Struct KeyManager 

pub struct KeyManager { /* private fields */ }

Implementations

impl KeyManager

pub async fn new(config: KeyManagerConfig) -> Result<Self, Box<dyn Error>>

pub async fn new_with_seed( config: KeyManagerConfig, seed: Vec<u8>, ) -> Result<Self, Box<dyn Error>>

Create a key manager with a seed for deterministic key generation

pub async fn get_current_server(&self) -> Result<OhttpServer, Box<dyn Error>>

Get the current active server for decryption

pub async fn get_server_by_id(&self, key_id: u8) -> Option<OhttpServer>

Get a server by key ID (for handling requests with specific key IDs)

pub async fn get_encoded_config(&self) -> Result<Vec<u8>, Box<dyn Error>>

Get encoded config with length prefix per RFC 9458 Section 3.2

pub async fn rotate_keys(&self) -> Result<(), Box<dyn Error>>

Rotate keys by generating a new key and marking old ones for expiration

pub async fn should_rotate(&self) -> bool

Check if rotation is needed

pub async fn start_rotation_scheduler(self: Arc<Self>)

Start automatic key rotation scheduler

pub async fn get_stats(&self) -> KeyManagerStats

Get key manager statistics

Trait Implementations

impl Send for KeyManager

impl Sync for KeyManager