)

pub fn revoke<S: Signer>(
    &self,
    class_name: ResourceClassName,
    signer: &S
) -> KrillResult<Vec<RevocationRequest>>

Revoke all current keys

pub fn apply_delta(
    &mut self,
    delta: CurrentObjectSetDelta,
    key_id: KeyIdentifier
)

pub fn make_entitlement_events<S: Signer>(
    &self,
    rcn: ResourceClassName,
    entitlement: &EntitlementClass,
    base_repo: &RepoInfo,
    name_space: &str,
    signer: &S
) -> KrillResult<Vec<EvtDet>>

pub fn request_certs_new_repo<S: Signer>(
    &self,
    rcn: ResourceClassName,
    base_repo: &RepoInfo,
    name_space: &str,
    signer: &S
) -> KrillResult<Vec<EvtDet>>

pub fn cert_requests(&self) -> Vec<IssuanceRequest>

Returns all open certificate requests

pub fn revoke_request(&self) -> Option<&RevocationRequest>

Returns the revoke request if there is an old key.

pub fn as_info(&self) -> ResourceClassKeysInfo

impl KeyState

Key Life Cycle

pub fn keyroll_initiate<S: Signer>(
    &self,
    class_name: ResourceClassName,
    parent_class_name: ResourceClassName,
    base_repo: &RepoInfo,
    name_space: &str,
    signer: &mut S
) -> KrillResult<Vec<EvtDet>>

Initiates a key roll if the current state is 'Active'. This will return event details for a newly create pending key and requested certificate for it.

pub fn keyroll_activate<S: Signer>(
    &self,
    class_name: ResourceClassName,
    parent_class_name: ResourceClassName,
    signer: &S
) -> KrillResult<EvtDet>

Marks the new key as current, and the current key as old, and requests revocation of the old key.

pub fn has_new_key(&self) -> bool

Returns true if there is a new key

Trait Implementations

impl Clone for KeyState

fn clone(&self) -> KeyState

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyState

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for KeyState

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.

impl Eq for KeyState

impl PartialEq<KeyState> for KeyState

fn eq(&self, other: &KeyState) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &KeyState) -> bool

This method tests for !=.

impl Serialize for KeyState

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.

impl StructuralEq for KeyState

impl StructuralPartialEq for KeyState