Struct AcmeClient 

pub struct AcmeClient { /* private fields */ }

ACME client for automatic certificate management

Wraps the instant-acme library and provides Sentinel-specific functionality for certificate ordering, challenge handling, and persistence.

Implementations

impl AcmeClient

pub fn new(config: AcmeConfig, storage: Arc<CertificateStorage>) -> Self

Create a new ACME client

Arguments

• config - ACME configuration from the listener
• storage - Certificate storage instance

pub fn config(&self) -> &AcmeConfig

Get the ACME configuration

pub fn storage(&self) -> &CertificateStorage

Get the certificate storage

pub async fn init_account(&self) -> Result<(), AcmeError>

Initialize or load the ACME account

If account credentials exist in storage, loads them. Otherwise, creates a new account with Let’s Encrypt.

Errors

Returns an error if account creation or loading fails.

pub async fn create_order( &self, ) -> Result<(Order, Vec<ChallengeInfo>), AcmeError>

Order a certificate for the configured domains

Creates a new certificate order and returns it along with the authorization challenges that need to be completed.

Returns

A tuple of (Order, Vec) containing the order and HTTP-01 challenge information for each domain.

pub async fn validate_challenge( &self, order: &mut Order, challenge_url: &str, ) -> Result<(), AcmeError>

Notify the ACME server that a challenge is ready for validation

Arguments

• order - The certificate order
• challenge_url - The URL of the challenge to validate

pub async fn wait_for_order_ready( &self, order: &mut Order, ) -> Result<(), AcmeError>

Wait for the order to become ready (all challenges validated)

Polls the order status until it becomes ready or times out.

pub async fn finalize_order( &self, order: &mut Order, ) -> Result<(String, String, DateTime<Utc>), AcmeError>

Finalize the order and retrieve the certificate

Generates a CSR, submits it to the ACME server, and retrieves the issued certificate.

Returns

A tuple of (certificate_pem, private_key_pem, expiry_date)

pub fn needs_renewal(&self, domain: &str) -> Result<bool, AcmeError>

Check if a certificate exists and needs renewal

Trait Implementations

impl Debug for AcmeClient

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.