Struct BoringTlsProvider 

pub struct BoringTlsProvider;

Available on crate features boring and quic and std only.

BoringSSL QUIC configuration factory.

Implementations

impl BoringTlsProvider

pub fn prepare_fresh_client_config( &self, config: &TlsClientConfig, peer: Host, ) -> Result<ClientConfig, TlsConfigError>

Prepare the first native TLS session for peer without sending packets.

The first dial consumes the prepared SSL object; address retries create fresh sibling sessions. All use full handshakes, without reading or retaining tickets. This configuration belongs to peer and must not be shared through a cache that omits that identity.

Trait Implementations

impl Clone for BoringTlsProvider

fn clone(&self) -> BoringTlsProvider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for BoringTlsProvider

impl Debug for BoringTlsProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for BoringTlsProvider

fn default() -> BoringTlsProvider

Returns the “default value” for a type.

impl KeyProvider for BoringTlsProvider

type Header = Box<dyn HeaderKey>

The header-protection key this provider yields.

type Packet = Box<dyn PacketKey>

The packet-protection key this provider yields.

fn initial_keys( &self, version: Version, dcid: &[u8], side: Side, ) -> Result<InitialKeys<<BoringTlsProvider as KeyProvider>::Header, <BoringTlsProvider as KeyProvider>::Packet>, CaptureError>

Initial keys for dcid under version, as side opens them: a server opens the client’s Initials, a client the server’s.

impl QuicClientConfigProvider for BoringTlsProvider

fn prepare_client_config( &self, policy: &TlsClientConfig, options: TlsOptions, peer: Host, handshake: ClientHandshake, ) -> Result<Option<ClientConfig>, TlsConfigError>

Prepare peer-bound native TLS state without connection I/O. Prepared configurations bypass ordinary caches because their first native session belongs to this peer; retries obtain fresh ephemeral state.

fn session_defaults(&self) -> Option<Extensions>

Optional connector-local backend session state shared by sibling configurations. These extensions hold cache metadata; they must not replace TLS security settings. The default retains each native configuration’s own session state.

fn client_config( &self, config: &TlsClientConfig, options: TlsOptions, ) -> Result<ClientConfig, TlsConfigError>

Apply the final TLS settings and client handshake policy in options. Fresh clients must neither consult nor populate session-ticket stores, including stores supplied through native configuration hooks.

fn peer_matches_name( &self, extensions: &Extensions, leaf: &CertificateDer<'_>, name: &Host, ) -> bool

Whether the peer leaf of a connection authenticated under the effective configuration in extensions is also valid for name, including any pins scoped to it. Providers that cannot tell return false; a pin scoped to name on an intermediate or root never matches the leaf, so it fails closed.

impl QuicServerConfigProvider for BoringTlsProvider

fn server_config( &self, config: &TlsServerConfig, options: TlsOptions, ) -> Result<ServerConfig, TlsConfigError>

impl TlsClientConfigProvider for BoringTlsProvider

fn pool_id(&self, extensions: &Extensions) -> Option<TlsPoolId>

Identity of request overrides, before connector defaults are applied.

fn pool_classifier(&self) -> ReuseKey

Identity of Self::pool_id: providers with equal classifiers must derive equal pool ids for every request. A provider without state of its own returns ReuseKey::of::<Self>().

fn authenticates_server(&self, extensions: &Extensions) -> bool

Whether the effective configuration establishes the server identity.

fn authenticates_origin(&self, extensions: &Extensions, origin: &Host) -> bool

Whether this effective policy authenticates the requested HTTP origin.