Struct CertAuthenticator 

pub struct CertAuthenticator { /* private fields */ }

Stateless validator. Holds the config + lookup closure; TLS listeners wrap it in an Arc and call validate on every accepted connection.

Implementations

impl CertAuthenticator

pub fn new(config: CertAuthConfig) -> CertAuthenticator

pub fn validate<F>( &self, cert: &ParsedClientCert, now_unix_secs: i64, lookup_user: F, ) -> Result<CertIdentity, CertAuthError>

where F: Fn(&str) -> Option<User>,

Validate a parsed client cert and extract the RedDB identity.

lookup_user is invoked when map_to_existing_users=true so the caller can consult the auth store (any closure returning Option<User> works — tests inject a fake).

pub fn config(&self) -> &CertAuthConfig