Struct TlsProfile 

pub struct TlsProfile {

    pub min_version: TlsVersion,
    pub max_version: TlsVersion,
    pub cipher_list: &'static str,
    pub curves: &'static [u16],
    pub grease_enabled: bool,
    pub permute_extensions: bool,
    pub enable_ech_grease: bool,
    pub alps_enabled: bool,
    pub alps_use_new_codepoint: bool,
    pub alps_extra_settings: &'static [(u16, u32)],
    pub compress_certificate: bool,
    pub session_ticket_enabled: bool,
    pub alpn_protocols: &'static [&'static [u8]],
    pub sigalgs: &'static [u16],
    pub verify_peer: bool,
}

Configuration for the TLS 1.2/1.3 handshake layer.

This structure defines the Layer 4 identity of the client. Small changes here (such as the order of cipher suites) will change the JA3/JA4 fingerprint and can lead to immediate detection.

Fields

min_version: TlsVersion

Minimum allowed TLS version (typically TLS 1.2).

max_version: TlsVersion

Maximum allowed TLS version (typically TLS 1.3).

cipher_list: &'static str

Colon-separated list of cipher suites in OpenSSL format.

Precision in the order of this list is critical as it directly impacts the JA3/JA4 fingerprint.

curves: &'static [u16]

Numeric IDs for supported elliptic curve groups.

grease_enabled: bool

Whether to enable TLS GREASE (RFC 8701) to simulate randomized extensions.

permute_extensions: bool

Whether to permute (shuffle) TLS extensions per connection.

enable_ech_grease: bool

Whether to send a dummy ECH (Encrypted Client Hello) extension for GREASE.

alps_enabled: bool

Whether to enable ALPS (Application-Layer Protocol Settings).

alps_use_new_codepoint: bool

Whether to use the draft-01 or final ALPS codepoint.

alps_extra_settings: &'static [(u16, u32)]

Additional H2 SETTINGS IDs to append in the ALPS payload.

Windows and Linux Chrome include an extra setting (ID 31386) in the ALPS handshake data that macOS omits. Each tuple is (id, value).

compress_certificate: bool

Whether to support RFC 8879 certificate compression (Brotli).

session_ticket_enabled: bool

Whether to enable stateless session tickets for fast reconnection.

alpn_protocols: &'static [&'static [u8]]

Ordered list of ALPN protocol identifiers.

sigalgs: &'static [u16]

Ordered list of signature algorithm IDs (used for JA4_r).

verify_peer: bool

Whether to verify the server’s certificate chain.

Real browsers always verify certificates. Disable only for testing or local proxy interception.

Trait Implementations

impl Clone for TlsProfile

fn clone(&self) -> TlsProfile

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsProfile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for TlsProfile

fn eq(&self, other: &TlsProfile) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for TlsProfile

impl Eq for TlsProfile

impl StructuralPartialEq for TlsProfile