Struct SslConnector 

pub struct SslConnector(/* private fields */);

Available on crate features boring and crypto and std only.

A type which wraps client-side streams in a TLS session.

OpenSSL’s default configuration is highly insecure. This connector manages the OpenSSL structures, configuring cipher suites, session options, hostname verification, and more.

OpenSSL’s built in hostname verification is used when linking against OpenSSL 1.0.2 or 1.1.0, and a custom implementation is used when linking against OpenSSL 1.0.1.

Implementations

impl SslConnector

pub fn builder(method: SslMethod) -> Result<SslConnectorBuilder, ErrorStack>

Creates a new builder for TLS connections.

The default configuration is subject to change, and is currently derived from Python.

pub fn no_default_verify_builder( method: SslMethod, ) -> Result<SslConnectorBuilder, ErrorStack>

Same as Self::builder but WITHOUT calling set_default_verify_paths.

builder eagerly parses the entire OS trust store into the context’s cert store on every call. Callers that supply their own verify store (e.g. a shared, parse-once store) or disable verification entirely pay that cost for nothing — the parsed store is immediately replaced or never consulted. This variant skips it; the caller is responsible for installing a cert store (e.g. via set_cert_store / set_cert_store_ref) when verification is enabled.

pub fn setup_connect<S>( &self, domain: Option<&str>, stream: S, ) -> Result<MidHandshakeSslStream<S>, ErrorStack>

where S: Read + Write,

Initiates a client-side TLS session on a stream.

The domain, if given, is used for SNI and hostname verification.

pub fn connect<S>( &self, domain: Option<&str>, stream: S, ) -> Result<SslStream<S>, HandshakeError<S>>

where S: Read + Write,

Attempts a client-side TLS session on a stream.

The domain, if given, is used for SNI (if it is not an IP address) and hostname verification if enabled.

This is a convenience method which combines Self::setup_connect and MidHandshakeSslStream::handshake.

pub fn configure(&self) -> Result<ConnectConfiguration, ErrorStack>

Returns a structure allowing for configuration of a single TLS session before connection.

pub fn into_context(self) -> SslContext

Consumes the SslConnector, returning the inner raw SslContext.

pub fn context(&self) -> &SslContextRef

Returns a shared reference to the inner raw SslContext.

Trait Implementations

impl Clone for SslConnector

fn clone(&self) -> SslConnector

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SslConnector

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.