Struct ChainSpec 

pub struct ChainSpec {
    pub leaf_cn: String,
    pub leaf_sans: Vec<String>,
    pub root_cn: String,
    pub intermediate_cn: String,
    pub rsa_bits: usize,
    pub root_validity_days: u32,
    pub intermediate_validity_days: u32,
    pub leaf_validity_days: u32,
    pub leaf_not_before_offset_days: Option<i64>,
    pub intermediate_not_before_offset_days: Option<i64>,
}

Specification for generating a three-level X.509 certificate chain (root CA -> intermediate CA -> leaf).

Fields

leaf_cn: String

Common Name (CN) for the leaf certificate.

leaf_sans: Vec<String>

DNS Subject Alternative Names for the leaf certificate.

root_cn: String

Common Name (CN) for the root CA.

intermediate_cn: String

Common Name (CN) for the intermediate CA.

rsa_bits: usize

RSA key size in bits.

root_validity_days: u32

Root CA validity period in days.

intermediate_validity_days: u32

Intermediate CA validity period in days.

leaf_validity_days: u32

Leaf certificate validity period in days.

leaf_not_before_offset_days: Option<i64>

Override for leaf not_before as days before base_time.

When None, not_before = base_time - 1 day (the default). When Some(730), not_before = base_time - 730 days, which combined with a short leaf_validity_days produces an unambiguously expired leaf.

intermediate_not_before_offset_days: Option<i64>

Override for intermediate not_before as days before base_time.

Same semantics as leaf_not_before_offset_days but for the intermediate CA.

Implementations

impl ChainSpec

pub fn new(leaf_cn: impl Into<String>) -> ChainSpec

Create a chain spec with sensible defaults for the given leaf CN.

The leaf CN is automatically added to the SAN list.

pub fn with_sans(self, sans: Vec<String>) -> ChainSpec

Set the DNS Subject Alternative Names for the leaf certificate.

The leaf CN is not automatically added; include it explicitly if needed.

pub fn with_root_cn(self, cn: impl Into<String>) -> ChainSpec

Set the root CA Common Name.

pub fn with_intermediate_cn(self, cn: impl Into<String>) -> ChainSpec

Set the intermediate CA Common Name.

pub fn with_rsa_bits(self, bits: usize) -> ChainSpec

Set the RSA key size in bits.

pub fn with_root_validity_days(self, days: u32) -> ChainSpec

Set the root CA validity period in days.

pub fn with_intermediate_validity_days(self, days: u32) -> ChainSpec

Set the intermediate CA validity period in days.

pub fn with_leaf_validity_days(self, days: u32) -> ChainSpec

Set the leaf certificate validity period in days.

pub fn stable_bytes(&self) -> Vec<u8>

Stable byte representation for deterministic derivation.

SANs are sorted and deduplicated before encoding for stability.

Trait Implementations

impl Clone for ChainSpec

fn clone(&self) -> ChainSpec

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ChainSpec

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Hash for ChainSpec

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for ChainSpec

fn eq(&self, other: &ChainSpec) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for ChainSpec

impl StructuralPartialEq for ChainSpec