Skip to main content

CsrSigner

zeroclaw_tls::csr

Trait CsrSigner 

pub trait CsrSigner {
    // Required method
    fn generate_csr(&self, subject_hint: &str) -> Result<ClientCsr>;
}
Expand description

Produces a client CSR while holding the private key per the platform.

Desktop uses SoftwareP256Signer; mobile clients implement this against a hardware keystore so the key is non-exportable (A5). Implementations MUST NOT return the private key in the CSR or transmit it off-device.

Required Methods§

Source

fn generate_csr(&self, subject_hint: &str) -> Result<ClientCsr>

Generate a keypair and a CSR for subject_hint. The hint is advisory: the issuer overrides the subject with the device id it assigns (A7).

Dyn Compatibility§

This trait is dyn compatible.

In older versions of Rust, dyn compatibility was called "object safety".

Implementors§