Struct SharedTlsProfiles 

pub struct SharedTlsProfiles { /* private fields */ }

Reloadable wrapper around TlsProfileMap.

Holds an Arc<parking_lot::RwLock<TlsProfileMap>> so the inbound listener (via Self::build_sni_acceptor) and every outbound peer supervisor can pick up cert / key / CA changes without rebinding sockets or rebuilding their tokio_rustls::TlsAcceptor. The resolver returned by Self::build_sni_acceptor reads the inner map on every handshake.

Clone is Arc-cheap.

Examples

use std::collections::BTreeMap;
use dynomite::net::tls::{SharedTlsProfiles, TlsProfileMap};
let map = TlsProfileMap::build(None, BTreeMap::new()).unwrap();
let shared = SharedTlsProfiles::from_map(map);
assert!(shared.is_empty());

Implementations

impl SharedTlsProfiles

pub fn from_map(map: TlsProfileMap) -> Self

Wrap an existing TlsProfileMap in a shared cell.

pub fn replace(&self, map: TlsProfileMap)

Atomically replace the inner profile map.

Subsequent handshakes (and outbound dials that consult Self::client_config_for_dc) observe the new material; already-negotiated TLS sessions are not affected.

pub fn is_empty(&self) -> bool

True when the wrapped map is empty (peer plane plaintext).

pub fn client_config_for_dc(&self, dc: &str) -> Option<Arc<ClientConfig>>

Per-DC client config, with the legacy default as fallback. Reads the inner map at call time.

pub fn requires_client_auth(&self) -> bool

True when at least one wrapped profile pins a CA bundle.

pub fn dc_names(&self) -> Vec<String>

Names of the DCs with explicit per-DC entries (sorted).

pub fn build_sni_acceptor(&self) -> Result<Option<TlsAcceptor>, TlsError>

Build a SIGHUP-aware tokio_rustls::TlsAcceptor.

The acceptor’s underlying ServerConfig holds a resolver that re-reads the wrapped Arc<parking_lot::RwLock<TlsProfileMap>> on every handshake, so Self::replace takes effect on the next inbound connection without rebinding the listener.

Returns None when the inner map is empty (caller stays plaintext).

Errors

Returns TlsError::Rustls when rustls rejects the assembled root store or the verifier (e.g. a CA cert the loader missed).

Trait Implementations

impl Clone for SharedTlsProfiles

fn clone(&self) -> SharedTlsProfiles

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SharedTlsProfiles

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SharedTlsProfiles

fn default() -> SharedTlsProfiles

Returns the “default value” for a type.