Struct Tls 

pub struct Tls { /* private fields */ }

Available on crate feature tls only.

A loaded TLS configuration: a certificate chain, a private key, and either a client-certificate verifier or the absence of one.

Built by Tls::load during Server::start, so a key that cannot be read, a key with permissions that make it not a secret, and a certificate that does not match it are all startup refusals rather than the first connection’s problem.

Implementations

impl Tls

pub fn load(config: &TlsConfig) -> Result<Self, TlsError>

Reads the certificate, the key and — if one is configured — the client CA, and builds the rustls configuration from them.

Errors

A TlsError naming the file and the fix. None of them carries a byte of the key: see TlsError.

pub fn server_config(&self) -> Arc<ServerConfig>

The rustls configuration, for the acceptor.

pub fn is_mutual(&self) -> bool

Whether a client certificate is required.

True exactly when client_ca was configured: there is no third state in which a certificate is asked for and not required.

Trait Implementations

impl Debug for Tls

Hand-written, and the reason is the same one AGENTS.md records for tokens: this type holds a private key, and a derive prints every field. Two booleans is everything a debugger needs from it.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.