tokio-postgres-rustls 0.14.0

Rustls integration for tokio-postgres
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

use rustls::pki_types::{CertificateDer, PrivateKeyDer, pem::PemObject};

pub(crate) struct CertStore<'a> {
    pub roots: rustls::RootCertStore,
    pub client_certs: Vec<CertificateDer<'a>>,
    pub client_key: PrivateKeyDer<'a>,
}

impl CertStore<'_> {
    pub(crate) fn roots() -> rustls::RootCertStore {
        let mut roots = rustls::RootCertStore::empty();
        roots
            .add(CertificateDer::from_pem_file("tests/support/ca.crt").expect("load ca cert"))
            .expect("add root ca");
        roots
    }

    pub(crate) fn sha256<'a>() -> CertStore<'a> {
        let client_certs = vec![
            CertificateDer::from_pem_file("tests/support/client.crt").expect("load client cert"),
        ];
        let client_key =
            PrivateKeyDer::from_pem_file("tests/support/client.key").expect("load client key");

        CertStore {
            roots: CertStore::roots(),
            client_certs,
            client_key,
        }
    }

    pub(crate) fn sha384<'a>() -> CertStore<'a> {
        let client_certs = vec![
            CertificateDer::from_pem_file("tests/support/client_sha384.crt")
                .expect("load client cert"),
        ];
        let client_key =
            PrivateKeyDer::from_pem_file("tests/support/client.key").expect("load client key");

        CertStore {
            roots: CertStore::roots(),
            client_certs,
            client_key,
        }
    }

    pub(crate) fn sha512<'a>() -> CertStore<'a> {
        let client_certs = vec![
            CertificateDer::from_pem_file("tests/support/client_sha512.crt")
                .expect("load client cert"),
        ];
        let client_key =
            PrivateKeyDer::from_pem_file("tests/support/client.key").expect("load client key");

        CertStore {
            roots: CertStore::roots(),
            client_certs,
            client_key,
        }
    }
}