Struct ListenTlsConfig 

#[non_exhaustive]
pub struct ListenTlsConfig {
    pub cert_file: PathBuf,
    pub key_file: PathBuf,
    pub client_ca_file: Option<PathBuf>,
    pub client_auth: Option<ClientAuth>,
    pub handshake_timeout_secs: u64,
}

TLS for the listener.

tls:
  cert_file: /etc/proxy/tls.crt      # PEM chain, leaf first
  key_file: /etc/proxy/tls.key       # PEM private key
  client_ca_file: /etc/proxy/ca.crt  # optional: verify client certificates
  client_auth: required              # or `optional`

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

cert_file: PathBuf

The server certificate chain, PEM, leaf first.

key_file: PathBuf

The server private key, PEM (PKCS#8, PKCS#1 or SEC1).

client_ca_file: Option<PathBuf>

CA certificates, PEM, that client certificates are verified against. Unset: clients present none.

client_auth: Option<ClientAuth>

Whether a client must present a certificate; required when client_ca_file is set and this is not. Setting it without client_ca_file is an error: nothing could verify the certificate.

handshake_timeout_secs: u64

Seconds a client has to finish the TLS handshake. At least 1. Default: 10.

Implementations

impl ListenTlsConfig

pub fn new(cert_file: impl Into<PathBuf>, key_file: impl Into<PathBuf>) -> Self

TLS with the certificate chain and private key in these PEM files, no client certificates, and the default handshake timeout.

Trait Implementations

impl Clone for ListenTlsConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ListenTlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ListenTlsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.