Struct CertStore 

pub struct CertStore<E: EntryKey> {
    pub by_sni: HashMap<String, Arc<E>>,
    pub default: Option<Arc<E>>,
}

Per-listener cert pool: zero-or-more SNI-keyed entries plus an optional sni-less default. The default fires when a ClientHello has no SNI extension or when the SNI does not match any Self::by_sni key. A listener has at most one default.

Keys in Self::by_sni are stored ASCII-lowercase per RFC 6066 § 3 (server_name is already ASCII-lowercased by rustls), so resolver-side lookups are byte-for-byte without an eq_ignore_ascii_case shim.

Fields

by_sni: HashMap<String, Arc<E>>

default: Option<Arc<E>>

Implementations

impl<E: EntryKey> CertStore<E>

pub fn new() -> Self

pub fn lookup(&self, sni: Option<&str>) -> Option<Arc<CertifiedKey>>

Resolve a ClientHello’s SNI against the store. The hot-path resolver delegates to this so unit tests can exercise the lookup without constructing a rustls::ClientHello (which is not user-constructible). sni is expected to already be ASCII-lowercased by rustls per RFC 6066 § 3.

Trait Implementations

impl<E: Debug + EntryKey> Debug for CertStore<E>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<E: EntryKey> Default for CertStore<E>

fn default() -> Self

Returns the “default value” for a type.