Module tls 

TLS support for the Trustee API server.

Provides self-signed certificate auto-generation and rustls server config loading. Certificates are stored at ~/.trustee/certs/{cert.pem,key.pem} and generated on first run if missing.

Functions

default_cert_dir

Resolve the default certificate directory: ~/.trustee/certs/

ensure_certs

Ensure that cert.pem and key.pem exist in cert_dir.

load_tls_config

Load a rustls ServerConfig from PEM-encoded cert and key files.