Struct TlsConfig 

pub struct TlsConfig {
    pub mode: TlsMode,
    pub ca_file: Option<String>,
    pub accept_invalid_certs: bool,
    pub accept_invalid_hostnames: bool,
}

Transport security for the source database connection.

Credentials and exported data cross the wire on every connection; without TLS they are visible to anyone on the network path (cloud inter-VPC, cross-AZ, or a compromised upstream). The default for all new connections is TlsMode::Require when tls: is present; setting tls: { mode: disable } is explicit opt-out.

source:
  type: postgres
  url_env: DATABASE_URL
  tls:
    mode: verify-full
    ca_file: /etc/ssl/certs/rds-ca-2019-root.pem

Fields

mode: TlsMode

Enforcement level. See TlsMode.

ca_file: Option<String>

PEM-encoded CA certificate to trust for server verification. Required for TlsMode::VerifyCa and TlsMode::VerifyFull against a private CA.

accept_invalid_certs: bool

Accept certificates not chained to a trusted CA. Dangerous — disables server authentication — and only honored when explicitly true.

accept_invalid_hostnames: bool

Accept certificates whose subjectAltName does not match the connection hostname. Dangerous — disables hostname verification.

Trait Implementations

impl Clone for TlsConfig

fn clone(&self) -> TlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TlsConfig

fn default() -> TlsConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TlsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for TlsConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl Serialize for TlsConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.