Struct TlsSetup 

pub struct TlsSetup { /* private fields */ }

Database connection TLS settings, plus the server-side [tls] config retained only so the boot path can detect (and refuse) an enabled server-TLS configuration.

Implementations

impl TlsSetup

pub const fn new( tls_config: Option<TlsServerConfig>, db_tls_config: Option<DatabaseTlsConfig>, ) -> Self

Create new TLS setup from server configuration.

pub const fn db_config(&self) -> &Option<DatabaseTlsConfig>

Get the database TLS configuration.

pub fn is_tls_enabled(&self) -> bool

Whether server-side [tls] is enabled in the configuration.

Server-side TLS termination is unsupported, so the boot path uses this to refuse to start rather than serve plaintext under an enabled [tls] config (M-tls-enforce).

pub fn postgres_ssl_mode(&self) -> &str

Get PostgreSQL SSL mode for database connections.

pub fn redis_ssl_enabled(&self) -> bool

Check if Redis TLS is enabled.

pub fn clickhouse_https_enabled(&self) -> bool

Check if ClickHouse HTTPS is enabled.

pub fn elasticsearch_https_enabled(&self) -> bool

Check if Elasticsearch HTTPS is enabled.

pub fn verify_certificates(&self) -> bool

Check if certificate verification is enabled for databases.

pub fn ca_bundle_path(&self) -> Option<&Path>

Get the CA bundle path for verifying database certificates.

pub fn apply_postgres_tls(&self, db_url: &str) -> String

Get database URL with TLS applied (for PostgreSQL).

pub fn apply_redis_tls(&self, redis_url: &str) -> String

Get Redis URL with TLS applied.

pub fn apply_clickhouse_tls(&self, ch_url: &str) -> String

Get ClickHouse URL with TLS applied.

pub fn apply_elasticsearch_tls(&self, es_url: &str) -> String

Get Elasticsearch URL with TLS applied.