sqlx-exasol-impl 0.9.2-alpha

Driver implementation for sqlx-exasol. Not meant to be used directly.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

use sqlx_core::net::{
    tls::{self, TlsConfig},
    Socket, WithSocket,
};

use super::socket::{ExaSocket, WithExaSocket};
use crate::{options::ExaTlsOptionsRef, ExaSslMode, SqlxResult};

/// Implementor of [`WithSocket`] that encapsulates the TLS/non-TLS decision logic and returns,
/// alongside the socket, whether TLS is being used.
pub struct WithMaybeTlsExaSocket<'a> {
    wrapper: WithExaSocket,
    host: &'a str,
    tls_opts: ExaTlsOptionsRef<'a>,
}

impl<'a> WithMaybeTlsExaSocket<'a> {
    pub fn new(wrapper: WithExaSocket, host: &'a str, tls_opts: ExaTlsOptionsRef<'a>) -> Self {
        Self {
            wrapper,
            host,
            tls_opts,
        }
    }
}

impl WithSocket for WithMaybeTlsExaSocket<'_> {
    /// The output will be the socket and whether TLS is used.
    type Output = SqlxResult<(ExaSocket, bool)>;

    async fn with_socket<S: Socket>(self, socket: S) -> Self::Output {
        let WithMaybeTlsExaSocket {
            wrapper,
            host,
            tls_opts,
        } = self;

        match tls_opts.ssl_mode {
            ExaSslMode::Disabled => {
                return Ok((wrapper.with_socket(socket).await, false));
            }

            ExaSslMode::Preferred => {
                if !tls::available() {
                    tracing::debug!("not performing TLS upgrade: TLS support not compiled in");
                    return Ok((wrapper.with_socket(socket).await, false));
                }
            }

            ExaSslMode::Required | ExaSslMode::VerifyIdentity | ExaSslMode::VerifyCa => {
                tls::error_if_unavailable()?;
            }
        }

        let accept_invalid_certs = !matches!(
            tls_opts.ssl_mode,
            ExaSslMode::VerifyCa | ExaSslMode::VerifyIdentity
        );

        let tls_config = TlsConfig {
            accept_invalid_certs,
            accept_invalid_hostnames: !matches!(tls_opts.ssl_mode, ExaSslMode::VerifyIdentity),
            hostname: host,
            root_cert_path: tls_opts.ssl_ca,
            client_cert_path: tls_opts.ssl_client_cert,
            client_key_path: tls_opts.ssl_client_key,
        };

        tls::handshake(socket, tls_config, wrapper)
            .await
            .map(|s| (s, true))
    }
}