Struct LocalFleet 

pub struct LocalFleet {
    authority: LocalAuthority,
    resolver: Arc<ZoneResolver>,
}

Every zone served from LocalAuthority, behind the one SNI-dispatching resolver a multi-zone deployment uses for ACME certificates.

No renewal loop: a certificate is signed at start whenever what is on disk will not last, which is all a certificate nothing but this machine trusts needs.

Fields

authority: LocalAuthority

resolver: Arc<ZoneResolver>

Implementations

impl LocalFleet

pub fn bootstrap( ca_dir: &Path, leaves: Option<&Path>, zones: &[String], ) -> Result<Self, LocalError>

Loads or signs a certificate for every zone in zones, refusing any zone crate::source does not put under this authority.

ca_dir holds the authority itself — one per machine — and leaves is the data directory the signed certificates are cached in, or None for a server that keeps nothing.

The first entry in zones is the primary: the certificate a ClientHello with no server name gets.

pub fn authority(&self) -> &LocalAuthority

The authority behind these certificates, for printing its path.

pub fn server_config(&self) -> Arc<ServerConfig>

The one rustls::ServerConfig this process serves with.

Trait Implementations

impl Debug for LocalFleet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.