Enum ClientAuthMode 

pub enum ClientAuthMode {
    Disabled,
    Optional,
    Required,
}

Whether the server requests and verifies a client certificate during the TLS handshake (RFC 5246 §7.4.6 — Kafka’s mTLS path).

Required rejects connections that don’t present a cert chaining to client_ca_path. Optional requests a cert but still accepts anonymous handshakes — the dispatch layer is responsible for surfacing the Anonymous outcome to gating logic. Disabled requests no client cert.

Variants

Disabled

No client certificate requested. The handshake completes without CertificateRequest.

Optional

Client certificate is requested but the handshake also accepts peers that don’t present one. The dispatch layer keeps such connections as ANONYMOUS.

Required

Client certificate is required. Handshake fails if the peer doesn’t present a cert chaining to client_ca_path.

Trait Implementations

impl Clone for ClientAuthMode

fn clone(&self) -> ClientAuthMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ClientAuthMode

impl Debug for ClientAuthMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ClientAuthMode

fn default() -> ClientAuthMode

Returns the “default value” for a type.

impl Eq for ClientAuthMode

impl PartialEq for ClientAuthMode

fn eq(&self, other: &ClientAuthMode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ClientAuthMode