Struct ServerConfigBuilder 

pub struct ServerConfigBuilder { /* private fields */ }

Builds a rustls::ServerConfig backed by a live SPIFFE X509Source.

The resulting server configuration:

• presents the current SPIFFE X.509 SVID as the server certificate
• requires and validates client certificates (mTLS)
• authorizes the client by SPIFFE ID (URI SAN)

The builder retains an Arc<X509Source>. When the underlying SVID or trust bundle is rotated by the SPIRE agent, new TLS handshakes automatically use the updated material.

Authorization

Client authorization is performed by invoking the provided AuthorizeSpiffeId hook with the client’s SPIFFE ID extracted from the certificate’s URI SAN.

Use ServerConfigOptions::allow_any to disable authorization while retaining full TLS authentication.

Implementations

impl ServerConfigBuilder

pub fn new(source: Arc<X509Source>, opts: ServerConfigOptions) -> Self

Creates a new builder from an X509Source and options.

pub async fn build(self) -> Result<ServerConfig>

Builds the rustls::ServerConfig.