Struct TlsConfig 

pub struct TlsConfig {
    pub cert: PathBuf,
    pub key: PathBuf,
    pub client_ca: Option<PathBuf>,
}

PEM certificate/key material for a TLS-terminated listener.

client_ca, when set, turns on mutual TLS: clients must present a certificate chaining to one of these anchors (NIAP PPCA FCS_TLSS_EXT.2). When absent, the listener does server-auth TLS only (FCS_TLSS_EXT.1) and authentication falls to the existing bcrypt/RBAC login.

Fields

cert: PathBuf

Path to the server certificate chain (PEM, leaf first).

key: PathBuf

Path to the server private key (PKCS#8 or RSA/SEC1 PEM).

client_ca: Option<PathBuf>

Optional PEM bundle of CAs trusted to sign client certificates. Presence enables mutual TLS (client-cert required).

Trait Implementations

impl Clone for TlsConfig

fn clone(&self) -> TlsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TlsConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.