Struct LocalIdentity 

pub struct LocalIdentity {
    pub cert_der: Vec<u8>,
    pub key_der: Zeroizing<Vec<u8>>,
    pub peer_id: PeerId,
}

The local node’s mTLS identity: its certificate + private key (both DER) and the derived PeerId the remote will verify.

The certificate is self-signed and its public key IS the identity (see crate::mtls). Callers typically load a persisted ChiaCertificate-style pair; LocalIdentity::from_der derives the peer_id from the cert’s SPKI so it always matches what a remote computes.

Fields

cert_der: Vec<u8>

This node’s leaf certificate, DER-encoded.

key_der: Zeroizing<Vec<u8>>

The matching private key, DER-encoded (PKCS#8).

#179 finding 4: wrapped in Zeroizing (rather than a plain Vec<u8>) so every clone (LocalIdentity is cloned per dial, see dialer.rs) and every drop scrubs the private-key bytes from memory instead of leaving them in freed heap. Derefs transparently to &[u8] for existing call sites (e.g. building a rustls::pki_types::PrivateKeyDer).

peer_id: PeerId

This node’s own peer_id = SHA-256(cert SPKI DER).

Implementations

impl LocalIdentity

pub fn from_der(cert_der: Vec<u8>, key_der: Vec<u8>) -> Option<Self>

Build a local identity from a DER cert + PKCS#8 key, deriving peer_id from the cert SPKI. Returns None if the certificate cannot be parsed.

Trait Implementations

impl Clone for LocalIdentity

fn clone(&self) -> LocalIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LocalIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.