Struct CsrTemplate 

pub struct CsrTemplate {
    pub subject: Vec<CsrTemplateRdn>,
    pub key_algorithm: Option<String>,
    pub required_extensions: Vec<String>,
}

CSR template mode configuration (draft-ietf-lamps-rfc7030-csrattrs / RFC 9908).

When configured, the /csrattrs response includes a CertificationRequestInfoTemplate attribute alongside the OID list, guiding clients on expected subject DN, key algorithm, and extensions.

The template is backward-compatible: clients that do not understand the template attribute will ignore it and process only the OID list.

[est.csr_template]
key_algorithm = "ec:P-256"
required_extensions = ["2.5.29.17"]

[[est.csr_template.subject]]
oid = "2.5.4.10"
value = "Example Corp"

[[est.csr_template.subject]]
oid = "2.5.4.3"

Fields

subject: Vec<CsrTemplateRdn>

Required subject DN components.

Each entry specifies an OID and an optional value. When value is None, the client must supply its own value for that RDN component.

key_algorithm: Option<String>

Required key algorithm constraint.

Format: "ec:P-256", "ec:P-384", "rsa:2048", "rsa:4096". When set, encodes a SubjectPublicKeyInfoTemplate in the template.

required_extensions: Vec<String>

Required X.509 extension OIDs (client fills values).

Each entry is a dotted-decimal OID string (e.g., "2.5.29.17" for subjectAltName).

Implementations

impl CsrTemplate

pub fn has_content(&self) -> bool

Returns true when at least one template field carries content.

Trait Implementations

impl Clone for CsrTemplate

fn clone(&self) -> CsrTemplate

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CsrTemplate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CsrTemplate

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.