Enum TlsCert 

pub enum TlsCert {
    PemPaths {
        cert_path: String,
        key_path: String,
        client_auth: Option<ClientAuth>,
    },
    Der {
        certs: Arc<Vec<CertificateDer<'static>>>,
        key: Arc<PrivateKeyDer<'static>>,
        client_auth: Option<ClientAuth>,
    },
    Resolver {
        resolver: Arc<dyn ResolvesServerCert>,
        client_auth: Option<ClientAuth>,
    },
}

Optional TLS material the builder can attach to a TLS-mode server.

Variants:

• TlsCert::PemPaths — load cert and key from disk on every spawn.
• TlsCert::Der — pre-loaded DER cert chain + key.
• TlsCert::Resolver — user-supplied rustls::server::ResolvesServerCert for SNI multi-cert serving or hot-reloadable certificates (see ReloadableResolver).

Variants

PemPaths

Filesystem paths for cert + key PEM files.

Fields

cert_path: String

Path to the PEM-encoded certificate chain.

key_path: String

Path to the PEM-encoded private key.

client_auth: Option<ClientAuth>

Available on crate feature tls only.

Optional mTLS policy.

Der

Available on crate feature tls only.

Pre-loaded DER cert chain + key. Useful when certs come from secret storage rather than the filesystem.

Fields

certs: Arc<Vec<CertificateDer<'static>>>

DER-encoded certificate chain (leaf first).

key: Arc<PrivateKeyDer<'static>>

DER-encoded private key.

client_auth: Option<ClientAuth>

Optional mTLS policy.

Resolver

Available on crate feature tls only.

User-supplied certificate resolver. The most flexible variant — drives SNI multi-cert serving, hot reload (see ReloadableResolver), and any custom logic that picks a cert per client-hello.

Fields

resolver: Arc<dyn ResolvesServerCert>

The resolver used by rustls to pick a cert per handshake.

client_auth: Option<ClientAuth>

Optional mTLS policy.

Implementations

impl TlsCert

pub fn pem_paths(cert: impl Into<String>, key: impl Into<String>) -> TlsCert

Construct from filesystem paths (PEM cert + PEM key).

pub fn pem_paths_with_client_auth( cert: impl Into<String>, key: impl Into<String>, client_auth: ClientAuth, ) -> TlsCert

Available on crate feature tls only.

Like TlsCert::pem_paths with an attached mTLS policy.

pub fn der( certs: Vec<CertificateDer<'static>>, key: PrivateKeyDer<'static>, ) -> TlsCert

Available on crate feature tls only.

Construct from pre-loaded DER cert chain + key.

pub fn resolver(resolver: Arc<dyn ResolvesServerCert>) -> TlsCert

Available on crate feature tls only.

Construct from a user-supplied certificate resolver. This is the entry point for SNI multi-cert servers and hot-reload (see ReloadableResolver).

pub fn with_client_auth(self, auth: ClientAuth) -> TlsCert

Available on crate feature tls only.

Returns a clone of the resolver (or no-op for static cert variants).

Useful when the caller wants to swap the live cert at runtime — they pass in a ReloadableResolver via TlsCert::resolver and keep the Arc for later .reload_*() calls.

Trait Implementations

impl Clone for TlsCert

fn clone(&self) -> TlsCert

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsCert

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.