pub struct HierarchicalPolicy;Expand description
The hierarchical policy: a requester may only obtain certificates for names that are strictly under their own current certificate’s identity prefix.
A CA under /com/acme/fleet/CA may also issue to any name under
/com/acme/fleet/.
§Examples
/com/acme/fleet/VIN-123can request/com/acme/fleet/VIN-123/ecu/brake✓/com/acme/fleet/VIN-123cannot request/com/acme/fleet/VIN-456/...✗- A new device (no cert yet) may request any name under the CA’s prefix ✓
Trait Implementations§
Source§impl NamespacePolicy for HierarchicalPolicy
impl NamespacePolicy for HierarchicalPolicy
Source§fn evaluate(
&self,
requested_name: &Name,
requester_cert: Option<&Certificate>,
ca_prefix: &Name,
) -> PolicyDecision
fn evaluate( &self, requested_name: &Name, requester_cert: Option<&Certificate>, ca_prefix: &Name, ) -> PolicyDecision
Evaluate whether
requested_name may be issued to a requester holding
requester_cert (may be None for the first enrollment).Auto Trait Implementations§
impl Freeze for HierarchicalPolicy
impl RefUnwindSafe for HierarchicalPolicy
impl Send for HierarchicalPolicy
impl Sync for HierarchicalPolicy
impl Unpin for HierarchicalPolicy
impl UnwindSafe for HierarchicalPolicy
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more