Struct ManagedTlsCertSource 

pub struct ManagedTlsCertSource { /* private fields */ }

A TlsCertSource that provides managed server certs (ACME resolver) and/or mTLS client verification, composed from the pieces in acme/mtls. Build it with ManagedTlsCertSource::builder.

Implementations

impl ManagedTlsCertSource

pub fn builder() -> ManagedTlsBuilder

Trait Implementations

impl TlsCertSource for ManagedTlsCertSource

fn load(&self) -> Result<TlsMaterial, TlsError>

Load a single server certificate chain + key. Used unless Self::resolver returns Some (in which case the core never calls this).

fn resolver(&self) -> Option<Arc<dyn ResolvesServerCert>>

Optional dynamic server-cert resolver. When Some, the core builds the ServerConfig with this resolver INSTEAD of load() (so the cert can rotate at runtime without rebuilding the acceptor — enterprise hitless ACME), and advertises the acme-tls/1 ALPN so an on-listener TLS-ALPN-01 challenge can negotiate on the same port. Default None → the OPEN single-cert path.

fn client_verifier(&self) -> Option<Arc<dyn ClientCertVerifier>>

Optional client-certificate verifier. When Some, the listener requires and verifies client certificates (mTLS / managed PKI). Default None → no client auth, exactly as before.