Struct TlsValidationContextBuilder

#[non_exhaustive]
pub struct TlsValidationContextBuilder { /* private fields */ }

A builder for TlsValidationContext.

Implementations

impl TlsValidationContextBuilder

pub fn trust(self, input: TlsValidationContextTrust) -> Self

A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.

This field is required.

pub fn set_trust(self, input: Option<TlsValidationContextTrust>) -> Self

A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.

pub fn get_trust(&self) -> &Option<TlsValidationContextTrust>

A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.

pub fn subject_alternative_names(self, input: SubjectAlternativeNames) -> Self

A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context. If you don't specify SANs on the terminating mesh endpoint, the Envoy proxy for that node doesn't verify the SAN on a peer client certificate. If you don't specify SANs on the originating mesh endpoint, the SAN on the certificate provided by the terminating endpoint must match the mesh endpoint service discovery configuration. Since SPIRE vended certificates have a SPIFFE ID as a name, you must set the SAN since the name doesn't match the service discovery name.

pub fn set_subject_alternative_names( self, input: Option<SubjectAlternativeNames>, ) -> Self

A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context. If you don't specify SANs on the terminating mesh endpoint, the Envoy proxy for that node doesn't verify the SAN on a peer client certificate. If you don't specify SANs on the originating mesh endpoint, the SAN on the certificate provided by the terminating endpoint must match the mesh endpoint service discovery configuration. Since SPIRE vended certificates have a SPIFFE ID as a name, you must set the SAN since the name doesn't match the service discovery name.

pub fn get_subject_alternative_names(&self) -> &Option<SubjectAlternativeNames>

A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context. If you don't specify SANs on the terminating mesh endpoint, the Envoy proxy for that node doesn't verify the SAN on a peer client certificate. If you don't specify SANs on the originating mesh endpoint, the SAN on the certificate provided by the terminating endpoint must match the mesh endpoint service discovery configuration. Since SPIRE vended certificates have a SPIFFE ID as a name, you must set the SAN since the name doesn't match the service discovery name.

pub fn build(self) -> TlsValidationContext

Consumes the builder and constructs a TlsValidationContext.

Trait Implementations

impl Clone for TlsValidationContextBuilder

fn clone(&self) -> TlsValidationContextBuilder

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsValidationContextBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TlsValidationContextBuilder

fn default() -> TlsValidationContextBuilder

Returns the “default value” for a type.

impl PartialEq for TlsValidationContextBuilder

fn eq(&self, other: &TlsValidationContextBuilder) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for TlsValidationContextBuilder