Struct AdminTlsConfig 

pub struct AdminTlsConfig {
    pub server_cert: PathBuf,
    pub server_key: PathBuf,
    pub client_ca: PathBuf,
    pub allowed_clients: Vec<String>,
    pub port: u16,
}

TLS configuration for the admin API endpoint.

Example

use greentic_setup::admin::AdminTlsConfig;

let config = AdminTlsConfig {
    server_cert: "/etc/greentic/admin/server.crt".into(),
    server_key: "/etc/greentic/admin/server.key".into(),
    client_ca: "/etc/greentic/admin/ca.crt".into(),
    allowed_clients: vec!["CN=greentic-admin".to_string()],
    port: 8443,
};

Fields

server_cert: PathBuf

Path to the server TLS certificate (PEM).

server_key: PathBuf

Path to the server TLS private key (PEM).

client_ca: PathBuf

Path to the CA certificate for verifying client certificates (PEM).

allowed_clients: Vec<String>

Optional list of allowed client CN (Common Name) patterns.

If empty, any client with a certificate signed by the CA is allowed.

port: u16

Port to bind the admin API server on.

Implementations

impl AdminTlsConfig

pub fn validate(&self) -> Result<()>

Validate that all referenced certificate files exist.

pub fn is_client_allowed(&self, cn: &str) -> bool

Check whether a client Common Name is allowed by this config.

Returns true if allowed_clients is empty (any client allowed) or if the CN matches one of the patterns.

Trait Implementations

impl Clone for AdminTlsConfig

fn clone(&self) -> AdminTlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AdminTlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AdminTlsConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AdminTlsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AdminTlsConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.