Skip to main content

AuditEventType

kipuka::audit

Enum AuditEventType 

Source 
pub enum AuditEventType {

Show 22 variants    CaStart,
    CaStop,
    CaHealthChange,
    EnrollRequest,
    CertIssue,
    CertReenroll,
    EnrollReject,
    CertRevoke,
    CrlGenerate,
    KeyGenerate,
    KeyLoad,
    KeyDestroy,
    OtpCreate,
    OtpUse,
    OtpExpire,
    OtpRevoke,
    AuthSuccess,
    AuthFailure,
    AdminLogin,
    AdminLogout,
    AdminAction,
    SecurityViolation,

}
Expand description

Every auditable operation the server can perform.

NIAP CA PP FAU_GEN.1: the following categories of events MUST be auditable:

  • Certificate lifecycle (enrollment, re-enrollment, rejection, revocation)
  • Key management (generation, destruction, HSM operations)
  • OTP lifecycle (creation, usage, expiration, revocation)
  • Authentication events (success, failure)
  • Administrative operations (login, logout, config changes)
  • CA health status changes

Variants§

§

CaStart

CA started or restarted.

§

CaStop

CA stopped (graceful shutdown).

§

CaHealthChange

CA health status changed (degraded, recovered).

§

EnrollRequest

Certificate enrollment request received.

§

CertIssue

Certificate issued successfully.

§

CertReenroll

Certificate re-enrollment completed.

§

EnrollReject

Enrollment request rejected.

§

CertRevoke

Certificate revoked.

§

CrlGenerate

CRL generated.

§

KeyGenerate

Signing key generated (software or HSM).

§

KeyLoad

Signing key loaded from file or HSM.

§

KeyDestroy

Key destroyed or deactivated.

§

OtpCreate

OTP created by administrator.

§

OtpUse

OTP used for enrollment authentication.

§

OtpExpire

OTP expired (TTL reached).

§

OtpRevoke

OTP revoked by administrator.

§

AuthSuccess

Client authentication succeeded (mTLS, OTP, Basic, etc.).

§

AuthFailure

Client authentication failed.

§

AdminLogin

Admin operator logged in.

§

AdminLogout

Admin operator logged out.

§

AdminAction

Admin performed a privileged operation.

§

SecurityViolation

Security violation detected (repeated auth failures, etc.).

Implementations§

Source§

impl AuditEventType

Source

pub fn as_str(self) -> &'static str

Return the canonical dot-separated string for this event type.

Trait Implementations§

Source§

impl Clone for AuditEventType

Source§

fn clone(&self) -> AuditEventType

Returns a duplicate of the value. Read more
1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for AuditEventType

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl PartialEq for AuditEventType

Source§

fn eq(&self, other: &AuditEventType) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl Copy for AuditEventType

Source§

impl Eq for AuditEventType

Source§

impl StructuralPartialEq for AuditEventType

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
§

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

§

fn equivalent(&self, key: &K) -> bool

Checks if this value is equivalent to the given key. Read more
§

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

§

fn equivalent(&self, key: &K) -> bool

Compare self to key and return true if they are equal.
§

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

§

fn equivalent(&self, key: &K) -> bool

Checks if this value is equivalent to the given key. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T> FromRef<T> for T
where T: Clone,

§

fn from_ref(input: &T) -> T

Converts to this type from a reference to the input type.
§

impl<T> Instrument for T

§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided [Span], returning an Instrumented wrapper. Read more
§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> IntoEither for T

Source§

fn into_either(self, into_left: bool) -> Either<Self, Self>

Converts self into a Left variant of Either<Self, Self> if into_left is true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
Source§

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
where F: FnOnce(&Self) -> bool,

Converts self into a Left variant of Either<Self, Self> if into_left(&self) returns true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
§

impl<T> PolicyExt for T
where T: ?Sized,

§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] only if self and other return Action::Follow. Read more
§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] if either self or other returns Action::Follow. Read more
Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

§

fn vzip(self) -> V

§

impl<T> WithSubscriber for T

§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a [WithDispatch] wrapper. Read more
§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a [WithDispatch] wrapper. Read more
§

impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
where ST: ?Sized, DT: ?Sized,

§

impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
where ST: ?Sized, DT: ?Sized,

§

impl<T> Read<Exclusive, BecauseExclusive> for T
where T: ?Sized,