Struct HsmContext 

pub struct HsmContext {
    pub context: Pkcs11Context,
    pub provider: HsmProvider,
    /* private fields */
}

High-level HSM context wrapping PKCS#11 initialization and provider config.

Used by AppState to hold the HSM connection for the server lifetime. When fully initialized, holds a logged-in PKCS#11 session for signing.

Fields

context: Pkcs11Context

provider: HsmProvider

Implementations

impl HsmContext

pub fn new( context: Pkcs11Context, provider: HsmProvider, slot: HsmSlot, session: Session, ) -> Self

Create a new HSM context with a logged-in session ready for signing.

pub fn placeholder() -> Self

pub fn health_check(&self) -> HsmResult<()>

Check that the HSM session is initialized and the mutex is healthy.

Returns Ok(()) if a PKCS#11 session exists and the lock is acquirable. Used by health probes to verify HSM availability without performing a signing operation.

pub fn tls_key_label(&self, uri: &str) -> HsmResult<String>

Resolve a strict RFC 7512 key selector against the configured token.

pub fn sign_tls( &self, key_label: &str, data: &[u8], scheme: SignatureScheme, ) -> HsmResult<Vec<u8>>

Sign the TLS transcript with the selected scheme and wire encoding.

pub fn sign_data( &self, key_label: &str, data: &[u8], hash_algorithm: &str, ) -> HsmResult<Vec<u8>>

Trait Implementations

impl Debug for HsmContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Send for HsmContext

impl Sync for HsmContext