Struct IdentityProvider 

pub struct IdentityProvider { /* private fields */ }

Service identity provider with self-signed CA stub.

Implementations

impl IdentityProvider

pub const DEFAULT_CERT_LIFETIME: u64 = 3_600u64

Default certificate lifetime: 3600 ticks (1 hour at 1 tick/sec).

pub fn new(trust_domain: String) -> Self

Create a new identity provider.

pub fn issue_identity( &mut self, spiffe_id: SpiffeId, current_tick: u64, ) -> Result<&ServiceIdentity, IdentityError>

Issue an identity for a service.

pub fn verify_identity( &self, spiffe_uri: &str, current_tick: u64, ) -> Result<bool, IdentityError>

Verify an identity’s certificate is valid.

pub fn rotate_certificate( &mut self, spiffe_uri: &str, current_tick: u64, ) -> Result<&ServiceIdentity, IdentityError>

Rotate a certificate (renew before expiry).

pub fn get_identity(&self, spiffe_uri: &str) -> Option<&ServiceIdentity>

Get an identity by SPIFFE URI.

pub fn list_identities(&self) -> Vec<&ServiceIdentity>

List all identities.

pub fn ca_certificate(&self) -> &[u8]

Get the CA certificate.

pub fn trust_domain(&self) -> &str

Get the trust domain.

pub fn identity_count(&self) -> usize

Get the total number of issued identities.

Trait Implementations

impl Debug for IdentityProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for IdentityProvider

fn default() -> Self

Returns the “default value” for a type.