Struct TlsProfile 

pub struct TlsProfile { /* private fields */ }

Named TLS trust and optional client-identity profile for one instance.

A profile selects certificates; it never grants a destination. Its hosts must each be inside the instance’s egress_hosts grant, which EgressPolicy::with_tls_profiles enforces, and a request that selects it still passes the ordinary grant check first. The profile holds references into the instance’s secret config, never PEM bytes.

Implementations

impl TlsProfile

pub fn new( name: TlsProfileName, hosts: &[String], system_roots: bool, custom_ca: Option<SecretPropertyRef>, client_identity: Option<TlsClientIdentity>, ) -> Result<Self, EgressError>

Create a named TLS profile.

hosts uses the strict egress grammar of egress_hosts.

Errors

Returns EgressError if no destination is bound, a host pattern is invalid, or neither system roots nor a custom CA supplies trust anchors.

pub fn name(&self) -> &TlsProfileName

Profile name a transport selects.

pub fn uses_system_roots(&self) -> bool

Whether the roots plugin HTTPS trusts are included.

pub fn custom_ca(&self) -> Option<&SecretPropertyRef>

Optional instance-secret property containing PEM CA certificates.

pub fn client_identity(&self) -> Option<&TlsClientIdentity>

Optional instance-secret properties forming a client identity.

Trait Implementations

impl Clone for TlsProfile

fn clone(&self) -> TlsProfile

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsProfile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for TlsProfile

impl PartialEq for TlsProfile

fn eq(&self, other: &TlsProfile) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TlsProfile