Struct EnrollRequest 

pub struct EnrollRequest { /* private fields */ }

Enrollment request containing a PKCS#10 CSR (RFC 7030 §4.2.1).

The CSR must include:

• Subject public key (ML-DSA, ML-KEM, or traditional)
• Subject distinguished name
• Signature proving possession of the private key (POP)

For ML-DSA CSRs, the signature algorithm OID indicates the ML-DSA level. For ML-KEM CSRs, a separate ML-DSA signature is required for POP.

The wire format is a DER-encoded CertificationRequest per RFC 2986. Use CertificationRequest for parsed/structured access to CSR fields.

Implementations

impl EnrollRequest

pub fn new(csr_der: Vec<u8>) -> Self

Creates a new enrollment request from a DER-encoded PKCS#10 CSR.

pub fn csr_der(&self) -> &[u8]

Returns the raw DER-encoded CSR.

pub fn into_csr_der(self) -> Vec<u8>

Consumes self and returns the DER-encoded CSR.

pub fn to_base64(&self) -> String

Encodes the request as base64 for HTTP transport.

pub fn from_base64(base64_data: &str) -> EstResult<Self>

Decodes a base64-encoded enrollment request.

pub fn validate(&self) -> EstResult<()>

Validates the CSR structure and proof-of-possession.

This performs basic DER validation. Full cryptographic validation (signature verification) is delegated to the CA module.

pub fn detect_signature_algorithm(&self) -> Option<String>

Detects the signature algorithm OID from the CSR.

Returns the OID string if found, or None if parsing fails. This is used to route CSRs to the appropriate CA signing key (ML-DSA-44/65/87, composite, or traditional).

Note: This is a simple heuristic parser. Full ASN.1 parsing is performed by the CA module.

pub fn contains_ml_dsa(&self) -> bool

Checks if the CSR appears to contain an ML-DSA public key.

Searches for ML-DSA OID prefixes in the DER structure.

pub fn contains_ml_kem(&self) -> bool

Checks if the CSR appears to contain an ML-KEM public key.

Searches for ML-KEM OID prefixes in the DER structure.

pub fn to_certification_request(&self) -> CertificationRequest

Returns a parsed CertificationRequest from the DER-encoded CSR.

This is a placeholder that creates a CertificationRequest with default/empty fields. Full ASN.1 parsing of the RFC 2986 structure is performed by the CA module using synta.

Callers should use this to get the struct, then have the CA module populate the fields from actual DER parsing.

Trait Implementations

impl Clone for EnrollRequest

fn clone(&self) -> EnrollRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EnrollRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EnrollRequest

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for EnrollRequest

fn eq(&self, other: &EnrollRequest) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for EnrollRequest

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for EnrollRequest

impl StructuralPartialEq for EnrollRequest