Struct UpstreamTls 

pub struct UpstreamTls { /* private fields */ }

Trust settings for one upstream’s TLS backends: the certificates in a CA file instead of the WebPKI roots — for internal services behind a private CA or a self-signed certificate (nginx’s proxy_ssl_trusted_certificate) — and/or a client certificate rws presents to backends that require one (proxy_ssl_certificate, since 18.3.0). Connections are pooled per setting, so two upstreams at the same address with different trust never share one.

Implementations

impl UpstreamTls

pub fn from_ca_file(path: &str) -> Result<UpstreamTls, String>

Load the PEM certificates in path as the only trusted roots.

pub fn new( ca_file: Option<&str>, client_cert: Option<(&str, &str)>, ) -> Result<UpstreamTls, String>

Trust the PEM certificates in ca_file (the WebPKI roots when None) and, with client_cert = (certificate chain PEM, private key PEM), present that certificate to backends that ask for one.