Struct RootCertV1 

pub struct RootCertV1 {

    pub schema: String,
    pub serial: String,
    pub issuer_key_id: String,
    pub subject: String,
    pub hive_origin: String,
    pub root_ed25519_pub: String,
    pub org_ids: Vec<String>,
    pub plans: Vec<RootCertPlanV1>,
    pub max_seats: u32,
    pub issued_at: UtcTimestamp,
    pub not_before: UtcTimestamp,
    pub not_after: UtcTimestamp,
    pub signature: String,
}

GET /v1/root-cert.

Fields

schema: String

serial: String

issuer_key_id: String

key:ed25519- + first 32 hex of sha256(vendor key); diagnostics only, verifiers try every compiled vendor root.

subject: String

Display name, 1–200 characters on one line.

hive_origin: String

https://host[:port] the certificate is for.

root_ed25519_pub: String

The self-host root that signs the key set, 32 bytes base64.

org_ids: Vec<String>

Lease org_ids this root may sign for (1–16).

plans: Vec<RootCertPlanV1>

Sorted, non-empty; caps lease.plan in the runtime.

max_seats: u32

Caps lease.seats_limit in the runtime.

issued_at: UtcTimestamp

not_before: UtcTimestamp

not_after: UtcTimestamp

signature: String

Ed25519 by a vendor root, base64.

Implementations

impl RootCertV1

pub fn validate(&self) -> Result<(), ValidationError>

pub fn signing_input_raw(raw: &Value) -> Result<Vec<u8>, ValidationError>

Signing input of a certificate as received.

pub fn valid_at( &self, now: DateTime<FixedOffset>, ) -> Result<bool, ValidationError>

Whether now is inside the validity window (15 min skew, no grace).

pub fn covers_org(&self, org_id: &str) -> bool

Whether a lease of org_id may be signed by the certified root.

Trait Implementations

impl Clone for RootCertV1

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RootCertV1

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RootCertV1

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for RootCertV1

impl PartialEq for RootCertV1

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for RootCertV1

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RootCertV1