Struct TlsConfig 

pub struct TlsConfig { /* private fields */ }

Certificate, key and client-auth policy of an HTTPS server; cheap to clone, clones share the (reloadable) configuration

Implementations

impl TlsConfig

pub fn from_pem(chain_pem: &[u8], key_pem: &[u8]) -> Result<Self>

From PEM text: the certificate chain (leaf first) and one private key (PKCS#8, PKCS#1 or SEC1)

pub fn from_pem_files( cert_path: impl AsRef<Path>, key_path: impl AsRef<Path>, ) -> Result<Self>

From PEM files, which reload reads again later

pub fn client_auth(self, ca_pem: &[u8], required: bool) -> Result<Self>

Ask clients for a certificate signed by one of the CAs in ca_pem

With required, connections without a valid certificate fail the handshake. Without it, clients may connect anonymously and handlers decide per route (Request::client_certificate is None then); a certificate that is presented but not trusted is always rejected.

pub fn handshake_timeout(self, timeout: Duration) -> Self

Time allowed for the TLS handshake (default 10 s)

pub fn reload(&self) -> Result<bool>

Read the certificate files again and switch new connections to them

Returns Ok(true) when the files had changed and were applied, Ok(false) when they are unchanged. On error the previous certificate stays in use.

Trait Implementations

impl Clone for TlsConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.