Struct CertificateBuilder

pub struct CertificateBuilder<'a> { /* private fields */ }

Certificate builder is used to create X.509 certificate chains

Implementations

impl<'a> CertificateBuilder<'a>

pub fn new() -> Self

Create a new certificate builder with default parameters

pub fn signer<S>(&mut self, signer: S) -> &mut Self

where S: Into<Option<&'a KeyStore>>,

Specify certificate signer. If omitted or None a self-signed certificate is created.

pub fn usage(&mut self, usage: CertUsage) -> &mut Self

Specify certificate usage

pub fn alt_names<S, I>(&mut self, alt_names: I) -> &mut Self

where I: IntoIterator<Item = S>, S: AsRef<str>,

Specify DNS or IP names for the subjectAltName extension. This is a required setting for the TLS SNI matching.

pub fn not_before(&mut self, time: SystemTime) -> &mut Self

Specify start date of the certificate

pub fn not_after(&mut self, time: SystemTime) -> &mut Self

Specify expiration date of the certificate

pub fn private_key(&mut self, key: PrivateKey) -> &mut Self

Specify a custom private key for the certificate chain. If not specified a default RSA-2048 key will be generated.

pub fn subject(&mut self, name: CertName) -> &mut Self

Specify certificate subject

pub fn serial_number(&mut self, number: u64) -> &mut Self

Specify serial number for the certificate, default is current Unix timestamp.

pub fn path_len(&mut self, path_len: i32) -> &mut Self

Specify pathlen parameter for CA certificate, default is i32::MAX

pub fn build(&self) -> Result<KeyStore>

Create X.509 certificate chain

Trait Implementations

impl<'a> Default for CertificateBuilder<'a>

fn default() -> Self

Returns the “default value” for a type.