Module tls 

TLS and ACME certificate management.

Structs

AcmeChallengeResponse

A live HTTP-01 challenge response.

AcmeIssuer

Issues certificates for individual domains over ACME HTTP-01.

Certificate

Certificate and key pair.

CertificateFacts

What a certificate turned out to be.

CertificateStore

Certificate store with database metadata and file caching.

SniCertResolver

Resolves a certificate from the store by the SNI name of the handshake.

Constants

ALPN_PROTOCOLS

ALPN protocols offered, in preference order.

LETS_ENCRYPT_PRODUCTION

Let’s Encrypt’s production directory.

LETS_ENCRYPT_STAGING

Let’s Encrypt’s staging directory, which issues untrusted certificates against far looser rate limits.

Functions

build_server_config

Build a rustls ServerConfig from PEM bytes, with ALPN configured.

build_server_config_with_resolver

Build a ServerConfig that picks its certificate per handshake.

expiry_of

The expiry of a chain, or None if it cannot be read.

facts

Read the expiry and the covered names out of a PEM chain.

find_challenge

Look up a pending HTTP-01 challenge response by token.

load_server_config

Load a certificate and key from disk and build a ServerConfig.

validate_for_domain

Check a PEM certificate chain and key, and report what they cover.