Enum SourceConfig 

pub enum SourceConfig {
    Crl {
        path: PathBuf,
        issuer_cert: Option<PathBuf>,
    },
    DogtagSync {
        ldap_url: String,
        base_dn: String,
        bind_dn: String,
        bind_password: Option<String>,
        bind_password_env: Option<String>,
        cookie_path: Option<PathBuf>,
        filter: Option<String>,
        tls: String,
        ca_cert: Option<PathBuf>,
    },
}

Variants

Crl

Fields

path: PathBuf

issuer_cert: Option<PathBuf>

DogtagSync

RFC 4533 syncrepl against a Dogtag 389 DS certificate repository.

Initial refresh loads the full cert population; subsequent refreshes send the stored sync cookie so 389 DS returns only changes. Produces both Good and Revoked entries — enables authoritative-complete bundles.

Fields

ldap_url: String

LDAP URL, e.g. ldap://ds-iot.cert-lab.local:3389

base_dn: String

Search base DN, e.g. ou=certificateRepository,ou=ca,o=pki-iot-ca-CA

bind_dn: String

Bind DN (e.g. cn=Directory Manager)

bind_password: Option<String>

Bind password (plaintext — prefer bind_password_env)

bind_password_env: Option<String>

Environment variable holding the bind password

cookie_path: Option<PathBuf>

Path to checkpoint the sync cookie (default: state_db/sync-cookie.dat)

filter: Option<String>

LDAP filter (default: (objectClass=certificateRecord))

tls: String

Transport security for the LDAP connection (FTP_ITC.1): "ldaps" (implicit TLS), "starttls" (upgrade before bind), or "none" (plaintext — the default, for backward compatibility). With starttls the upgrade completes before the bind, so the bind password is never sent in cleartext.

ca_cert: Option<PathBuf>

Optional PEM CA bundle to validate the directory server’s TLS certificate against (instead of the system roots).

Trait Implementations

impl Clone for SourceConfig

fn clone(&self) -> SourceConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SourceConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SourceConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.