Struct TlsProfile 

pub struct TlsProfile {
    pub tls_enabled: bool,
    pub require_client_mtls: bool,
    pub encrypted_server_cert: Vec<u8>,
    pub encrypted_server_key: Vec<u8>,
    pub encrypted_client_ca_bundle: Vec<u8>,
    pub encrypted_upstream_ca_bundle: Vec<u8>,
    pub encrypted_upstream_client_cert: Vec<u8>,
    pub encrypted_upstream_client_key: Vec<u8>,
    pub client_cert_ttl_hours: u32,
    pub sni: Option<String>,
    pub subject_alt_name_template: Option<String>,
    pub allowed_dns_names: Vec<String>,
}

TLS profile configuration for a service

Fields

tls_enabled: bool

Whether TLS is enabled for this service

require_client_mtls: bool

Whether client mTLS is required

encrypted_server_cert: Vec<u8>

Encrypted server certificate PEM

encrypted_server_key: Vec<u8>

Encrypted server private key PEM

encrypted_client_ca_bundle: Vec<u8>

Encrypted client CA bundle PEM

encrypted_upstream_ca_bundle: Vec<u8>

Encrypted upstream CA bundle PEM

encrypted_upstream_client_cert: Vec<u8>

Encrypted upstream client certificate PEM

encrypted_upstream_client_key: Vec<u8>

Encrypted upstream client private key PEM

client_cert_ttl_hours: u32

Maximum client certificate TTL in hours

sni: Option<String>

Optional SNI hostname for this service

subject_alt_name_template: Option<String>

Template to derive subjectAltNames for issued certificates

allowed_dns_names: Vec<String>

Allowed DNS names for issued certificates

Implementations

impl TlsProfile

pub fn sni(&self) -> &str

Returns the value of sni, or the default value if sni is unset.

pub fn subject_alt_name_template(&self) -> &str

Returns the value of subject_alt_name_template, or the default value if subject_alt_name_template is unset.

impl TlsProfile

pub fn new( tls_enabled: bool, require_client_mtls: bool, client_cert_ttl_hours: u32, ) -> Self

Convenience constructor for tests and setup code.

Trait Implementations

impl Clone for TlsProfile

fn clone(&self) -> TlsProfile

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsProfile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TlsProfile

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TlsProfile

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Message for TlsProfile

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl Serialize for TlsProfile

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.