Enum OperatorKeyError 

pub enum OperatorKeyError {
    NoHome,
    Io {
        path: PathBuf,
        source: Error,
    },
    KeyDecode(String),
    Signing(SigningError),
    StalePublicKey {
        pub_path: PathBuf,
        pub_id: String,
        priv_id: String,
    },
    Entropy(String),
    InsecurePermissions {
        path: PathBuf,
        mode: u32,
    },
    NotRegularFile {
        path: PathBuf,
    },
    SymlinkInAncestor {
        path: PathBuf,
        ancestor: PathBuf,
    },
}

Variants

NoHome

Io

Fields

path: PathBuf

source: Error

KeyDecode(String)

Signing(SigningError)

StalePublicKey

Fields

pub_path: PathBuf

pub_id: String

priv_id: String

Entropy(String)

InsecurePermissions

The on-disk operator key has group/world-readable permissions. A copied or restored key with 0644/0660 would otherwise be signed with while other local users could exfiltrate it. Reject before use.

Fields

path: PathBuf

mode: u32

NotRegularFile

The on-disk operator key is not a regular file (symlink, directory, FIFO, etc.). O_NOFOLLOW would have caught a symlink in open; this covers everything else after fstat.

Fields

path: PathBuf

SymlinkInAncestor

A directory component on the path to the operator key is a symlink. O_NOFOLLOW only refuses the final component; an attacker who controls an intermediate directory (e.g. swaps ~/.greentic for a symlink to their own dir before the operator’s first run) would otherwise have the load and write resolve into their controlled directory. Caught by lstat-walking each parent on every load/generate.

Fields

path: PathBuf

ancestor: PathBuf

Trait Implementations

impl Debug for OperatorKeyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for OperatorKeyError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Error for OperatorKeyError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<OperatorKeyError> for OpError

fn from(source: OperatorKeyError) -> Self

Converts to this type from the input type.

impl From<OperatorKeyError> for BundleDeploymentError

fn from(source: OperatorKeyError) -> Self

Converts to this type from the input type.

impl From<OperatorKeyError> for StoreError

fn from(source: OperatorKeyError) -> Self

Converts to this type from the input type.

impl From<SigningError> for OperatorKeyError

fn from(source: SigningError) -> OperatorKeyError

Converts to this type from the input type.