Struct RotationConfig 

pub(crate) struct RotationConfig {

    id: RotationConfigId,
    organization_id: OrganizationId,
    cipher_id: CipherId,
    target_system_id: TargetSystemId,
    target_system_name: String,
    target_system_method: TargetSystemMethod,
    sealed_data: Option<String>,
    wrapped_key: Option<String>,
    schedule_cron: Option<String>,
    rotate_on_access_end: bool,
    enabled: bool,
    last_rotation_at: Option<DateTime<Utc>>,
    next_rotation_at: Option<DateTime<Utc>>,
    has_active_job: bool,
    awaiting_manual_rotation: bool,
    creation_date: DateTime<Utc>,
    revision_date: DateTime<Utc>,
}

A rotation config as the server returns it, with its security-relevant fields still sealed.

Fields

id: RotationConfigId

organization_id: OrganizationId

cipher_id: CipherId

target_system_id: TargetSystemId

target_system_name: String

target_system_method: TargetSystemMethod

sealed_data: Option<String>

wrapped_key: Option<String>

schedule_cron: Option<String>

rotate_on_access_end: bool

enabled: bool

last_rotation_at: Option<DateTime<Utc>>

next_rotation_at: Option<DateTime<Utc>>

has_active_job: bool

awaiting_manual_rotation: bool

creation_date: DateTime<Utc>

revision_date: DateTime<Utc>

Implementations

impl RotationConfig

fn from_response( organization_id: OrganizationId, response: PamRotationConfigResponseModel, ) -> Result<Self, RotationError>

organization_id must be the queried id, not response.organization_id, or a hostile server could pass off another organization’s validly-sealed blob.

fn unseal( &self, key: SymmetricKeySlotId, ctx: &mut KeyStoreContext<'_, KeySlotIds>, ) -> Option<RotationConfigSealedFields>

Unseals the blob and checks it against this row’s target_system_id and cipher_id. Any problem degrades to None rather than failing, so one bad blob can’t fail a list.

fn try_unseal( &self, key: SymmetricKeySlotId, ctx: &mut KeyStoreContext<'_, KeySlotIds>, ) -> Result<RotationConfigSealedFields, &'static str>

Trait Implementations

impl Clone for RotationConfig

fn clone(&self) -> RotationConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RotationConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Decryptable<KeySlotIds, SymmetricKeySlotId, RotationConfigView> for RotationConfig

fn decrypt( &self, ctx: &mut KeyStoreContext<'_, KeySlotIds>, key: SymmetricKeySlotId, ) -> Result<RotationConfigView, CryptoError>

Never fails: a blob that can’t be verified leaves RotationConfigView::sealed None.

impl IdentifyKey<SymmetricKeySlotId> for RotationConfig

fn key_identifier(&self) -> SymmetricKeySlotId

impl PartialEq for RotationConfig

fn eq(&self, other: &RotationConfig) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for RotationConfig