Struct Cert

pub struct Cert {
    pub subject: Identity,
    pub context: Hash,
    pub key: String,
    pub val: String,
    pub seq: u64,
    pub start: Timestamp,
    pub end: Timestamp,
    pub valid: bool,
    pub revokes: Option<CertReplace>,
}

A certificate, which can be encoded as a fog-pack Document and signed.

A certificate is valid for a matching subject/context/key if:

• the current time is between the start & end times
• “valid” is set to true

A certificate database generally only keeps one certificate for a given subject/context/key/signer combination. When deciding which of two certificates to keep, it should do the following:

1. Pick the one with the higher start time
2. If start times match, pick the one with the higher sequence number
3. If the sequence numbers also match, prefer the stored one.

A database should also record the highest end time it has seen for a given certificate combo, as this lets it know when it can discard the certificate.

Sometimes, issuing this certificate requires that another be revoked at the same time - for instance, if an authority is being transferred. In this case, a “revokes” option should be added that details the revocation of another certificate. If the revocation rule is valid and can be executed successfully by the database, then this certificate is valid. Otherwise, this certificate shouldn’t be accepted.

Fields

subject: Identity

context: Hash

key: String

val: String

seq: u64

start: Timestamp

end: Timestamp

valid: bool

revokes: Option<CertReplace>

Implementations

impl Cert

pub fn is_valid(&self, time: Option<Timestamp>) -> bool

Check for validity. If no time is provided, the start & end times are ignored.

pub fn key_eq(&self, other: &Cert) -> bool

Determine if two certificates are equal in subject/context/key

pub fn should_replace(&self, other: &Cert) -> bool

Determine if the provided certificate should replace this one.

Trait Implementations

impl Clone for Cert

fn clone(&self) -> Cert

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Cert

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Cert

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Cert

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.