Enum SslMode 

pub enum SslMode {
    Disable,
    Prefer,
    Require,
    VerifyCa,
    VerifyFull,
}

SSL/TLS connection mode.

These modes match PostgreSQL’s sslmode connection parameter. See PostgreSQL SSL Support for detailed documentation.

Variants

Disable

Never use TLS. Connection will fail if server requires TLS.

Prefer

Try TLS first, fall back to unencrypted if server doesn’t support it.

Warning: Vulnerable to downgrade attacks. Not recommended for production.

Require

Require TLS but don’t verify the server certificate.

Protects against passive eavesdropping but not active MITM attacks.

VerifyCa

Require TLS and verify the server certificate chain against trusted CAs.

Does NOT verify that the certificate hostname matches the connection target.

VerifyFull

Require TLS, verify certificate chain, AND verify hostname matches.

Recommended for production. Provides full protection against MITM attacks.

Implementations

impl SslMode

pub fn requires_tls(&self) -> bool

Returns true if this mode requires TLS (won’t fall back to plain).

pub fn verifies_certificate(&self) -> bool

Returns true if this mode verifies the certificate chain.

pub fn verifies_hostname(&self) -> bool

Returns true if this mode verifies the server hostname.

Trait Implementations

impl Clone for SslMode

fn clone(&self) -> SslMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SslMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SslMode

fn default() -> SslMode

Returns the “default value” for a type.

impl PartialEq for SslMode

fn eq(&self, other: &SslMode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for SslMode

impl Eq for SslMode

impl StructuralPartialEq for SslMode