Module tls 

Server-side TLS (HTTPS) for the Streamable HTTP transport.

TLS is opt-in: the HTTP transport only serves over TLS when both a --tls-cert and --tls-key are configured, otherwise it stays plaintext (the default). Backed by rustls with the ring crypto provider — no OpenSSL/aws-lc.

Functions

ensure_crypto_provider

Install the rustls ring crypto provider as the process default.

server_config

Build an axum-server rustls config from a PEM certificate chain and private key. Installs the ring provider on first call. The returned io::Error maps onto MCSError::IoError.