Struct ClientAuthParams 

pub struct ClientAuthParams {
    pub ca_cert_path: String,
    pub require_client_cert: bool,
    pub pinned_certs: Vec<String>,
    pub crl_path: String,
}

Client-certificate verification parameters (transport-neutral).

Construct this only when client authentication should be enabled; pass it as ServerConfigParams::client_auth. A None client-auth means server-only TLS.

Fields

ca_cert_path: String

Path to the PEM CA certificate(s) used to verify client certificates.

require_client_cert: bool

Require a client certificate (vs. allow unauthenticated connections).

pinned_certs: Vec<String>

Optional SHA-256 fingerprints to pin. Colons and case are ignored.

crl_path: String

Optional path to a revoked-fingerprint list (one SHA-256 hex per line). When set, a client certificate whose fingerprint appears in the file is REFUSED at the handshake (A5). The file is re-read when it changes, so a revoke takes effect on the next connection (the daemon materializes it from the issued-cert ledger on every revoke). Empty disables the check.

Trait Implementations

impl Clone for ClientAuthParams

fn clone(&self) -> ClientAuthParams

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClientAuthParams

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ClientAuthParams

fn default() -> ClientAuthParams

Returns the “default value” for a type.