AuthorityConfigBuilder
Module: config::AuthorityConfigBuilder
Section titled “Module: config::AuthorityConfigBuilder”Contents
Section titled “Contents”Functions
build- Validate the fully-resolved config and return it.without_tls- Turn TLS off for this config, overriding explicit paths, environment
firma_authority::config::AuthorityConfigBuilder::build
Section titled “firma_authority::config::AuthorityConfigBuilder::build”Function
Validate the fully-resolved config and return it.
Errors
Section titled “Errors”Returns [AuthorityConfigError] if a duration cannot be represented by
the runtime’s whole-second integer fields or a cross-field invariant is
violated.
fn build(self: Self) -> Result<AuthorityConfig, AuthorityConfigError>firma_authority::config::AuthorityConfigBuilder::without_tls
Section titled “firma_authority::config::AuthorityConfigBuilder::without_tls”Function
Turn TLS off for this config, overriding explicit paths, environment overrides, and the state-directory defaults alike.
Used by autostart, which serves the Authority over loopback without TLS.
Recording the request and clearing the paths in build is
what makes it stick: clearing them here would leave an unset pair, which
is exactly what the state-directory default fills back in, and
FIRMA_AUTHORITY_TLS_* would repopulate them anyway — either way a host
that ran firma config hands the autostarted Authority TLS while every
client dials http://.
fn without_tls(self: Self) -> Self