toolu-orm-connection 0.1.2

Connection pooling and driver adapters (libsql, rusqlite, Postgres) for toolu-orm
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

//! TLS configuration for Postgres connections using rustls and native certs.

use std::sync::Arc;

use crate::error::DbError;

pub(crate) fn make_rustls_config() -> Result<rustls::ClientConfig, DbError> {
  let mut root_store = rustls::RootCertStore::empty();
  let loaded = rustls_native_certs::load_native_certs();
  for err in loaded.errors {
    tracing::debug!(%err, "native cert load warning");
  }
  for cert in loaded.certs {
    root_store
      .add(cert)
      .map_err(|e| DbError::Connection(format!("invalid TLS root certificate: {e}")))?;
  }
  if root_store.is_empty() {
    return Err(DbError::Connection(
      "TLS root store is empty after loading native certificates".to_owned(),
    ));
  }
  Ok(
    rustls::ClientConfig::builder()
      .with_root_certificates(Arc::new(root_store))
      .with_no_client_auth(),
  )
}