Struct ServerTlsConfigBuilder 

pub struct ServerTlsConfigBuilder { /* private fields */ }

Incremental builder for ServerTlsConfig.

Implementations

impl ServerTlsConfigBuilder

pub fn cert(self, src: PemSource) -> Self

Set the server cert chain from any PemSource.

pub fn key(self, src: PemSource) -> Self

Set the server private key from any PemSource.

pub fn with_alpn<I, S>(self, protocols: I) -> Self

where I: IntoIterator<Item = S>, S: Into<Vec<u8>>,

Set the ALPN protocol list, in preference order.

Pass ["h2"] for gRPC-only, ["h2", "http/1.1"] for axum HTTP. Default is empty (no ALPN negotiation).

pub fn cert_pem_file(self, path: impl Into<PathBuf>) -> Self

Convenience: set the server cert chain from a file path.

pub fn cert_pem_bytes(self, bytes: impl Into<Vec<u8>>) -> Self

Convenience: set the server cert chain from in-memory bytes.

pub fn key_pem_file(self, path: impl Into<PathBuf>) -> Self

Convenience: set the server private key from a file path.

pub fn key_pem_bytes(self, bytes: impl Into<Vec<u8>>) -> Self

Convenience: set the server private key from in-memory bytes.

pub fn require_client_ca_pem_file(self, path: impl Into<PathBuf>) -> Self

Convenience: enable mTLS with a CA bundle from a file path.

pub fn require_client_ca_pem_bytes(self, bytes: impl Into<Vec<u8>>) -> Self

Convenience: enable mTLS with a CA bundle from in-memory bytes.

pub fn require_client_ca(self, src: PemSource) -> Self

Require client certificates signed by this CA bundle (turns on mTLS).

pub fn build(self) -> Result<ServerTlsConfig, TlsError>

Finalize the configuration.

Validates that cert and key are present (else TlsError::MissingField). Does no I/O - the PEM sources are read later by ServerTlsConfig::into_rustls_config.

Example

use solti_tls::ServerTlsConfig;

let cfg = ServerTlsConfig::builder()
    .cert_pem_bytes(b"-----BEGIN CERTIFICATE-----\n...".to_vec())
    .key_pem_bytes(b"-----BEGIN PRIVATE KEY-----\n...".to_vec())
    .with_alpn(["h2"])
    .build()
    .unwrap();
assert!(cfg.client_ca.is_none()); // standard TLS until require_client_ca

Trait Implementations

impl Clone for ServerTlsConfigBuilder

fn clone(&self) -> ServerTlsConfigBuilder

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServerTlsConfigBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ServerTlsConfigBuilder

fn default() -> ServerTlsConfigBuilder

Returns the “default value” for a type.