Struct TlsConfigBuilder 

pub struct TlsConfigBuilder { /* private fields */ }

Builder for TlsConfig.

Implementations

impl TlsConfigBuilder

pub fn add_root_cert( self, der: impl Into<CertificateDer<'static>>, ) -> TlsConfigBuilder

Add a custom root certificate (DER-encoded).

Useful for internal CAs or self-signed certificates.

pub fn skip_system_certs(self) -> TlsConfigBuilder

Skip loading system root certificates.

Use when providing all root certificates manually.

pub fn danger_no_verify(self) -> TlsConfigBuilder

Disable certificate verification entirely.

Safety

This disables all server identity checks. Use only for testing against local servers with self-signed certificates.

pub fn tls13_only(self) -> TlsConfigBuilder

Restrict to TLS 1.3 only.

TLS 1.3 has a simpler handshake (1-RTT vs 2-RTT) and mandatory forward secrecy. Disable TLS 1.2 if all endpoints support 1.3.

pub fn build(self) -> Result<TlsConfig, TlsError>

Build the configuration.