Struct TlsValidationContext

#[non_exhaustive]
pub struct TlsValidationContext {
    pub trust: Option<TlsValidationContextTrust>,
    pub subject_alternative_names: Option<SubjectAlternativeNames>,
}

An object that represents how the proxy will validate its peer during Transport Layer Security (TLS) negotiation.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

trust: Option<TlsValidationContextTrust>

A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.

subject_alternative_names: Option<SubjectAlternativeNames>

A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context. If you don't specify SANs on the terminating mesh endpoint, the Envoy proxy for that node doesn't verify the SAN on a peer client certificate. If you don't specify SANs on the originating mesh endpoint, the SAN on the certificate provided by the terminating endpoint must match the mesh endpoint service discovery configuration. Since SPIRE vended certificates have a SPIFFE ID as a name, you must set the SAN since the name doesn't match the service discovery name.

Implementations

impl TlsValidationContext

pub fn trust(&self) -> Option<&TlsValidationContextTrust>

A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.

pub fn subject_alternative_names(&self) -> Option<&SubjectAlternativeNames>

A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context. If you don't specify SANs on the terminating mesh endpoint, the Envoy proxy for that node doesn't verify the SAN on a peer client certificate. If you don't specify SANs on the originating mesh endpoint, the SAN on the certificate provided by the terminating endpoint must match the mesh endpoint service discovery configuration. Since SPIRE vended certificates have a SPIFFE ID as a name, you must set the SAN since the name doesn't match the service discovery name.

impl TlsValidationContext

pub fn builder() -> TlsValidationContextBuilder

Creates a new builder-style object to manufacture TlsValidationContext.

Trait Implementations

impl Clone for TlsValidationContext

fn clone(&self) -> TlsValidationContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsValidationContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for TlsValidationContext

fn eq(&self, other: &TlsValidationContext) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for TlsValidationContext