Struct AcmeManager 

pub struct AcmeManager { /* private fields */ }

Available on crate feature acme only.

Manages the ACME lifecycle: initial provisioning and automatic renewal.

Implementations

impl AcmeManager

pub fn new(config: AcmeConfig) -> AcmeManager

pub async fn provision_if_needed(&self) -> Result<(), String>

Provision a certificate if there is none, or renew it when it’s due (see check).

pub async fn provision(&self) -> Result<(), String>

Provision a new certificate unconditionally.

pub async fn provision_until_ready(&self)

Startup provisioning that doesn’t give up: retries provision_if_needed with exponential backoff (30s doubling to 15 min) until a certificate is in place — e.g. while DNS for a new domain is still propagating. Without a certificate the TLS listener has nothing to serve.

pub async fn run_renewal_loop(self)

Background renewal loop: checks at most every RWS_CONFIG_ACME_RENEW_CHECK_INTERVAL_SECS (default 12 hours), sooner when renewal is due earlier or the CA’s renewal information asks to be fetched again; after a failure it retries within an hour. After a renewal it sends SIGHUP to itself (Unix) so the running server reloads the TLS certificate — only then (it used to on every check).