Struct TlsConfig 

pub struct TlsConfig {
    pub cert_path: PathBuf,
    pub key_path: PathBuf,
    pub ca_cert_path: Option<PathBuf>,
    pub require_client_cert: bool,
}

TLS configuration for the AstraeaDB server.

Fields

cert_path: PathBuf

Path to the server certificate chain (PEM format).

key_path: PathBuf

Path to the server private key (PEM format).

ca_cert_path: Option<PathBuf>

Optional path to CA certificate for client verification. When set, enables client certificate verification.

require_client_cert: bool

Whether to require a valid client certificate (mTLS). If false and ca_cert_path is set, client certs are optional but validated if present.

Implementations

impl TlsConfig

pub fn new(cert_path: impl Into<PathBuf>, key_path: impl Into<PathBuf>) -> Self

Create a new TLS configuration for server-only TLS (no client verification).

pub fn with_mtls( cert_path: impl Into<PathBuf>, key_path: impl Into<PathBuf>, ca_cert_path: impl Into<PathBuf>, ) -> Self

Create a new TLS configuration with mutual TLS (client certificate required).

pub fn load_server_config(&self) -> Result<ServerConfig, TlsError>

Load and build a rustls ServerConfig from this configuration.

pub fn build_acceptor(&self) -> Result<TlsAcceptor, TlsError>

Create a TlsAcceptor from this configuration.

Trait Implementations

impl Clone for TlsConfig

fn clone(&self) -> TlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.