Struct HttpsTransportOwnershipProof 

pub struct HttpsTransportOwnershipProof { /* private fields */ }

Server-side proof object for the HTTPS transport. Holds one handle: a clone of HttpsTransportCertRefresher::base_cert, so every call snapshots the freshest loaded chain without coordinating with the cert refresher’s own loop.

One instance per server, constructed in FullHttpsTransportServer::new() and shared via Arc from get_transport_ownership_proof() — so the cache survives across announce ticks.

Implementations

impl HttpsTransportOwnershipProof

pub fn new(base_cert: Arc<RwLock<Option<Arc<CertifiedKey>>>>) -> Self

Trait Implementations

impl TransportOwnershipProof for HttpsTransportOwnershipProof

fn make_ownership_proof_payload(&self) -> Option<Bytes>

Announce-out: produce the proof bytes for our own announce. Returns None if we can’t currently prove ownership — e.g. an HTTPS server that hasn’t completed its first ACME issuance yet. Callers (maintain_kademlia) treat None as “skip this announce tick, try again next interval”.

fn prove(&self, peer: &Peer, proof_payload: &[u8], now: TimeMillis) -> bool

Announce-in: validate proof_payload (bytes pulled out of an inbound AnnounceV2) against peer. Returns false if the bytes can’t be deserialised by this impl (wrong transport / corrupt blob) or if the proof fails verification (expired cert, wrong-IP SAN, …).