Struct TlsConfig 

pub struct TlsConfig {
    pub cert_path: Option<PathBuf>,
    pub key_path: Option<PathBuf>,
    pub ca_path: Option<PathBuf>,
    pub mtls_enabled: bool,
    pub alpn_protocols: Vec<Vec<u8>>,
    pub skip_verification: bool,
    pub server_name: Option<String>,
}

Available on crate feature quic only.

TLS/certificate configuration.

Fields

cert_path: Option<PathBuf>

Path to the server certificate file (PEM format).

key_path: Option<PathBuf>

Path to the server private key file (PEM format).

ca_path: Option<PathBuf>

Path to the CA certificate for peer verification.

mtls_enabled: bool

Enable mutual TLS (client certificate verification).

alpn_protocols: Vec<Vec<u8>>

ALPN protocols to advertise.

Defaults to ["plumtree/1"].

skip_verification: bool

INSECURE: Skip server certificate verification.

Only use for development/testing. Vulnerable to MITM attacks.

server_name: Option<String>

Server name for TLS SNI (Server Name Indication).

This is used during TLS handshake for:

• SNI extension (allows server to select correct certificate)
• Certificate hostname verification (unless skip_verification is true)

For self-signed certificates, this should match the CN or SAN in the cert. Common values: "localhost" for development, hostname/domain for production.

Default: "localhost" (suitable for self-signed certs).

Implementations

impl TlsConfig

pub fn new() -> Self

Create a new TLS configuration.

pub fn with_cert_path(self, path: impl Into<PathBuf>) -> Self

Builder method to set certificate path.

pub fn with_key_path(self, path: impl Into<PathBuf>) -> Self

Builder method to set key path.

pub fn with_ca_path(self, path: impl Into<PathBuf>) -> Self

Builder method to set CA path.

pub fn with_mtls(self, enabled: bool) -> Self

Builder method to enable mTLS.

pub fn with_alpn_protocols(self, protocols: Vec<Vec<u8>>) -> Self

Builder method to set ALPN protocols.

pub fn with_skip_verification(self, skip: bool) -> Self

Builder method to skip verification (INSECURE).

pub fn with_server_name(self, name: impl Into<String>) -> Self

Builder method to set server name for SNI.

pub fn has_custom_certs(&self) -> bool

Check if custom certificates are configured.

pub fn server_name_or_default(&self) -> &str

Get server name for TLS, defaulting to “localhost”.

pub fn alpn_protocols_or_default(&self) -> Vec<Vec<u8>>

Get the ALPN protocols, using defaults if not specified.

Trait Implementations

impl Clone for TlsConfig

fn clone(&self) -> TlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TlsConfig

fn default() -> TlsConfig

Returns the “default value” for a type.