Struct TlsPreflight 

pub struct TlsPreflight {
    pub bootstrap_window_open: bool,
    pub issuer: Option<String>,
    pub principals: Vec<PrincipalTls>,
}

What preflight found.

Fields

bootstrap_window_open: bool

Bootstrap.Enroll is still servable without a credential — the one refusal.

issuer: Option<String>

The issuer’s fingerprint, or None if this server has no issuer. A server with no issuer cannot mint its listener’s own leaf either, which serve.rs already refuses for its own reason; it is reported here so the advance check says the same thing the start-up will.

principals: Vec<PrincipalTls>

Every principal, sorted by id.

Implementations

impl TlsPreflight

pub fn locked_out(&self) -> impl Iterator<Item = &PrincipalTls>

Principals that can authenticate today and will not be able to after the flip.

pub fn reachable(&self) -> impl Iterator<Item = &PrincipalTls>

Principals that hold a live certificate.

pub fn verdict(&self) -> Verdict

The verdict.

It can answer all three, and that is not decoration: a predicate that could only ever say one thing would pass a test that asserted the refusal and prove nothing about the other two. tests/tls_transition.rs drives one table into each arm.

pub fn refusal(&self) -> Option<String>

The startup refusal, when there is one. None means it may start.

pub fn warn(&self)

Say out loud, at start-up, what the flip costs.

A warn! per locked-out principal and not one summary line: an operator greps a journal for a name, and a count of four tells them nothing they can act on.

Trait Implementations

impl Clone for TlsPreflight

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsPreflight

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for TlsPreflight

fn fmt(&self, f: &mut Formatter<'_>) -> Result

The report gunnar issuer readiness prints.

Written here rather than in admin.rs so the advance check and any later reader render the same words; the verdict line is the last one because it is the sentence the operator is reading for.

impl Eq for TlsPreflight

impl PartialEq for TlsPreflight

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TlsPreflight