Struct CertInjectorAcceptor 

pub struct CertInjectorAcceptor { /* private fields */ }

An acceptor that wraps RustlsAcceptor to inject the verified client certificate into request extensions.

After the TLS handshake completes, this acceptor extracts the end-entity peer certificate from the TlsStream and wraps the service with an AddExtension layer containing VerifiedTlsClientCert.

Example

use axum_server::tls_rustls::{RustlsAcceptor, RustlsConfig};
use lexe_api::tls_acceptor::CertInjectorAcceptor;

let rustls_config = RustlsConfig::from_config(tls_config);
let rustls_acceptor = RustlsAcceptor::new(rustls_config);
let acceptor = CertInjectorAcceptor::new(rustls_acceptor);

axum_server::from_tcp(listener)
    .acceptor(acceptor)
    .serve(make_service)
    .await

Implementations

impl CertInjectorAcceptor

pub fn new(inner: RustlsAcceptor) -> Self

Create a new CertInjectorAcceptor wrapping the given RustlsAcceptor.

Trait Implementations

impl<I, S> Accept<I, S> for CertInjectorAcceptor

where I: AsyncRead + AsyncWrite + Unpin + Send + 'static, S: Send + 'static,

type Stream = TlsStream<I>

IO stream produced by accept.

type Service = AddExtension<S, VerifiedTlsClientCert>

Service produced by accept.

type Future = Map<<RustlsAcceptor as Accept<I, S>>::Future, fn(Result<(TlsStream<I>, S), Error>) -> Result<(TlsStream<I>, AddExtension<S, VerifiedTlsClientCert>), Error>>

Future return value.

fn accept(&self, stream: I, service: S) -> Self::Future

Process io stream and service asynchronously.

impl Clone for CertInjectorAcceptor

fn clone(&self) -> CertInjectorAcceptor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertInjectorAcceptor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.