Struct MitmCertResolver 

pub struct MitmCertResolver { /* private fields */ }

A ResolvesServerCert implementation that generates per-host TLS certificates on the fly, signed by a CertificateAuthority.

When a client connects with SNI, the resolver generates (or returns a cached) leaf certificate for that hostname. Certificates are cached in an LRU cache to avoid regenerating them on every connection.

Implementations

impl MitmCertResolver

pub fn new(ca: CertificateAuthority) -> Self

Create a resolver with the default LRU cache capacity (1024).

pub fn with_cache_capacity(ca: CertificateAuthority, capacity: usize) -> Self

Create a resolver with a custom LRU cache capacity.

pub fn into_server_config(self) -> ServerConfig

Build a ServerConfig that uses this resolver for certificate selection.

The returned config has no client authentication and no ALPN protocols. Set config.alpn_protocols if your use case requires protocol negotiation (e.g. [b"h2", b"http/1.1"] for HTTP).

Trait Implementations

impl Debug for MitmCertResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl ResolvesServerCert for MitmCertResolver

fn resolve(&self, client_hello: ClientHello<'_>) -> Option<Arc<CertifiedKey>>

Choose a certificate chain and matching key given simplified ClientHello information.

fn only_raw_public_keys(&self) -> bool

Return true when the server only supports raw public keys.