Struct TlsProvider 

pub struct TlsProvider {
    pub server: Option<Arc<ServerConfig>>,
    pub client: Option<Arc<ClientConfig>>,
    /* private fields */
}

TLS-backed crypto for an endpoint. A server needs server, a client client; the configurations must list ALPN protocols (h3 for HTTP/3). Build a client provider with TlsProvider::client or TlsProvider::with_client (which link the TLS client); a provider made with TlsProvider::server refuses client sessions.

Fields

server: Option<Arc<ServerConfig>>

client: Option<Arc<ClientConfig>>

Implementations

impl TlsProvider

pub fn server(cfg: Arc<ServerConfig>) -> Self

Examples found in repository

examples/bench_quic.rs (line 25)

fn providers(real: bool) -> (Arc<dyn CryptoProvider>, Arc<dyn CryptoProvider>) {
    if !real {
        return (Arc::new(NullProvider::new(1)), Arc::new(NullProvider::new(2)));
    }
    let ss = certgen::issue(&CertParams::server(&["localhost"]), PrivateKey::generate_ec(EcCurve::P256), None);
    let ck = simoom_tls::CertifiedKey::new(vec![ss.cert_der.clone()], ss.key.clone()).unwrap();
    let s = TlsProvider::server(Arc::new(simoom_tls::ServerConfig::new(ck).with_alpn(&[b"h3"])));
    let mut roots = simoom_tls::x509::RootStore::empty();
    roots.add_der(&ss.cert_der).unwrap();
    let c = TlsProvider::client(Arc::new(simoom_tls::ClientConfig::new(roots).with_alpn(&[b"h3"])));
    (Arc::new(c), Arc::new(s))
}

pub fn client(cfg: Arc<ClientConfig>) -> Self

Examples found in repository

examples/bench_quic.rs (line 28)

fn providers(real: bool) -> (Arc<dyn CryptoProvider>, Arc<dyn CryptoProvider>) {
    if !real {
        return (Arc::new(NullProvider::new(1)), Arc::new(NullProvider::new(2)));
    }
    let ss = certgen::issue(&CertParams::server(&["localhost"]), PrivateKey::generate_ec(EcCurve::P256), None);
    let ck = simoom_tls::CertifiedKey::new(vec![ss.cert_der.clone()], ss.key.clone()).unwrap();
    let s = TlsProvider::server(Arc::new(simoom_tls::ServerConfig::new(ck).with_alpn(&[b"h3"])));
    let mut roots = simoom_tls::x509::RootStore::empty();
    roots.add_der(&ss.cert_der).unwrap();
    let c = TlsProvider::client(Arc::new(simoom_tls::ClientConfig::new(roots).with_alpn(&[b"h3"])));
    (Arc::new(c), Arc::new(s))
}

pub fn with_client(self, cfg: Arc<ClientConfig>) -> Self

Adds a client configuration (an endpoint that both accepts and opens connections).

Trait Implementations

impl CryptoProvider for TlsProvider

fn initial_keys(&self, version: u32, dcid: &[u8], is_server: bool) -> Keys

Initial keys derived from the client’s first destination connection ID.

fn retry_tag(&self, version: u32, pseudo: &[u8]) -> [u8; 16]

The Retry integrity tag over the Retry pseudo-packet (RFC 9001 §5.8).

fn hmac(&self, key: &[u8; 32], parts: &[&[u8]]) -> [u8; 32]

HMAC-SHA256 over the concatenation of parts.

fn fill_random(&self, buf: &mut [u8])

Cryptographically secure random bytes.

fn server_session( &self, version: u32, tp: Vec<u8>, ) -> Result<Box<dyn CryptoSession>, TransportError>

Starts a server handshake for QUIC version that will send transport_params.

fn client_session( &self, version: u32, name: &str, tp: Vec<u8>, ) -> Result<Box<dyn CryptoSession>, TransportError>

Starts a client handshake to server_name that will send transport_params.