Struct CertificateSigningRequestParams 

pub struct CertificateSigningRequestParams {
    pub params: CertificateParams,
    pub public_key: PublicKey,
}

Available on (crate features rustls or boring or acme) and crate feature rustls only.

Parameters for a certificate signing request

Fields

params: CertificateParams

Parameters for the certificate to be signed.

public_key: PublicKey

Public key to include in the certificate signing request.

Implementations

impl CertificateSigningRequestParams

pub fn from_pem(pem_str: &str) -> Result<CertificateSigningRequestParams, Error>

Available on crate features pem and x509-parser only.

Parse and verify a certificate signing request from the ASCII PEM format

See from_der for more details.

pub fn from_der( csr: &CertificateSigningRequestDer<'_>, ) -> Result<CertificateSigningRequestParams, Error>

Available on crate feature x509-parser only.

Parse and verify a certificate signing request from DER-encoded bytes

Currently, this supports the following extensions:

• Subject Alternative Name (see SanType)
• Key Usage (see KeyUsagePurpose)
• Extended Key Usage (see ExtendedKeyUsagePurpose)

On encountering other extensions, this function will return Error::UnsupportedExtension. If the request’s signature is invalid, it will return Error::InvalidCertificationRequestSignature.

The PemObject trait is often used to obtain a CertificateSigningRequestDer from PEM input. If you already have a byte slice containing DER, it can trivially be converted into CertificateSigningRequestDer using the Into trait.

pub fn signed_by( &self, issuer: &Issuer<'_, impl SigningKey>, ) -> Result<Certificate, Error>

Generate a new certificate based on the requested parameters, signed by the provided issuer.

The returned certificate will have its issuer field set to the subject of the provided issuer, and the authority key identifier extension will be populated using the subject public key of issuer. It will be signed by issuer_key.

Note that no validation of the issuer certificate is performed. Rcgen will not require the certificate to be a CA certificate, or have key usage extensions that allow signing.

The returned Certificate may be serialized using Certificate::der and Certificate::pem.

Trait Implementations

impl Clone for CertificateSigningRequestParams

fn clone(&self) -> CertificateSigningRequestParams

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertificateSigningRequestParams

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl PartialEq for CertificateSigningRequestParams

fn eq(&self, other: &CertificateSigningRequestParams) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for CertificateSigningRequestParams

impl StructuralPartialEq for CertificateSigningRequestParams