Struct salvo_core::conn::native_tls::Identity

pub struct Identity(/* private fields */);

Available on crate feature native-tls only.

A cryptographic identity.

An identity is an X509 certificate along with its corresponding private key and chain of certificates to a trusted root.

Implementations

impl Identity

pub fn from_pkcs12(der: &[u8], password: &str) -> Result<Identity, Error>

Parses a DER-formatted PKCS #12 archive, using the specified password to decrypt the key.

The archive should contain a leaf certificate and its private key, as well any intermediate certificates that should be sent to clients to allow them to build a chain to a trusted root. The chain certificates should be in order from the leaf certificate towards the root.

PKCS #12 archives typically have the file extension .p12 or .pfx, and can be created with the OpenSSL pkcs12 tool:

openssl pkcs12 -export -out identity.pfx -inkey key.pem -in cert.pem -certfile chain_certs.pem

pub fn from_pkcs8(pem: &[u8], key: &[u8]) -> Result<Identity, Error>

Parses a chain of PEM encoded X509 certificates, with the leaf certificate first. key is a PEM encoded PKCS #8 formatted private key for the leaf certificate.

The certificate chain should contain any intermediate cerficates that should be sent to clients to allow them to build a chain to a trusted root.

A certificate chain here means a series of PEM encoded certificates concatenated together.

Trait Implementations

impl Clone for Identity

fn clone(&self) -> Identity

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<T> IntoConfigStream<Identity> for T

where T: Stream<Item = Identity> + Send + 'static,

type Stream = T

TLS config stream.

fn into_stream(self) -> Self

Consume itself and return tls config stream.

impl TryInto<Identity> for NativeTlsConfig

type Error = Error

The type returned in the event of a conversion error.

fn try_into(self) -> IoResult<Identity>

Performs the conversion.