Struct ReloadableCertResolver 

pub struct ReloadableCertResolver { /* private fields */ }

A ResolvesServerCert implementation that supports atomic in-place certificate rotation without restarting the listener (RFC 020).

Usage

1. Build with ReloadableCertResolver::new at server startup.
2. Pass Arc::clone(&resolver) to the server loop and keep one Arc in ServerHandle::cert_reloader.
3. Call reload_from_paths when the GUI applies a TlsCertFile or TlsKeyFile change. The swap is atomic: in-progress handshakes complete with the old cert; new handshakes use the new cert.

Implementations

impl ReloadableCertResolver

pub fn new( certs: Vec<CertificateDer<'static>>, key: PrivateKeyDer<'static>, ) -> Result<Self, TlsReloadError>

Create a new resolver from DER-encoded cert and key material.

pub fn reload_from_paths( &self, cert_path: &str, key_path: &str, ) -> Result<(), TlsReloadError>

Reload certificates from PEM files on disk.

If loading or parsing fails, the old certificate remains active and this method returns an error describing the failure.

Trait Implementations

impl Debug for ReloadableCertResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl ResolvesServerCert for ReloadableCertResolver

fn resolve(&self, _client_hello: ClientHello<'_>) -> Option<Arc<CertifiedKey>>

Choose a certificate chain and matching key given simplified ClientHello information.

fn only_raw_public_keys(&self) -> bool

Return true when the server only supports raw public keys.