Enum ServerMessage 

pub enum ServerMessage {
    Attestation {
        data: Vec<u8>,
        control_nonce: [u8; 32],
    },
    ControlNonce {
        nonce: [u8; 32],
    },
    Data {
        id: u64,
        payload: Vec<u8>,
    },
    Error {
        id: u64,
        message: String,
    },
    ControlResult {
        success: bool,
        message: String,
    },
    StreamData {
        id: u64,
        payload: Vec<u8>,
    },
    StreamClose {
        id: u64,
    },
}

Messages sent from the enclave server to the client.

Variants

Attestation

Attestation document (COSE_Sign1 in enclave mode, raw nonce in debug mode). control_nonce is the current per-boot single-use nonce that must be embedded in the next signed ControlCommand.

Fields

data: Vec<u8>

control_nonce: [u8; 32]

ControlNonce

Response to ClientMessage::GetControlNonce. Returns the current single-use nonce. Unauthenticated: the nonce is not secret, only anti-replay. The nonce is NOT consumed by this fetch; it is only consumed when the server processes a full Control message (success or failure). The backend must fetch the nonce and then immediately send its signed Control without any intervening messages from another client that might rotate the nonce.

Fields

nonce: [u8; 32]

Data

Raw bytes received from the inner container (typically an HTTP response). The id matches the corresponding ClientMessage::Data request.

Fields

id: u64

payload: Vec<u8>

Error

Error forwarding to the inner container.

Fields

id: u64

message: String

ControlResult

Result of a Control command. The control nonce was rotated whether or not the command succeeded — the next signed command must use the new nonce, fetched via a fresh GetControlNonce or RequestAttestation.

Fields

success: bool

message: String

StreamData

Bytes read out of an open inner-container connection. For an ClientMessage::OpenStream this carries everything the workload writes back, including the initial HTTP response head: the client is responsible for any parsing.

Fields

id: u64

payload: Vec<u8>

StreamClose

The open stream has been closed by the server side (workload EOF or error). After this, no further StreamData for this id will arrive.

Fields

id: u64

Trait Implementations

impl Clone for ServerMessage

fn clone(&self) -> ServerMessage

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServerMessage

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ServerMessage

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ServerMessage

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.