Struct ReloadableResolver 

pub struct ReloadableResolver { /* private fields */ }

Available on crate features compio-tls or http3 or tls only.

Certificate resolver whose key can be swapped at runtime; keep the Arc passed to TlsCert::resolver to reload. Each handshake costs one lock-free Arc clone.

Example

use std::sync::Arc;
use tako_rs_server::{ReloadableResolver, TlsCert};

let resolver = Arc::new(ReloadableResolver::from_pem("cert.pem", "key.pem")?);
let cert = TlsCert::resolver(resolver.clone());
let server = tako_rs_server::Server::builder().tls(cert).build();
// Later, after a cert rotation:
resolver.reload_from_pem("cert.pem", "key.pem")?;

Implementations

impl ReloadableResolver

pub fn from_pem( cert_path: &str, key_path: &str, ) -> Result<ReloadableResolver, Error>

Available on crate feature tls only.

Loads a certificate chain and key from PEM files.

pub fn reload_from_pem( &self, cert_path: &str, key_path: &str, ) -> Result<(), Error>

Available on crate feature tls only.

Atomically swaps in a key loaded from PEM files; established sessions are unaffected and new handshakes use it.

pub fn reload(&self, ck: CertifiedKey)

Available on crate feature tls only.

Atomically swaps in a prebuilt rustls::sign::CertifiedKey.

Trait Implementations

impl Debug for ReloadableResolver

Available on crate feature tls only.

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl ResolvesServerCert for ReloadableResolver

Available on crate feature tls only.

fn resolve(&self, _client_hello: ClientHello<'_>) -> Option<Arc<CertifiedKey>>

Choose a certificate chain and matching key given simplified ClientHello information.

fn only_raw_public_keys(&self) -> bool

Return true when the server only supports raw public keys.