Struct PostgresTlsConfig 

pub struct PostgresTlsConfig {
    pub mode: Option<PostgresSslMode>,
    pub ca_bundle_path: Option<PathBuf>,
}

Transport security settings for a PostgreSQL connection pool.

Fields

mode: Option<PostgresSslMode>

How much transport security to demand, or None to let the connection URL decide.

None is not the same as Some(Prefer). An unset mode leaves the driver to read ?sslmode= out of the URL; forcing Prefer in its place would override an operator’s explicit ?sslmode=require and silently downgrade it to opportunistic encryption. The URL form was the one surface that already failed loudly here, so a config default must not be allowed to quietly outrank it.

ca_bundle_path: Option<PathBuf>

PEM bundle of certificate authorities to trust when verifying the server.

When set, these roots replace the platform trust store rather than adding to it — a managed-database CA (RDS, Cloud SQL) is normally not in the system store, and an operator who names a CA file means “this CA”, not “this CA or any of the several hundred the OS ships”.

Only consulted by PostgresSslMode::VerifyFull; the weaker modes verify nothing, so supplying a bundle alongside them is rejected by validate rather than silently ignored.

Implementations

impl PostgresTlsConfig

pub const fn new(mode: PostgresSslMode) -> PostgresTlsConfig

Settings that explicitly demand mode, using the platform trust store.

pub fn effective_mode(&self) -> PostgresSslMode

The mode the connector should enforce, treating “unset” as libpq’s default.

Used to decide verification, which must be settled before the handshake. An unset mode cannot be verify-full, because the only thing that could have set it is the URL and ?sslmode= tops out at require.

pub fn validate(&self) -> Result<(), FraiseQLError>

Reject combinations whose parts contradict each other.

Errors

Returns FraiseQLError::Configuration when a CA bundle is supplied for a mode that never verifies a certificate. Accepting it would leave the operator believing the named CA was pinned while the connection authenticated nothing — the shape of defect this module exists to remove.

pub fn warn_if_unverified(&self)

Emit a startup warning when the configured mode encrypts without authenticating the peer.

Scoped to require, which is the mode an operator chooses in order to get transport security and which therefore carries the false confidence: “encrypted” and “encrypted to the right server” are the two things most easily conflated, so the boot log separates them. prefer is the default and promises nothing, so warning on it would be noise on every boot.

pub fn connector(&self) -> Result<PostgresConnector, FraiseQLError>

Build the connector deadpool should create connections with.

Errors

Returns FraiseQLError::Configuration if the settings contradict themselves, if the CA bundle cannot be read or contains no usable certificate, or if no trust anchors are available for a verifying mode.

Trait Implementations

impl Clone for PostgresTlsConfig

fn clone(&self) -> PostgresTlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PostgresTlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for PostgresTlsConfig

fn default() -> PostgresTlsConfig

Returns the “default value” for a type.

impl Eq for PostgresTlsConfig

impl PartialEq for PostgresTlsConfig

fn eq(&self, other: &PostgresTlsConfig) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PostgresTlsConfig