Struct DynCertResolver 

pub struct DynCertResolver { /* private fields */ }

Thread-safe certificate store that resolves certs by SNI hostname.

New certs can be added at runtime without restarting the TLS listener.

Implementations

impl DynCertResolver

pub fn new() -> Self

pub fn with_fallback() -> Result<Self>

A resolver that answers every handshake, using a self-signed certificate when it has none for the requested name. The client then gets a certificate warning and, past it, orca’s error page, instead of a dead connection.

pub fn add_cert(&self, domain: &str, key: Arc<CertifiedKey>)

Add or replace a certificate for a domain.

pub fn has_cert(&self, domain: &str) -> bool

Check if a cert exists for the given domain.

Trait Implementations

impl Clone for DynCertResolver

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DynCertResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DynCertResolver

fn default() -> Self

Returns the “default value” for a type.

impl ResolvesServerCert for DynCertResolver

fn resolve(&self, client_hello: ClientHello<'_>) -> Option<Arc<CertifiedKey>>

Choose a certificate chain and matching key given simplified ClientHello information.

fn only_raw_public_keys(&self) -> bool

Return true when the server only supports raw public keys.