Struct TlsConfig 

pub struct TlsConfig {
    pub sni: Option<String>,
    pub cert_file: PathBuf,
    pub key_file: PathBuf,
    pub client_auth: Option<ClientAuthConfig>,
}

Listener-side TLS termination config — paths to the cert chain + private key in PEM, plus an optional SNI hostname this cert serves.

sni: None marks the cert as the listener’s default — used when the ClientHello has no SNI extension, or when the SNI doesn’t match any of the listener’s Some(_) entries. A listener has at most one default cert.

SNI hostnames are normalised to ASCII-lowercase at every ingest boundary per 08-tls.md § SNI normalization; comparison against rustls’s already-lowercased ClientHello::server_name() is then byte-for-byte.

Fields

sni: Option<String>

cert_file: PathBuf

key_file: PathBuf

client_auth: Option<ClientAuthConfig>

Listener-side mTLS — per 08-tls.md § Client certificate verification. Per-rule input; the lower pass aggregates each rule’s client_auth into one ClientAuthSpec per listener address (rules on the same listener must agree, else compile error). None keeps the listener at ClientAuth::None.

Trait Implementations

impl Clone for TlsConfig

fn clone(&self) -> TlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TlsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for TlsConfig

fn eq(&self, other: &TlsConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for TlsConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for TlsConfig

impl StructuralPartialEq for TlsConfig