Crate pingora_rustls 

This module contains all the rustls specific pingora integration for things like loading certificates and private keys

Modules

version

All defined protocol versions appear in this module.

Structs

Accept

Future returned from TlsAcceptor::accept which will resolve once the accept handshake has finished.

CertificateDer

A DER-encoded X.509 certificate; as specified in RFC 5280

ClientConfig

Common configuration for (typically) all connections made by a program.

ClientTlsStream

A wrapper around an underlying raw stream which implements the TLS or SSL protocol.

Connect

Future returned from TlsConnector::connect which will resolve once the connection handshake has finished.

DigitallySignedStruct

This type combines a SignatureScheme and a signature payload produced with that scheme.

Ellipses

HandshakeSignatureValid

Zero-sized marker type representing verification of a signature.

KeyLogFile

KeyLog implementation that opens a file whose name is given by the SSLKEYLOGFILE environment variable, and writes keys into it.

NoDebug

Wraps a type T and provides a Debug impl that does not rely on T being Debug.

RootCertStore

A container for root certificates able to provide a root-of-trust for connection authentication.

ServerCertVerified

Zero-sized marker type representing verification of a server cert chain.

ServerConfig

Common configuration for a set of server sessions.

ServerTlsStream

A wrapper around an underlying raw stream which implements the TLS or SSL protocol.

Stream

This type implements io::Read and io::Write, encapsulating a Connection C and an underlying transport T, such as a socket.

TlsAcceptor

A wrapper around a rustls::ServerConfig, providing an async accept method.

TlsConnector

A wrapper around a rustls::ClientConfig, providing an async connect method.

UnixTime

A timestamp, tracking the number of non-leap seconds since the Unix epoch.

WebPkiServerVerifier

Default ServerCertVerifier, see the trait impl for more information.

WithTypeInfo

Enums

CertificateError

The ways in which certificate validators can express errors.

PrivateKeyDer

A DER-encoded X.509 private key, in one of several formats

RusTlsError

rustls reports protocol errors using this type.

ServerName

Encodes ways a client can know the expected name of the server.

SignatureScheme

The SignatureScheme TLS protocol enum. Values in this enum are taken from the various RFCs covering TLS, and are listed by IANA. The Unknown item is used when processing unrecognised ordinals.

TlsStream

Unified TLS stream type

Traits

ServerCertVerifier

Something that can verify a server certificate chain, and verify signatures made by certificates.

Functions

hash_certificate

load_ca_file_into_store

Load the certificates from the given pem file path into the given certificate store

load_certs_and_key_files

Load the certificates and private key files

load_native_certs

Load root certificates found in the platform’s native certificate store.

load_pem_file_ca

Load the certificate

load_pem_file_private_key

load_platform_certs_incl_env_into_store

Attempt to load the native cas into the given root-certificate store