Crate caesar [−] [src]

A drop-in replacement for the Rust standard library TCP listener with TLSv1.2 enabled.

Note: This library hasn't been tested.

Introduction

This library abstracts over a regular TCP listener from the Rust standard library, and provides a drop-in* interface replacement that layers TLSv1.2 with a set of strong cipher suites on top of the connection.

It uses the OpenSSL library Rust bindings by Steven Fackler for the underlying TLS functionality. If you don't trust OpenSSL (I don't), you can compile this crate against LibreSSL (instructions provided below).

* It's only necessary to prepend Tls to the regular types (e.g. TlsTcpListener), and write error handling code for the new error types.

Usage

Caesar provides a CaesarError enum type, with a variant for I/O errors and another one for SSL errors.

extern crate caesar;

use caesar::{TlsTcpListener, TlsTcpStream};
use std::thread;

let key_path = "path_to_certs/key.pem";
let cert_path = "path_to_certs/cert.pem";

let listener = TlsTcpListener::bind("127.0.0.1:8080", key_path, cert_path).unwrap()

fn handle_client(stream: TlsTcpStream) {
    // ...
}

// accept connections and process them, spawning a new thread for each one
for stream in listener.incoming() {
    match stream {
        Ok(stream) => {
            thread::spawn(move || {
                // connection succeeded
                handle_client(stream)
            });
        }
        Err(e) => { /* connection failed */ }
    }
}

close the socket server
drop(listener);

Structs

Incoming	A re-implementation of the `std::net::Incoming` iterator type.
TlsTcpListener	Abstracts over a `TcpListener`, and layers TLSv1.2 on top.
TlsTcpStream	Handles encrypted `TcpStream`s for you, and provides a simple read/write interface.

Enums

CaesarError

Type Definitions

Result