Struct CertificateResolver

pub struct CertificateResolver {
    certs: RwLock<DomainMap<Arc<CertifiedKey>>>,
    default: RwLock<Option<Arc<CertifiedKey>>>,
}

A per-domain ResolvesServerCert implementor with fallback.

Resolves TLS certificates based on the domain name using links-domainmap. The default certificate for unknown or unrecognized domain names can be specified using default.

Fields

certs: RwLock<DomainMap<Arc<CertifiedKey>>>

The map containing all certificates

default: RwLock<Option<Arc<CertifiedKey>>>

Default certificate/key for unknown and unrecognized domain names

Implementations

impl CertificateResolver

pub const fn new() -> Self

Create a new empty CertificateResolver from a [CertifiedKey]

fn get_default(&self) -> Option<Arc<CertifiedKey>>

Get the default CertifiedKey if one is configured

pub fn get(&self, domain: Option<&Domain>) -> Option<Arc<CertifiedKey>>

Get the matching CertifiedKey for the given reference identifier domain name

pub fn set(&self, domain: Domain, certkey: Arc<CertifiedKey>)

Set the cert-key pair for the given domain. All future calls to get or resolve with this domain name will return this new CertifiedKey.

pub fn set_default(&self, certkey: Option<Arc<CertifiedKey>>)

Set the default cert-key pair for unknown or unrecognized domains. All future calls to get_default or resolve without a domain name or a domain name not found in any other certificate sources will return this new CertifiedKey. Setting the default certificate to None will reject requests for unknown or unrecognized domains.

pub fn remove(&self, domain: &Domain)

Remove the cert-key pair for the given domain. All future calls to get or resolve with this domain name will return nothing.

Trait Implementations

impl Debug for CertificateResolver

fn fmt(&self, f: &mut Formatter<'_>) -> FmtResult

Formats the value using the given formatter.

impl Default for CertificateResolver

fn default() -> Self

Returns the “default value” for a type.

impl ResolvesServerCert for CertificateResolver

fn resolve(&self, client_hello: ClientHello<'_>) -> Option<Arc<CertifiedKey>>

Choose a certificate chain and matching key given simplified ClientHello information.

fn only_raw_public_keys(&self) -> bool

Return true when the server only supports raw public keys.