Struct CaCertsResponse 

pub struct CaCertsResponse { /* private fields */ }

CA certificates response (RFC 7030 §4.1.3).

Contains a PKCS#7 certs-only structure with the CA certificate chain. The chain MAY include:

• Root CA certificate (self-signed)
• Intermediate CA certificates
• ML-DSA signing CA certificates
• Composite (ML-DSA + traditional) CA certificates

The structure is DER-encoded and base64-wrapped for transport.

Implementations

impl CaCertsResponse

pub fn new(pkcs7_der: Vec<u8>) -> Self

Creates a new CA certificates response from DER-encoded PKCS#7.

Arguments

• pkcs7_der - DER-encoded PKCS#7 certs-only structure

Returns

A new CaCertsResponse instance.

pub fn pkcs7_der(&self) -> &[u8]

Returns the raw DER-encoded PKCS#7 data.

pub fn into_pkcs7_der(self) -> Vec<u8>

Consumes self and returns the DER-encoded PKCS#7 data.

pub fn to_base64(&self) -> String

Encodes the response as base64 for HTTP transport.

Uses standard base64 encoding per RFC 7030 §4.1.3.

pub fn from_base64(base64_data: &str) -> EstResult<Self>

Decodes a base64-encoded CA certificates response.

Arguments

• base64_data - Base64-encoded PKCS#7 certs-only structure

Errors

Returns EstError::InvalidBase64 if decoding fails.

pub fn validate(&self) -> EstResult<()>

Validates the PKCS#7 structure (basic DER sanity check).

This is a lightweight validation that checks for basic DER structure. Full cryptographic validation is performed by the CA module.

Trait Implementations

impl Clone for CaCertsResponse

fn clone(&self) -> CaCertsResponse

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CaCertsResponse

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CaCertsResponse

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for CaCertsResponse

fn eq(&self, other: &CaCertsResponse) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for CaCertsResponse

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for CaCertsResponse

impl StructuralPartialEq for CaCertsResponse