Struct TlsConfig 

pub struct TlsConfig {
    pub cert_path: String,
    pub key_path: String,
    pub min_version: String,
    pub client_ca_path: Option<String>,
    pub client_cert_required: bool,
    pub sni_certs: Vec<SniCert>,
}

TLS termination settings for a listener (data plane or admin).

Fields

cert_path: String

Path to the PEM certificate chain. Required.

key_path: String

Path to the PEM private key. Required.

min_version: String

Minimum TLS protocol version, "1.2" or "1.3"; defaults to "1.2".

client_ca_path: Option<String>

PEM CA bundle used to verify client certificates (mTLS). When set, the listener requests and validates a client cert during the handshake.

client_cert_required: bool

When mTLS is enabled (client_ca_path set), whether a valid client cert is required (default) — clients without one are rejected — or optional (false, anonymous clients allowed; presented certs are still validated). Ignored when client_ca_path is unset.

sni_certs: Vec<SniCert>

Additional certificates selected by the ClientHello SNI hostname. When none match (or no SNI is sent), cert_path/key_path above is the default/fallback.

Trait Implementations

impl Clone for TlsConfig

fn clone(&self) -> TlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TlsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.