Struct TlsConfig 

pub struct TlsConfig {
    pub domain_name: Option<String>,
    pub ca_certificate_pem: Option<Vec<u8>>,
    pub client_identity_pem: Option<(Vec<u8>, Vec<u8>)>,
}

Transport security configuration for the gRPC channel.

Requires the tls cargo feature; building a client with a populated TlsConfig while the feature is disabled returns crate::OrleansError::InvalidConfig. With no custom CA, the system’s public webpki roots are used. See SECURITY.md for deployment guidance.

Fields

domain_name: Option<String>

Expected server domain name (SNI / certificate validation). Defaults to the endpoint host when unset.

ca_certificate_pem: Option<Vec<u8>>

PEM-encoded CA certificate to trust (for private or self-signed CAs). When None, public webpki roots are used.

client_identity_pem: Option<(Vec<u8>, Vec<u8>)>

PEM-encoded client certificate and private key for mutual TLS.

Implementations

impl TlsConfig

pub fn new() -> Self

A configuration that validates the server against public webpki roots.

pub fn with_domain_name(self, name: impl Into<String>) -> Self

Set the expected server domain name.

pub fn with_ca_certificate_pem(self, pem: impl Into<Vec<u8>>) -> Self

Trust a custom (private or self-signed) CA certificate, PEM-encoded.

pub fn with_client_identity_pem( self, certificate: impl Into<Vec<u8>>, key: impl Into<Vec<u8>>, ) -> Self

Present a client certificate for mutual TLS (PEM cert + PEM key).

Trait Implementations

impl Clone for TlsConfig

fn clone(&self) -> TlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TlsConfig

fn default() -> TlsConfig

Returns the “default value” for a type.