Struct ClientTls 

#[non_exhaustive]
pub struct ClientTls {
    pub root: Vec<PathBuf>,
    pub identity: Option<PathBuf>,
    pub disable_verify: Option<bool>,
}

TLS configuration for the client.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

root: Vec<PathBuf>

Use the TLS root at this path, encoded as PEM.

This value can be provided multiple times for multiple roots. If this is empty, system roots will be used instead

identity: Option<PathBuf>

Present a client certificate during the TLS handshake (mTLS).

The path must point at a single PEM file containing both the certificate chain and the matching private key (in any order). This is the same bundle layout used by curl’s --cert and many PKI tools.

disable_verify: Option<bool>

Danger: Disable TLS certificate verification.

Fine for local development and between relays, but should be used in caution in production.

Implementations

impl ClientTls

pub fn build(&self) -> Result<ClientConfig>

Build a rustls::ClientConfig from this configuration.

Loads the configured roots (or the platform’s native roots if none), optionally attaches a client identity for mTLS, and disables server certificate verification when disable_verify is set.

pub fn identity_dns_name(&self) -> Result<Option<String>>

Parse the configured identity PEM (if any) and return the first DNS SAN on its leaf certificate.

Useful for sanity-checking that a caller’s own cluster node name matches the identity they will present. Returns Ok(None) if no identity is configured.

Trait Implementations

impl Args for ClientTls

fn group_id() -> Option<Id>

Report the ArgGroup::id for this set of arguments

fn augment_args<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_args_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

impl Clone for ClientTls

fn clone(&self) -> ClientTls

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClientTls

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ClientTls

fn default() -> ClientTls

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ClientTls

where ClientTls: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl FromArgMatches for ClientTls

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Serialize for ClientTls

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.