Struct StartTlsState 

pub struct StartTlsState { /* private fields */ }

Host-owned STARTTLS transition guard for one connection.

The downgrade this closes is the classic one: a negotiation that fails to upgrade, and an adapter that carries on in the clear because the connection is technically still usable. Once an upgrade begins, plaintext I/O is over whether or not the handshake succeeds.

Implementations

impl StartTlsState

pub fn new() -> Self

Begin in protocol negotiation before any credentials/application data.

pub fn phase(&self) -> StartTlsPhase

Current authoritative connection phase.

pub fn plaintext_negotiation_allowed(&self) -> bool

Whether protocol-specific plaintext negotiation I/O is currently legal.

pub fn application_io_allowed(&self) -> bool

Whether authenticated/application I/O is currently legal.

pub fn begin_upgrade(&mut self) -> Result<(), EgressError>

Commit to an in-place TLS upgrade and permanently end plaintext I/O.

Errors

Returns EgressError::InvalidStartTlsTransition unless negotiation is still active.

pub fn complete_upgrade(&mut self) -> Result<(), EgressError>

Record a successful TLS handshake.

Errors

Returns EgressError::InvalidStartTlsTransition unless a handshake is in progress.

pub fn fail_upgrade(&mut self) -> Result<(), EgressError>

Record a failed TLS handshake. The failed phase is terminal and must result in connection closure; plaintext fallback is never permitted.

Errors

Returns EgressError::InvalidStartTlsTransition unless a handshake is in progress.

Trait Implementations

impl Debug for StartTlsState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for StartTlsState

fn default() -> Self

Returns the “default value” for a type.