Struct AcmeConfig 

pub struct AcmeConfig {
    pub domains: Vec<String>,
    pub email: String,
    pub directory_url: String,
    pub cert_path: String,
    pub key_path: String,
    pub challenge_port: u16,
    pub renew_before_days: Option<i64>,
    pub profile: Option<String>,
    pub account_key_path: String,
    pub challenge: ChallengeType,
    pub dns: Option<DnsConfig>,
}

Available on crate feature acme only.

ACME provisioning configuration.

Fields

domains: Vec<String>

DNS names to include in the certificate (first entry is CN).

email: String

Contact email address for the CA.

directory_url: String

ACME directory URL. Defaults to Let’s Encrypt production.

cert_path: String

Path to write the provisioned certificate chain (PEM).

key_path: String

Path to write the certificate’s private key (PEM).

challenge_port: u16

Port for the temporary HTTP-01 challenge server (default 80).

renew_before_days: Option<i64>

Renew this many days before expiry. None (the default): at two-thirds of the certificate’s lifetime, or earlier when the CA’s renewal information (RFC 9773) says so.

profile: Option<String>

Certificate profile to order (draft-ietf-acme-profiles), e.g. shortlived; None lets the CA choose.

account_key_path: String

Path to persist the ACME account key between restarts.

challenge: ChallengeType

How control of the domains is proven (since 18.4.0; Http01 before).

dns: Option<DnsConfig>

DNS settings; Some exactly when challenge is Dns01 or DnsPersist01 (then only where to look the record up).

Implementations

impl AcmeConfig

pub const LETSENCRYPT: &'static str = "https://acme-v02.api.letsencrypt.org/directory"

Let’s Encrypt production ACME directory.

pub const LETSENCRYPT_STAGING: &'static str = "https://acme-staging-v02.api.letsencrypt.org/directory"

Let’s Encrypt staging ACME directory (no real certificates; for testing).

pub fn from_env() -> Option<AcmeConfig>

Build config from environment variables. Returns None when RWS_CONFIG_ACME_DOMAINS is not set or empty.

pub fn install_as_tls_certificate(&self)

Point the TLS listener at this config’s certificate: sets RWS_CONFIG_TLS_CERT_FILE / RWS_CONFIG_TLS_KEY_FILE to cert_path / key_path when they’re empty, so setting only RWS_CONFIG_ACME_DOMAINS is enough for Server::run_tls to serve the issued certificate. An explicitly configured TLS path is left alone.

Trait Implementations

impl Clone for AcmeConfig

fn clone(&self) -> AcmeConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AcmeConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.