Struct Keystore 

pub struct Keystore { /* private fields */ }

Implementations

impl Keystore

pub fn new(path: impl Into<PathBuf>) -> Self

pub fn default_path() -> PathBuf

pub fn unlock(&self, passphrase: &str) -> Result<()>

pub fn unlock_machine(&self) -> Result<()>

Unlock with a machine-derived passphrase.

Strategy:

1. Try the current machine-id based passphrase (stable random ID).
2. Fall back to legacy hostname-based passphrases for migration.
3. On legacy success, re-key the keystore to the new machine-id passphrase.

Security note: This provides convenience-only protection. The passphrase file is readable by any local process. Use unlock() with a user-supplied passphrase for secrets requiring real confidentiality.

pub fn is_unlocked(&self) -> bool

pub fn get(&self, key: &str) -> Option<String>

pub fn set(&self, key: &str, value: &str) -> Result<()>

pub fn remove(&self, key: &str) -> Result<bool>

pub fn list_keys(&self) -> Vec<String>

pub fn import(&self, new_entries: HashMap<String, String>) -> Result<usize>

pub fn lock(&self)

pub fn rekey(&self, new_passphrase: &str) -> Result<()>

Re-encrypt with a new passphrase. Must already be unlocked.

Trait Implementations

impl Clone for Keystore

fn clone(&self) -> Keystore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.