Enum TlsPolicy 

#[non_exhaustive]
pub enum TlsPolicy {
    Disable,
    Prefer,
    Require,
    VerifyCa {
        root_cert: Option<PathBuf>,
    },
    VerifyFull {
        root_cert: Option<PathBuf>,
    },
}

How a connection is secured. A typed setting, not a sslmode= string someone has to remember.

The policy given to PgBackend::connect_with (or MysqlBackend::connect_with) overrides whatever sslmode the connection string carries, so a URL cannot weaken it. The default is TlsPolicy::Require: encryption is on unless a program says otherwise in code.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Disable

No TLS. For a loopback or socket connection in a test; never over a network.

Prefer

TLS if the server offers it, plain otherwise (sqlx’s default). A downgrade is silent: an attacker who strips the offer gets a plain connection.

Require

TLS, or fail. The certificate is not checked, so this stops eavesdropping but not an impostor server.

VerifyCa

TLS, and the server’s certificate must chain to a trusted root (root_cert, or the built-in web roots if None). The host name is not checked.

Fields

root_cert: Option<PathBuf>

A PEM file of the root(s) to trust, instead of the built-in roots.

VerifyFull

As VerifyCa, and the certificate must also name the host connected to.

Fields

root_cert: Option<PathBuf>

A PEM file of the root(s) to trust, instead of the built-in roots.

Trait Implementations

impl Clone for TlsPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TlsPolicy

fn default() -> Self

Returns the “default value” for a type.

impl Eq for TlsPolicy

impl PartialEq for TlsPolicy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TlsPolicy