Struct OnDemandConfig 

pub struct OnDemandConfig {
    pub decision_func: Option<DecisionFn>,
    pub host_allowlist: Option<HashSet<String>>,
    pub rate_limit: Option<Arc<RingBufferRateLimiter>>,
    pub managers: Vec<Arc<dyn Manager>>,
    /* private fields */
}

On-demand TLS settings.

Fields

decision_func: Option<DecisionFn>

Decides whether a certificate may be obtained for a name; an Err denies. Takes precedence over the allowlist.

host_allowlist: Option<HashSet<String>>

Explicit hostnames permitted for on-demand issuance. Names are normalized to lowercase before comparison. When neither this field nor Self::decision_func is configured, issuance is denied.

rate_limit: Option<Arc<RingBufferRateLimiter>>

Optional sliding-window limiter applied immediately before a new on-demand certificate is obtained.

managers: Vec<Arc<dyn Manager>>

External certificate sources consulted at handshake time .

Implementations

impl OnDemandConfig

pub fn with_decision_func(self, decision: DecisionFn) -> Self

Configure with a decision function.

pub fn with_sync_decision<F>(self, decision: F) -> Self

where F: Fn(&str) -> bool + Send + Sync + 'static,

Configure a synchronous, fail-closed admission predicate.

The predicate only decides whether the requested name may enter the existing on-demand pipeline. A false result is mapped to CertificateError::NotAllowed; certificate issuance, rate limiting, per-name single-flight coordination, the obtain timeout, and retry policy remain owned by Config. This is the safe synchronous counterpart to Self::with_decision_func and is convenient for allowlist lookups that do not perform I/O.

pub fn with_sync_decision_func<F>(self, decision: F) -> Self

where F: Fn(&str) -> bool + Send + Sync + 'static,

Alias for Self::with_sync_decision.

This is an admission predicate, not an obtain callback: returning false denies the request and never bypasses the normal on-demand issuance safeguards.

pub fn with_host_allowlist<I, S>(self, names: I) -> Self

where I: IntoIterator<Item = S>, S: AsRef<str>,

Configure a case-insensitive host allowlist for on-demand issuance.

pub fn with_rate_limit(self, rate_limit: Arc<RingBufferRateLimiter>) -> Self

Configure a sliding-window limiter for on-demand issuance.

pub fn with_managers(self, managers: Vec<Arc<dyn Manager>>) -> Self

Configure external certificate managers.

Trait Implementations

impl Clone for OnDemandConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OnDemandConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OnDemandConfig

fn default() -> Self

Returns the “default value” for a type.

impl From<Arc<OnDemandConfig>> for OnDemandConfig

Accept the shared configuration value used by the builder.

ConfigOptions owns its on-demand settings, so the shared value is cloned at the configuration boundary. The callbacks and managers inside the value remain reference-counted and are not duplicated.

fn from(config: Arc<OnDemandConfig>) -> Self

Converts to this type from the input type.