Struct mz_cloud_resources::crd::gen::cert_manager::certificates::CertificateKeystoresPkcs12

pub struct CertificateKeystoresPkcs12 {
    pub create: bool,
    pub password_secret_ref: CertificateKeystoresPkcs12PasswordSecretRef,
    pub profile: Option<CertificateKeystoresPkcs12Profile>,
}

PKCS12 configures options for storing a PKCS12 keystore in the spec.secretName Secret resource.

Fields

create: bool

Create enables PKCS12 keystore creation for the Certificate. If true, a file named keystore.p12 will be created in the target Secret resource, encrypted using the password stored in passwordSecretRef. The keystore file will be updated immediately. If the issuer provided a CA certificate, a file named truststore.p12 will also be created in the target Secret resource, encrypted using the password stored in passwordSecretRef containing the issuing Certificate Authority

password_secret_ref: CertificateKeystoresPkcs12PasswordSecretRef

PasswordSecretRef is a reference to a key in a Secret resource containing the password used to encrypt the PKCS12 keystore.

profile: Option<CertificateKeystoresPkcs12Profile>

Profile specifies the key and certificate encryption algorithms and the HMAC algorithm used to create the PKCS12 keystore. Default value is LegacyRC2 for backward compatibility.

If provided, allowed values are: LegacyRC2: Deprecated. Not supported by default in OpenSSL 3 or Java 20. LegacyDES: Less secure algorithm. Use this option for maximal compatibility. Modern2023: Secure algorithm. Use this option in case you have to always use secure algorithms (eg. because of company policy). Please note that the security of the algorithm is not that important in reality, because the unencrypted certificate and private key are also stored in the Secret.

Trait Implementations

impl Clone for CertificateKeystoresPkcs12

fn clone(&self) -> CertificateKeystoresPkcs12

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertificateKeystoresPkcs12

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CertificateKeystoresPkcs12

fn default() -> CertificateKeystoresPkcs12

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CertificateKeystoresPkcs12

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for CertificateKeystoresPkcs12

fn schema_name() -> String

The name of the generated JSON Schema.

fn json_schema(gen: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn is_referenceable() -> bool

Whether JSON Schemas generated for this type should be re-used where possible using the $ref keyword.

impl PartialEq for CertificateKeystoresPkcs12

fn eq(&self, other: &CertificateKeystoresPkcs12) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for CertificateKeystoresPkcs12

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CertificateKeystoresPkcs12