Struct EnrollAuthzPolicy 

pub struct EnrollAuthzPolicy<'a> {
    pub require_cn_match: bool,
    pub require_san_match: bool,
    pub permitted_dns_names: &'a [String],
    pub permitted_ip_addresses: &'a [String],
    pub permitted_emails: &'a [String],
}

Per-label enrollment authorization policy.

Borrowed from an crate::routes::LabelExtractor for the lifetime of a single enrollment request; no allocation.

Fields

require_cn_match: bool

Require the CSR subject Common Name to equal the authenticated identity (case-insensitive). FDP_ACF.1 identity binding.

require_san_match: bool

Require the authenticated identity to appear as a Subject Alternative Name entry of the matching type. FDP_ACF.1 identity binding.

permitted_dns_names: &'a [String]

Allowlist of permitted dNSName patterns (RFC 6125). When non-empty, every dNSName SAN in the CSR must match one entry.

permitted_ip_addresses: &'a [String]

Allowlist of permitted iPAddress SANs (textual form). When non-empty, every iPAddress SAN in the CSR must equal one entry.

permitted_emails: &'a [String]

Allowlist of permitted rfc822Name patterns. When non-empty, every rfc822Name SAN in the CSR must match one entry.

Implementations

impl EnrollAuthzPolicy<'_>

pub fn is_noop(&self) -> bool

true when the policy enforces nothing (all controls off/empty).

Trait Implementations

impl<'a> Clone for EnrollAuthzPolicy<'a>

fn clone(&self) -> EnrollAuthzPolicy<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Debug for EnrollAuthzPolicy<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> Copy for EnrollAuthzPolicy<'a>