Struct AttestConfig 

pub struct AttestConfig {
    pub default_algorithm: String,
    pub signer: String,
    pub external_signer_path: String,
    pub external_signer_args: Vec<String>,
    pub external_signer_timeout_secs: Option<u64>,
    pub secp256k1_key_path: String,
    pub p256_key_path: String,
}

[attest] section. All fields optional with documented defaults; a fresh repo’s config file has none of them set.

Fields

default_algorithm: String

One of "ed25519", "secp256k1", "p256". Empty = "ed25519".

signer: String

One of "repo-key", "external", "keystore". Empty = "repo-key".

external_signer_path: String

Absolute path to the external signer binary. Required when signer = "external". User-scoped only.

external_signer_args: Vec<String>

Extra argv tokens to pass to the external signer subprocess. Each Vec entry is one argv entry — the stored list maps 1:1 to std::process::Command::args. On disk, encoded as a pipe-separated string: attest.external_signer_args = sign|--tag|demo. User-scoped only.

external_signer_timeout_secs: Option<u64>

Wall-clock budget (in seconds) for the entire external-signer conversation: spawn → request-write → response-read → stderr-drain → child-exit. On expiry mkit kills and reaps the child. Empty / 0 = use the crate default (120s, generous for hardware touch/PIN/biometric). User-scoped only — see REPO_FORBIDDEN_KEYS (a hostile repo must not be able to set a 0s “deny” timeout or a multi-hour hang).

secp256k1_key_path: String

Per-algorithm repo-key paths for non-ed25519 signing. User-scoped only — see REPO_FORBIDDEN_KEYS.

p256_key_path: String

Implementations

impl AttestConfig

pub fn default_algorithm_or_fallback(&self) -> &str

pub fn signer_or_fallback(&self) -> &str

pub fn secp256k1_key_path_or_default(&self) -> &str

pub fn p256_key_path_or_default(&self) -> &str

Trait Implementations

impl Clone for AttestConfig

fn clone(&self) -> AttestConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AttestConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AttestConfig

fn default() -> AttestConfig

Returns the “default value” for a type.

impl Eq for AttestConfig

impl PartialEq for AttestConfig

fn eq(&self, other: &AttestConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AttestConfig