Struct EnrollmentSession 

pub struct EnrollmentSession { /* private fields */ }

Client-side NDNCERT enrollment session.

Usage:

1. Create with EnrollmentSession::new
2. Call new_request_body to get the body for the /CA/NEW Interest
3. Feed the response to handle_new_response
4. Build the challenge parameters and call challenge_request_body
5. Feed the response to handle_challenge_response
6. For multi-round challenges (email), repeat steps 4–5 with updated parameters
7. On success, retrieve the certificate with certificate

Implementations

impl EnrollmentSession

pub fn new(name: Name, public_key: Vec<u8>, validity_secs: u64) -> Self

pub fn new_request_body(&mut self) -> Result<Vec<u8>, CertError>

Build the TLV body for the /CA/NEW Interest’s ApplicationParameters.

Generates a fresh P-256 ephemeral ECDH key pair; the private part is held in self until the CA responds with its own public key.

pub fn handle_new_response(&mut self, body: &[u8]) -> Result<(), CertError>

Process the /CA/NEW TLV response and advance state.

Performs ECDH key agreement with the CA’s ephemeral public key and derives the shared AES-GCM-128 session key.

pub fn request_id(&self) -> Option<&str>

The request ID assigned by the CA (available after handle_new_response).

pub fn offered_challenges(&self) -> &[String]

The challenge types offered by the CA.

pub fn challenge_status_message(&self) -> Option<&str>

Status message from an in-progress challenge (e.g. “Code sent to user@example.com”).

pub fn remaining_tries(&self) -> Option<u8>

Remaining attempts for an in-progress challenge.

pub fn challenge_request_body( &self, challenge_type: &str, parameters: Map<String, Value>, ) -> Result<Vec<u8>, CertError>

Build the TLV body for the /CA/CHALLENGE/<id> Interest.

parameters is JSON-encoded and AES-GCM encrypted with the session key.

pub fn handle_challenge_response( &mut self, body: &[u8], ) -> Result<(), CertError>

Process the challenge TLV response and advance state.

Returns Ok(()) on both success and Pending (another round needed). Check is_complete to know if the session is done. Check challenge_status_message for the next prompt.

pub fn is_complete(&self) -> bool

Whether the session has completed successfully.

pub fn needs_another_round(&self) -> bool

Whether another CHALLENGE round is required.

pub fn certificate(&self) -> Option<&Certificate>

The issued certificate (available after successful completion).

pub fn into_certificate(self) -> Option<Certificate>

Consume the session and return the issued certificate.