Crate confium_tls_signer 

TLS 1.3 signature callback satisfying via threshold.

For high-value TLS endpoints (root CAs, payment gateways), the server signing key is threshold-held across multiple data centers. This crate provides the TLS callback that routes the signature request through a Confium coordinator.

See TODO.roadmap/28-mode2-pki-replacement.md for full spec.

Structs

TlsSignatureRequest

TLS signature request from the TLS handshake layer.

TlsSignatureResponse

TLS signature response — the produced signature.

TlsSigner

The TLS signer.

Enums

SignatureScheme

TLS signature scheme identifier (RFC 8446 §4.2.3 SignatureScheme).

TlsSignerError

Errors during TLS signing.

Traits

ThresholdSigner

Signer hook — caller provides concrete threshold signing backend.