Function make_tls_connector 

pub fn make_tls_connector() -> MakeTlsConnector

Build the TLS connector handed to deadpool’s Manager.

The same connector serves every TLS mode: Prefer (tokio-postgres falls back to plaintext only when the server declines TLS), and Require/VerifyCa/VerifyFull (driver-level SslMode::Require, so a server that refuses TLS fails the connection). Verification is always webpki chain + hostname — see the module docs.

This is the workspace’s shared rustls connector, exposed so downstream tooling (e.g. prax-cli’s introspector) can reuse the same certificate verification behavior. Available only when the tls cargo feature is enabled (on by default).