Struct ConfTlsProfile 

pub struct ConfTlsProfile {
    pub cert: Option<PathBuf>,
    pub key: Option<PathBuf>,
    pub ca: Option<PathBuf>,
}

One per-DC TLS profile inside ConfPool::peer_tls_profiles.

Each profile names a PEM cert / private-key pair and an optional CA bundle. The map’s key is the datacenter name (matching the value an operator sets in dyn_seeds: for peers in that DC); when a peer’s DC has no entry, the connection falls back to the legacy peer_tls_* fields (treated as the implicit “default” profile). When neither a per-DC entry nor the default fields are set, the connection is plaintext.

Examples

use std::path::PathBuf;
use dynomite::conf::ConfTlsProfile;
let p = ConfTlsProfile {
    cert: Some(PathBuf::from("/etc/dynomite/dc1.pem")),
    key: Some(PathBuf::from("/etc/dynomite/dc1.key")),
    ca: Some(PathBuf::from("/etc/dynomite/dc1-ca.pem")),
};
assert!(p.validate("dc1").is_ok());

Fields

cert: Option<PathBuf>

PEM certificate path. Must be set together with Self::key.

key: Option<PathBuf>

PEM private-key path matching Self::cert.

ca: Option<PathBuf>

Optional PEM CA bundle. When set, peer-plane connections using this profile pin the bundle as their trust anchor (and the listener requires inbound peers to present a certificate signed by a CA in the bundle for mTLS). When unset, the listener does not request a client certificate and the outbound side falls back to the bundled webpki_roots Mozilla anchors.

Implementations

impl ConfTlsProfile

pub fn validate(&self, dc: &str) -> Result<(), ConfError>

Validate that the profile is internally consistent.

cert and key must both be set or both be unset; a ca requires the cert / key pair. The dc argument is the map key the profile lives under and is included in any error message so an operator can identify the offending entry.

Errors

Returns ConfError::BadServer when the cert / key pair is mismatched, or when ca is set without the cert / key pair.

Examples

use std::path::PathBuf;
use dynomite::conf::ConfTlsProfile;
let p = ConfTlsProfile {
    cert: Some(PathBuf::from("/etc/x.pem")),
    key: None,
    ca: None,
};
assert!(p.validate("dc1").is_err());

Trait Implementations

impl Clone for ConfTlsProfile

fn clone(&self) -> ConfTlsProfile

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ConfTlsProfile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ConfTlsProfile

fn default() -> ConfTlsProfile

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ConfTlsProfile

where ConfTlsProfile: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ConfTlsProfile

fn eq(&self, other: &ConfTlsProfile) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ConfTlsProfile

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for ConfTlsProfile

impl StructuralPartialEq for ConfTlsProfile