Enum CertError 

pub enum CertError {
    Unimplemented {
        detail: String,
    },
    Acme(String),
    Io(Error),
    Rustls(Error),
    NotTailnetName(String),
}

Errors from certificate acquisition / TLS material assembly.

Fail-closed by construction: there is no variant that yields a usable cert without a genuine issuance path, and there is deliberately no self-signed production fallback.

Variants

Unimplemented

The control plane in this fork does not expose the RPC(s) needed to mint a real certificate. detail names exactly what is missing.

Fields

detail: String

Names exactly which control RPC is missing (e.g. MISSING_CERT_RPC).

Acme(String)

An ACME-protocol-level failure (order/challenge/finalize).

Io(Error)

I/O failure (network, file, etc.).

Rustls(Error)

A rustls / crypto-material failure (bad key, mismatched cert, provider).

NotTailnetName(String)

The requested name is not a tailnet (*.ts.net-style) name. Anti-leak: we never mint or serve certs for off-tailnet names.

Trait Implementations

impl Debug for CertError

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for CertError

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Error for CertError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<Error> for CertError

fn from(e: Error) -> CertError

Converts to this type from the input type.

impl From<Error> for CertError

fn from(e: Error) -> CertError

Converts to this type from the input type.

impl From<SetDnsError> for CertError

Available on crate feature acme only.

Map a crate::tokio::SetDnsError into CertError::Acme.

The DNS-01 publish is the one I/O step of issuance the ACME engine reaches through the PublishTxt seam; fold the set-dns RPC’s own error vocabulary into the cert error surface (its Display carries the coarse cause, e.g. the self-hosted control plane 501 Internal(Http)).

fn from(error: SetDnsError) -> CertError

Converts to this type from the input type.