Struct CertificateAuthority 

pub struct CertificateAuthority { /* private fields */ }

Wraps a CA certificate and key pair used to sign per-host certificates.

Implementations

impl CertificateAuthority

pub fn from_pem(cert_pem: &str, key_pem: &str) -> Result<Self, Error>

Create from PEM-encoded strings.

pub fn from_pem_files( cert_path: impl AsRef<Path>, key_path: impl AsRef<Path>, ) -> Result<Self, Error>

Create from PEM files on disk.

pub fn generate() -> Result<Self, Error>

Generate a new self-signed CA certificate and key pair with CN "MITM CA".

pub fn generate_with_cn(cn: &str) -> Result<Self, Error>

Generate a new self-signed CA certificate and key pair with the given common name.

pub fn to_pem_files( &self, cert_path: impl AsRef<Path>, key_path: impl AsRef<Path>, ) -> Result<(), Error>

Write the CA certificate and key as PEM files to disk.

pub fn cert_pem(&self) -> String

Return the CA certificate in PEM format.

pub fn key_pem(&self) -> String

Return the CA private key in PEM format.

pub fn generate_cert( &self, hostname: &str, ) -> Result<(CertificateDer<'static>, PrivateKeyDer<'static>), Error>

Generate a leaf certificate for the given hostname, signed by this CA.