nanopool 1.2.0

A tiny database connection pooling library for PostgreSQL
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111

use std::future::Future;
use std::pin::Pin;

use tokio::io::BufReader;
use tokio_native_tls::{
    native_tls::{Error as TlsError, TlsConnector as NativeTlsConnector},
    TlsConnector as TokioTlsConnector,
};
use tokio_postgres::{
    tls::{ChannelBinding, MakeTlsConnect, TlsConnect, TlsStream},
    Socket,
};

use crate::errors::PoolError;
use crate::tls::{stream::GenericTlsStream, TlsMode};

/// A native and buffered TLS stream
pub type NativeTlsStream = GenericTlsStream<tokio_native_tls::TlsStream<BufReader<Socket>>>;

/// Implements channel binding for native TLS streams
impl TlsStream for NativeTlsStream {
    fn channel_binding(&self) -> ChannelBinding {
        match self.inner().get_ref().tls_server_end_point().ok().flatten() {
            Some(buf) => ChannelBinding::tls_server_end_point(buf),
            None => ChannelBinding::none(),
        }
    }
}

/// A generic wrapper for native TLS connections
#[derive(Clone)]
pub struct TlsConnector {
    inner: TokioTlsConnector,
}

/// Returns a native TLS connector instance
impl TlsConnector {
    pub fn new(connector: NativeTlsConnector) -> Self {
        Self {
            inner: TokioTlsConnector::from(connector),
        }
    }

    pub fn inner(&self) -> &TokioTlsConnector {
        &self.inner
    }
}

/// Implements the `MakeTlsConnect` trait for native TLS connections
impl MakeTlsConnect<Socket> for TlsConnector {
    type Stream = NativeTlsStream;
    type TlsConnect = NativeTlsConnect;
    type Error = TlsError;

    fn make_tls_connect(&mut self, domain: &str) -> Result<Self::TlsConnect, Self::Error> {
        Ok(NativeTlsConnect {
            connector: self.inner.clone(),
            domain: domain.to_string(),
        })
    }
}

/// Native TLS connection implementation
pub struct NativeTlsConnect {
    connector: TokioTlsConnector,
    domain: String,
}

/// Implements the `TlsConnect` trait for native TLS connections
impl TlsConnect<Socket> for NativeTlsConnect {
    type Stream = NativeTlsStream;
    type Error = TlsError;
    type Future = Pin<Box<dyn Future<Output = Result<Self::Stream, Self::Error>> + Send>>;

    fn connect(self, stream: Socket) -> Self::Future {
        Box::pin(async move {
            let buffered = BufReader::new(stream);
            let tls_stream = self.connector.connect(&self.domain, buffered).await?;
            Ok(NativeTlsStream::new(tls_stream))
        })
    }
}

/// Configures TLS connection based on the selected TLS mode
pub fn configure(mode: TlsMode) -> Result<TlsConnector, PoolError> {
    let mut builder = NativeTlsConnector::builder();

    match mode {
        TlsMode::Prefer | TlsMode::Require => {
            builder.danger_accept_invalid_certs(true);
            builder.danger_accept_invalid_hostnames(true);
        }
        TlsMode::VerifyCa => {
            builder.danger_accept_invalid_hostnames(true);
        }
        TlsMode::VerifyIdentity => {}
    }

    let connector = builder.build()?;
    Ok(TlsConnector::new(connector))
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn test_configure_native_tls() {
        assert!(configure(TlsMode::Prefer).is_ok());
    }
}