Enum TlsIdentity 

#[non_exhaustive]
pub enum TlsIdentity {
    SelfSigned {
        subject_alt_names: Vec<String>,
    },
    PemFiles {
        cert: PathBuf,
        key: PathBuf,
    },
    PemBytes {
        cert: Vec<u8>,
        key: Vec<u8>,
    },
    Pkcs12 {
        der: Vec<u8>,
        password: String,
    },
}

Certificate and private key material that identifies this replication node.

Backend compatibility

Variant	tls-rustls	tls-native
SelfSigned	✓	✗
PemFiles	✓	✗
PemBytes	✓	✗
Pkcs12	✗	✓

For tls-native, create a PKCS #12 archive with:

openssl pkcs12 -export -out identity.p12 -inkey key.pem -in cert.pem

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

SelfSigned

Generate a fresh self-signed certificate at runtime.

Supported by the tls-rustls backend only. Suitable for internal, trusted replication networks where setting up a certificate authority is undesirable.

Fields

subject_alt_names: Vec<String>

Subject Alternative Names for the certificate (e.g. DNS hostnames or IP addresses for this node).

PemFiles

Load certificate chain and private key from PEM files on disk.

Supported by the tls-rustls backend only.

Fields

cert: PathBuf

Path to a PEM-encoded certificate chain.

key: PathBuf

Path to a PEM-encoded private key (PKCS #8 or PKCS #1 RSA).

PemBytes

Certificate chain and private key as in-memory PEM bytes.

Supported by the tls-rustls backend only.

Fields

cert: Vec<u8>

PEM-encoded certificate chain bytes.

key: Vec<u8>

PEM-encoded private key bytes.

Pkcs12

PKCS #12 archive (certificate + key bundled) as DER bytes.

Supported by the tls-native backend only (OpenSSL / LibreSSL). Load with:

let der = std::fs::read("/etc/noxu/identity.p12")?;
let identity = TlsIdentity::Pkcs12 { der, password: "secret".into() };

Fields

der: Vec<u8>

DER-encoded PKCS #12 archive.

password: String

Password used to decrypt the archive.

Trait Implementations

impl Clone for TlsIdentity

fn clone(&self) -> TlsIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.