uselesskey_rustls/lib.rs
1#![forbid(unsafe_code)]
2
3//! Integration between uselesskey test fixtures and `rustls-pki-types`.
4//!
5//! This crate owns the PKI extension traits that convert uselesskey
6//! fixtures into `rustls-pki-types` types (`PrivateKeyDer`,
7//! `CertificateDer`). The implementation lives under
8//! [`crate::srp::pki`]. (The v0.7.x `uselesskey-core-rustls-pki`
9//! published-internal shim was removed in v0.8.0.)
10//!
11//! With the `server-config` and `client-config` features, it also provides
12//! convenience builders for `rustls::ServerConfig` and `rustls::ClientConfig`,
13//! including mutual TLS (mTLS) support.
14//!
15//! # Convert a private key to rustls format
16//!
17//! ```
18//! use uselesskey_core::Factory;
19//! use uselesskey_rsa::{RsaFactoryExt, RsaSpec};
20//! use uselesskey_rustls::RustlsPrivateKeyExt;
21//!
22//! let fx = Factory::random();
23//! let rsa = fx.rsa("server", RsaSpec::rs256());
24//! let key = rsa.private_key_der_rustls();
25//! assert_eq!(key.secret_der(), rsa.private_key_pkcs8_der());
26//! ```
27//!
28//! # Build TLS configs (requires `tls-config` + a crypto provider feature)
29//!
30//! ```no_run
31//! use uselesskey_core::Factory;
32//! use uselesskey_x509::{X509FactoryExt, ChainSpec};
33//! use uselesskey_rustls::{RustlsServerConfigExt, RustlsClientConfigExt};
34//!
35//! let fx = Factory::random();
36//! let chain = fx.x509_chain("svc", ChainSpec::new("test.example.com"));
37//!
38//! let server_cfg = chain.server_config_rustls();
39//! let client_cfg = chain.client_config_rustls();
40//! ```
41
42#[cfg(any(feature = "server-config", feature = "client-config"))]
43mod config;
44
45#[doc(hidden)]
46pub mod srp;
47
48#[cfg(test)]
49mod testutil;
50
51#[cfg(feature = "x509")]
52pub use srp::pki::RustlsChainExt;
53pub use srp::pki::{RustlsCertExt, RustlsPrivateKeyExt};
54
55#[cfg(feature = "server-config")]
56pub use config::RustlsServerConfigExt;
57
58#[cfg(feature = "client-config")]
59pub use config::RustlsClientConfigExt;
60
61#[cfg(all(feature = "server-config", feature = "client-config"))]
62pub use config::RustlsMtlsExt;