Struct UpstreamTls 

pub struct UpstreamTls {
    client: Option<(Vec<CertificateDer<'static>>, PrivateKeyDer<'static>)>,
    ca: Option<Vec<CertificateDer<'static>>>,
    pub verify: bool,
    key: u64,
}

Fields

client: Option<(Vec<CertificateDer<'static>>, PrivateKeyDer<'static>)>

ca: Option<Vec<CertificateDer<'static>>>

verify: bool

Verify the upstream’s certificate. false still presents the client cert — the handshake is mutual, verification of the peer is skipped.

key: u64

Implementations

impl UpstreamTls

pub fn load( client_paths: Option<(&str, &str)>, ca_path: Option<&str>, verify: bool, ) -> Result<Arc<Self>, String>

Loads and validates an identity. client_paths is (cert, key) — pairing of the two YAML keys is enforced by the caller’s config parse. Reads + PEM-parses every file and dry-builds the rustls config so unreadable files, empty bundles, and cert/key mismatches all fail here, at policy-compile time.

pub fn cache_key(&self) -> u64

Content-hash key (PEM bytes + verify flag). Stable within a process — exactly the lifetime of the caches it keys.

pub fn client_config(&self) -> Result<ClientConfig, String>

Builds a rustls client config from the loaded materials. ALPN is left unset — the HTTP client and the wss connector want different values.

pub fn register(this: &Arc<Self>)

Publishes the identity in the process-wide registry (idempotent).

pub fn lookup(key: u64) -> Option<Arc<UpstreamTls>>

Resolves a previously registered identity.

Trait Implementations

impl Debug for UpstreamTls

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.