Struct PostgresTlsPolicy 

pub struct PostgresTlsPolicy { /* private fields */ }

A complete Postgres TLS policy.

The fields are private so callers cannot pair plaintext with CA roots or construct verify-ca without a root. Cloning the policy is cheap: certificate bundles are reference-counted and copied only when crossing an FFI boundary.

Implementations

impl PostgresTlsPolicy

pub fn disabled() -> Self

Plain TCP with no certificate roots.

pub fn verify_ca( ca_certificates: Vec<String>, ) -> Result<Self, InvalidPostgresCaCertificates>

TLS with CA verification but no hostname verification.

This mode requires at least one valid PEM root.

pub fn verify_full( ca_certificates: Vec<String>, ) -> Result<Self, InvalidPostgresCaCertificates>

TLS with CA and hostname verification.

An empty root set intentionally selects the runtime’s system trust store.

pub fn verify_full_with_system_roots() -> Self

TLS with CA and hostname verification using the runtime’s system trust store.

pub fn sslmode(&self) -> SslMode

The libpq-compatible sslmode represented by this complete policy.

pub fn ca_certificates(&self) -> &[String]

PEM-encoded roots, or an empty slice when this policy uses no roots or the runtime’s system trust store.

Trait Implementations

impl Clone for PostgresTlsPolicy

fn clone(&self) -> PostgresTlsPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PostgresTlsPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for PostgresTlsPolicy

impl PartialEq for PostgresTlsPolicy

fn eq(&self, other: &PostgresTlsPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PostgresTlsPolicy