Struct RustlsTlsProvider 

pub struct RustlsTlsProvider { /* private fields */ }

Available on crate feature quic and crate feature rustls and crate feature std and (crate features aws-lc or ring) only.

Rustls QUIC configuration factory with an explicitly supplied cryptographic provider.

The adapter still requires the ring or aws-lc feature for its packet crypto. Supplying a provider here does not install or use Rustls’s process-wide default.

Implementations

impl RustlsTlsProvider

pub fn new(crypto: Arc<CryptoProvider>) -> RustlsTlsProvider

Select Rustls’s native cryptographic provider for this adapter.

This backend-specific constructor intentionally accepts the Rustls type re-exported by rama_tls_rustls::dep::rustls. Backend-neutral callers use default_tls_provider or QuicClientConfigProvider instead.

Trait Implementations

impl Clone for RustlsTlsProvider

fn clone(&self) -> RustlsTlsProvider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RustlsTlsProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl KeyProvider for RustlsTlsProvider

type Header = Box<dyn HeaderKey>

The header-protection key this provider yields.

type Packet = Box<dyn PacketKey>

The packet-protection key this provider yields.

fn initial_keys( &self, version: Version, dcid: &[u8], side: Side, ) -> Result<InitialKeys<<RustlsTlsProvider as KeyProvider>::Header, <RustlsTlsProvider as KeyProvider>::Packet>, CaptureError>

Initial keys for dcid under version, as side opens them: a server opens the client’s Initials, a client the server’s.

impl QuicClientConfigProvider for RustlsTlsProvider

fn client_config( &self, config: &TlsClientConfig, options: TlsOptions, ) -> Result<ClientConfig, TlsConfigError>

Apply the final TLS settings and client handshake policy in options. Fresh clients must neither consult nor populate session-ticket stores, including stores supplied through native configuration hooks.

fn peer_matches_name( &self, extensions: &Extensions, leaf: &CertificateDer<'_>, name: &Host, ) -> bool

Whether the peer leaf of a connection authenticated under the effective configuration in extensions is also valid for name, including any pins scoped to it. Providers that cannot tell return false; a pin scoped to name on an intermediate or root never matches the leaf, so it fails closed.

fn session_defaults(&self) -> Option<Extensions>

Optional connector-local backend session state shared by sibling configurations. These extensions hold cache metadata; they must not replace TLS security settings. The default retains each native configuration’s own session state.

fn prepare_client_config( &self, _policy: &TlsClientConfig, _options: TlsOptions, _peer: Host, _handshake: ClientHandshake, ) -> Result<Option<ClientConfig>, TlsConfigError>

Prepare peer-bound native TLS state without connection I/O. Prepared configurations bypass ordinary caches because their first native session belongs to this peer; retries obtain fresh ephemeral state.

impl QuicServerConfigProvider for RustlsTlsProvider

fn server_config( &self, config: &TlsServerConfig, options: TlsOptions, ) -> Result<ServerConfig, TlsConfigError>

impl TlsClientConfigProvider for RustlsTlsProvider

fn pool_id(&self, extensions: &Extensions) -> Option<TlsPoolId>

Identity of request overrides, before connector defaults are applied.

fn pool_classifier(&self) -> ReuseKey

Identity of Self::pool_id: providers with equal classifiers must derive equal pool ids for every request. A provider without state of its own returns ReuseKey::of::<Self>().

fn authenticates_server(&self, extensions: &Extensions) -> bool

Whether the effective configuration establishes the server identity.

fn authenticates_origin(&self, extensions: &Extensions, origin: &Host) -> bool

Whether this effective policy authenticates the requested HTTP origin.