Struct TlsSetup 

pub struct TlsSetup { /* private fields */ }

TLS server setup and enforcement.

Implementations

impl TlsSetup

pub fn new( tls_config: Option<TlsServerConfig>, db_tls_config: Option<DatabaseTlsConfig>, ) -> Result<Self>

Create new TLS setup from server configuration.

Errors

Returns error if:

• TLS is enabled but certificate/key files cannot be read
• TLS configuration is invalid

pub const fn enforcer(&self) -> &TlsEnforcer

Get the TLS enforcer.

pub const fn config(&self) -> &Option<TlsServerConfig>

Get the server TLS configuration.

pub const fn db_config(&self) -> &Option<DatabaseTlsConfig>

Get the database TLS configuration.

pub fn is_tls_enabled(&self) -> bool

Check if TLS is enabled for server.

pub fn is_mtls_required(&self) -> bool

Check if mTLS is required.

pub fn cert_path(&self) -> Option<&Path>

Get the certificate path.

pub fn key_path(&self) -> Option<&Path>

Get the key path.

pub fn client_ca_path(&self) -> Option<&Path>

Get the client CA path (for mTLS).

pub fn postgres_ssl_mode(&self) -> &str

Get PostgreSQL SSL mode for database connections.

pub fn redis_ssl_enabled(&self) -> bool

Check if Redis TLS is enabled.

pub fn clickhouse_https_enabled(&self) -> bool

Check if ClickHouse HTTPS is enabled.

pub fn elasticsearch_https_enabled(&self) -> bool

Check if Elasticsearch HTTPS is enabled.

pub fn verify_certificates(&self) -> bool

Check if certificate verification is enabled for databases.

pub fn ca_bundle_path(&self) -> Option<&Path>

Get the CA bundle path for verifying database certificates.

pub fn apply_postgres_tls(&self, db_url: &str) -> String

Get database URL with TLS applied (for PostgreSQL).

pub fn apply_redis_tls(&self, redis_url: &str) -> String

Get Redis URL with TLS applied.

pub fn apply_clickhouse_tls(&self, ch_url: &str) -> String

Get ClickHouse URL with TLS applied.

pub fn apply_elasticsearch_tls(&self, es_url: &str) -> String

Get Elasticsearch URL with TLS applied.

pub fn create_rustls_config(&self) -> Result<Arc<ServerConfig>>

Create a rustls ServerConfig for TLS.

Errors

Returns error if:

• Certificate or key files cannot be read
• Certificate or key format is invalid