Struct CertificateData 

pub struct CertificateData {
    pub certificate_chain_pem: String,
    pub private_key_pem: Zeroizing<String>,
}

PEM-encoded certificate chain and private key.

This is the interchange format between ACME provisioning, storage, and TLS configuration. Both fields are PEM strings.

The private key PEM is wrapped in Zeroizing so that the backing allocation is zeroed on drop, preventing key material from lingering in freed memory (defense-in-depth against core dumps, swap recovery, and cold-boot attacks). See issue #82.

Fields

certificate_chain_pem: String

PEM-encoded certificate chain (leaf + intermediates).

private_key_pem: Zeroizing<String>

PEM-encoded private key. Wrapped in Zeroizing so the backing buffer is zeroed on drop.

Implementations

impl CertificateData

pub fn certificate_chain_der( &self, ) -> Result<Vec<CertificateDer<'static>>, TlsError>

Parse the PEM certificate chain into DER-encoded certificates.

Errors

Returns TlsError::Certificate if the PEM data cannot be parsed.

pub fn private_key_der(&self) -> Result<PrivateKeyDer<'static>, TlsError>

Parse the PEM private key into a DER-encoded private key.

Errors

Returns TlsError::Certificate if the PEM data cannot be parsed.

pub fn expiry_timestamp(&self) -> Result<i64, TlsError>

Extract the certificate expiry timestamp (notAfter) from the leaf certificate.

Returns seconds since Unix epoch.

Errors

Returns TlsError::Certificate if the certificate cannot be parsed.

pub fn needs_renewal(&self) -> Result<bool, TlsError>

Check whether the certificate needs renewal (within 30 days of expiry).

Errors

Returns TlsError::Certificate if the expiry cannot be determined.

Trait Implementations

impl Clone for CertificateData

fn clone(&self) -> CertificateData

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertificateData

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.