Struct ServerTlsConfig 

pub struct ServerTlsConfig {
    pub cert: PemSource,
    pub key: PemSource,
    pub client_ca: Option<PemSource>,
    pub alpn: Vec<Vec<u8>>,
}

Server-side TLS configuration.

Construct via ServerTlsConfig::builder.

Fields

cert: PemSource

Server certificate chain (leaf first).

key: PemSource

Server private key (PKCS#8, PKCS#1, or SEC1).

client_ca: Option<PemSource>

Trusted CA bundle for verifying client certificates (mTLS). None = standard TLS (no client cert required).

alpn: Vec<Vec<u8>>

ALPN protocol list, in preference order (e.g. [b"h2"] for gRPC). Empty = no ALPN negotiation requested.

Implementations

impl ServerTlsConfig

pub fn builder() -> ServerTlsConfigBuilder

Start a new builder.

pub fn into_rustls_config(self) -> Result<ServerConfig, TlsError>

Build a rustls::ServerConfig from this configuration.

Reads PEM sources from disk (or memory), parses certs and key, optionally constructs a WebPkiClientVerifier for mTLS, and applies ALPN settings. All I/O and parse errors surface here.

Auto-installs the ring CryptoProvider if no provider is set process-wide.

Trait Implementations

impl Clone for ServerTlsConfig

fn clone(&self) -> ServerTlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServerTlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.