Skip to main content

Module cert

Module cert 

Available on crate features crypto and std only.
Expand description

Certificate generation helpers.

Provides a backend pluggable self-signed certificate generator. The actual crypto provider is selected by cargo feature:

  • boring: generate using BoringSSL (via rama-boring), for stacks that already link boringssl and do not want a second crypto provider.
  • aws-lc / ring: generate using rcgen.

When several providers are enabled, boring is preferred. With none enabled, self_signed_server_auth returns an error.

Modules§

boringboring
BoringSSL-backed self-signed certificate generation (feature boring).
rcgenaws-lc or ring
rcgen-backed self-signed certificate generation (feature aws-lc / ring).

Structs§

SelfSignedData
Data used to configure the generation of a self-signed certificate.

Enums§

SelfSignedKeyKind
Key algorithm to use when generating a self-signed key pair.

Functions§

self_signed_server_authboring
Generate a self-signed server certificate (leaf signed by a generated CA).