Skip to main content

SessionCertificateSigner

secure_device_trust::session

Trait SessionCertificateSigner 

Source 
pub trait SessionCertificateSigner {
    // Required method
    fn sign(
        &self,
        profile: &SessionCertificateProfile,
    ) -> Result<SignedSessionCertificate, SessionCertificateError>;
}
Expand description

CA adapter used by the session certificate issuer.

Production implementations should call managed CA/KMS/HSM services. The policy layer does not accept filesystem signer paths or private keys.

Required Methods§

Source

fn sign( &self, profile: &SessionCertificateProfile, ) -> Result<SignedSessionCertificate, SessionCertificateError>

Signs a pre-validated certificate profile.

Implementors§