Struct ClientTls 

#[non_exhaustive]
pub struct ClientTls {
    pub root: Vec<PathBuf>,
    pub cert: Option<PathBuf>,
    pub key: Option<PathBuf>,
    pub disable_verify: Option<bool>,
}

TLS configuration for the client.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

root: Vec<PathBuf>

Use the TLS root at this path, encoded as PEM.

This value can be provided multiple times for multiple roots. If this is empty, system roots will be used instead

cert: Option<PathBuf>

PEM file containing the client certificate chain for mTLS.

Only certificates are extracted; any private keys in the file are ignored. Must be paired with --client-tls-key.

key: Option<PathBuf>

PEM file containing the private key for mTLS.

Only the private key is extracted; any certificates in the file are ignored. Must be paired with --client-tls-cert.

disable_verify: Option<bool>

Danger: Disable TLS certificate verification.

Fine for local development and between relays, but should be used in caution in production.

Implementations

impl ClientTls

pub fn build(&self) -> Result<ClientConfig>

Build a rustls::ClientConfig from this configuration.

Loads the configured roots (or the platform’s native roots if none), optionally attaches a client identity for mTLS, and disables server certificate verification when disable_verify is set.

pub fn cert_dns_name(&self) -> Result<Option<String>>

Parse the configured certificate PEM (if any) and return the first DNS SAN on its leaf certificate.

Useful for sanity-checking that a caller’s own cluster node name matches the certificate they will present. Returns Ok(None) if no certificate is configured.

Trait Implementations

impl Args for ClientTls

fn group_id() -> Option<Id>

Report the ArgGroup::id for this set of arguments

fn augment_args<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_args_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

impl Clone for ClientTls

fn clone(&self) -> ClientTls

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClientTls

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ClientTls

fn default() -> ClientTls

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ClientTls

where ClientTls: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl FromArgMatches for ClientTls

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Serialize for ClientTls

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.