Expand description
Rust port of internal/pki and internal/truststore.
See PORT_NOTES.md for the tests that could not be carried over, and
why, plus the macOS Keychain truststore’s own notes
(truststore::system_darwin, verified on a real macOS host).
Re-exports§
pub use ca::COMMON_NAME;pub use ca::Ca;pub use ca::CertInfo;pub use ca::EcCurve;pub use ca::KeyInfo;pub use ca::PkiError;pub use constraints::ClusterConfig;pub use constraints::NetworkConfig;
Modules§
- ca
- Dev CA generation, loading, and re-signing.
- constraints
- Name Constraint computation for the dev CA.
- domain
- Leaf verification within a cluster’s DNS domain.
- truststore
- Rust port of
internal/truststore.