pub enum Issuance {
Issued,
Deferred {
bucket: String,
key: String,
retry_at_unix: i64,
source: DeferSource,
},
}Expand description
The outcome of an issuance attempt.
Variants§
Issued
A certificate and key are on disk.
Deferred
The CA’s rate limit for bucket is spent, so the order was not sent. retry_at_unix is when
that bucket next admits.
Deliberately not an Err: the caller must be able to tell “we chose not to ask” from “the
order failed”, because the correct response differs. A failure propagates; a deferral keeps
serving whatever certificate is already on disk.
Fields
bucket: StringThe CA limit that refused: orders | registered_domain | identifier_set. A string
rather than the local enum because the refusal may have come from the control plane,
whose bucket set is its own — and an edge must not fail to report a deferral because it
did not recognise a word.
key: StringThe bucket key, when the refusal names one (the control plane always does). Says which registered domain or identifier set is exhausted, which is the difference between an actionable log line and a shrug.
source: DeferSource