Struct EstLabelConfig 

pub struct EstLabelConfig {
    pub name: String,
    pub ca_id: Option<String>,
    pub auth_methods: Vec<EstAuthMethod>,
    pub csr_attributes: Vec<String>,
    pub require_cn_match: bool,
    pub max_validity_days: Option<u32>,
    pub disconnected: Option<bool>,
}

[[est.label]] — per-label enrollment profile.

Each label provides an independent enrollment namespace with its own CA routing, authentication requirements, and CSR attribute set.

[[est.label]]
name = "devices"
ca_id = "device-ca"
auth_methods = ["mtls", "otp"]
require_cn_match = true

Fields

name: String

Label name used in the URL path.

Must be a non-empty string matching ^[a-z0-9][a-z0-9_-]*$.

ca_id: Option<String>

CA identifier to use for enrollments under this label.

Must reference a [[ca]] entry by its id field. When absent, the default CA is used.

auth_methods: Vec<EstAuthMethod>

Allowed authentication methods for this label.

When empty, all globally-enabled auth methods are accepted.

csr_attributes: Vec<String>

Per-label CSR attribute hints (overrides global csr_attributes for this label).

require_cn_match: bool

Require that the CSR Common Name matches the authenticated identity.

When true, the server rejects CSRs where the CN does not match the client’s authenticated principal name.

max_validity_days: Option<u32>

Maximum validity period (days) for certificates issued under this label.

Overrides the CA’s default validity_days for this label.

disconnected: Option<bool>

Enable disconnected mode for this specific label. Overrides the global [est].disconnected setting.

Trait Implementations

impl Clone for EstLabelConfig

fn clone(&self) -> EstLabelConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EstLabelConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EstLabelConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.