Struct Stapler 

pub struct Stapler { /* private fields */ }

Implements OCSP certificate stapling

Implementations

impl Stapler

pub fn new(inner: Arc<dyn ResolvesServerCert>) -> Self

Creates a Stapler with a default OCSP Client and no metrics

pub fn new_with_registry( inner: Arc<dyn ResolvesServerCert>, registry: &Registry, ) -> Self

Creates a Stapler with a default OCSP Client and Registry

pub fn new_with_client( inner: Arc<dyn ResolvesServerCert>, client: Client, ) -> Self

Creates a Stapler with a provided OCSP Client and no metrics

pub fn new_with_client_and_registry( inner: Arc<dyn ResolvesServerCert>, client: Client, registry: Option<&Registry>, ) -> Self

Creates a Stapler with a provided OCSP Client and Registry

pub fn preload(&self, ckey: Arc<CertifiedKey>)

Preloads the certificate into the Stapler before the request to resolve() comes. This allows e.g. to load certificates with Must-Staple extension in a way that when the first request comes they’re already stapled. Has no effect if the same certificate was already preloaded. Silently discards the certificate if it’s not correct (doens’t have the issuer, out of validity window etc)

pub fn status(&self, ckey: Arc<CertifiedKey>) -> Option<CertStatus>

Returns the certificate revocation status of the provided CertifiedKey. It will be None if no successful OCSP request was made.

pub async fn stop(&self)

Tells the background worker to stop and waits until it does

Trait Implementations

impl Debug for Stapler

Debug is required for ResolvesServerCert trait

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl ResolvesServerCert for Stapler

fn resolve(&self, client_hello: ClientHello<'_>) -> Option<Arc<CertifiedKey>>

Choose a certificate chain and matching key given simplified ClientHello information.

fn only_raw_public_keys(&self) -> bool

Return true when the server only supports raw public keys.