Struct ParentIdentity 

pub struct ParentIdentity {
    pub cert_der: Vec<u8>,
    pub cert_pem: String,
    pub key_pem: String,
    pub key_der: Vec<u8>,
    pub base64_cert: String,
}

Self-signed parent certificate generated for one Plugin spawn. Production: regenerate per-spawn (the cert is ephemeral, scoped to one provider session) so a leaked cert can’t compromise other providers spawned later.

The cert is generated with CA:true basic constraints because go-plugin’s server side uses the parent cert as a “trusted CA” in its rustls/Go-tls ClientCAs pool. A non-CA self-signed cert is rejected by webpki-style chain validation; with CA:true the cert can act as its own root for the single hop.

Fields

cert_der: Vec<u8>

cert_pem: String

key_pem: String

key_der: Vec<u8>

base64_cert: String

Implementations

impl ParentIdentity

pub fn generate() -> Result<Self, PluginError>

Generate a fresh self-signed cert + key via rcgen. Cheap (<1ms on Apple Silicon). Called per Plugin::spawn.

Trait Implementations

impl Clone for ParentIdentity

fn clone(&self) -> ParentIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ParentIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.