Struct BoringTlsConnectorConfig 

pub struct BoringTlsConnectorConfig<'a> {

    pub session_domain: Option<&'a TlsClientSessionDomain>,
    pub session_profile_scope: Option<&'a TlsSessionProfileScope>,
    pub client_handshake: Option<&'a ClientHandshake>,
    pub alpn: Option<&'a TlsAlpn>,
    pub versions: Option<&'a TlsSupportedVersions>,
    pub verify: Option<&'a TlsServerVerify>,
    pub keylog: Option<&'a TlsKeyLog>,
    pub server_name: Option<&'a TlsServerName>,
    pub store_chain: Option<&'a TlsStoreServerCertChain>,
    pub store_server_hello: Option<&'a TlsStoreServerHello>,
    pub client_auth: Option<&'a TlsClientAuth>,
    pub server_cert_pins: Option<&'a TlsServerCertPins>,
    pub server_trust: Option<&'a TlsServerTrust>,
    pub cipher_suites: Option<&'a BoringCipherSuites>,
    pub supported_groups: Option<&'a BoringSupportedGroups>,
    pub key_shares: Option<&'a BoringKeyShares>,
    pub signature_schemes: Option<&'a BoringSignatureSchemes>,
    pub grease: Option<&'a BoringGrease>,
    pub grease_signature_schemes: Option<&'a BoringGreaseSignatureSchemes>,
    pub alps: Option<&'a BoringAlps>,
    pub extension_order: Option<&'a BoringExtensionOrder>,
    pub permute_extensions: Option<&'a BoringPermuteExtensions>,
    pub unknown_values: Option<&'a BoringUnknownValues>,
    pub grease_values: Option<&'a BoringGreaseValues>,
    pub client_hello_padding: Option<&'a BoringClientHelloPadding>,
    pub legacy_extensions: Option<&'a BoringLegacyExtensions>,
    pub extension_presence: Option<&'a BoringExtensionPresence>,
    pub extension_bodies: Option<&'a BoringExtensionBodies>,
    pub requested_trust_anchors: Option<&'a BoringRequestedTrustAnchors>,
    pub cert_compression: Option<&'a BoringCertCompression>,
    pub delegated_credentials: Option<&'a BoringDelegatedCredentials>,
    pub record_size_limit: Option<&'a BoringRecordSizeLimit>,
    pub server_padding_request: Option<&'a BoringServerPaddingRequest>,
    pub encrypted_client_hello: Option<&'a BoringEncryptedClientHello>,
    pub ech_grease: Option<&'a EchGrease>,
    pub ocsp_stapling: Option<&'a BoringOcspStapling>,
    pub signed_cert_timestamps: Option<&'a BoringSignedCertTimestamps>,
    pub tls12_session_tickets: Option<&'a BoringTls12SessionTickets>,
    pub verify_cert_store: Option<Arc<BoringServerVerifyCertStore>>,
    pub min_version: Option<&'a BoringMinVersion>,
    pub max_version: Option<&'a BoringMaxVersion>,
}

Available on crate feature boring only.

Gather all the TLS extensions supported by boringssl

Fields

session_domain: Option<&'a TlsClientSessionDomain>

session_profile_scope: Option<&'a TlsSessionProfileScope>

client_handshake: Option<&'a ClientHandshake>

alpn: Option<&'a TlsAlpn>

versions: Option<&'a TlsSupportedVersions>

verify: Option<&'a TlsServerVerify>

keylog: Option<&'a TlsKeyLog>

server_name: Option<&'a TlsServerName>

store_chain: Option<&'a TlsStoreServerCertChain>

store_server_hello: Option<&'a TlsStoreServerHello>

client_auth: Option<&'a TlsClientAuth>

server_cert_pins: Option<&'a TlsServerCertPins>

server_trust: Option<&'a TlsServerTrust>

cipher_suites: Option<&'a BoringCipherSuites>

supported_groups: Option<&'a BoringSupportedGroups>

key_shares: Option<&'a BoringKeyShares>

signature_schemes: Option<&'a BoringSignatureSchemes>

grease: Option<&'a BoringGrease>

grease_signature_schemes: Option<&'a BoringGreaseSignatureSchemes>

alps: Option<&'a BoringAlps>

extension_order: Option<&'a BoringExtensionOrder>

permute_extensions: Option<&'a BoringPermuteExtensions>

unknown_values: Option<&'a BoringUnknownValues>

grease_values: Option<&'a BoringGreaseValues>

client_hello_padding: Option<&'a BoringClientHelloPadding>

legacy_extensions: Option<&'a BoringLegacyExtensions>

extension_presence: Option<&'a BoringExtensionPresence>

extension_bodies: Option<&'a BoringExtensionBodies>

requested_trust_anchors: Option<&'a BoringRequestedTrustAnchors>

cert_compression: Option<&'a BoringCertCompression>

delegated_credentials: Option<&'a BoringDelegatedCredentials>

record_size_limit: Option<&'a BoringRecordSizeLimit>

server_padding_request: Option<&'a BoringServerPaddingRequest>

encrypted_client_hello: Option<&'a BoringEncryptedClientHello>

ech_grease: Option<&'a EchGrease>

ocsp_stapling: Option<&'a BoringOcspStapling>

signed_cert_timestamps: Option<&'a BoringSignedCertTimestamps>

tls12_session_tickets: Option<&'a BoringTls12SessionTickets>

verify_cert_store: Option<Arc<BoringServerVerifyCertStore>>

min_version: Option<&'a BoringMinVersion>

max_version: Option<&'a BoringMaxVersion>

Implementations

impl<'a> BoringTlsConnectorConfig<'a>

pub fn from_extensions(ext: &'a Extensions) -> BoringTlsConnectorConfig<'a>

Gather these extension pieces from ext in a single pass.

Generated by #[derive(FromExtensions)]. Each field uses the same lookup as Extensions::get_ref (newest-wins, walks wrappers and the parent chain), but the store is traversed only once, even for nested group fields, whose candidates are folded into the same pass. A field shaped Option<(&'a T, usize)> (or Option<(Arc<T>, usize)>) also captures the entry’s traversal rank, 0 is the newest value seen, growing for older ones, so ranks order fields by recency.

pub fn is_empty(&self) -> bool

Whether none of these extension pieces is present.

Generated by #[derive(FromExtensions)], so it covers every field.

impl BoringTlsConnectorConfig<'_>

pub fn pool_id(&self) -> Option<TlsPoolId>

Compact identity of request-level overrides, or None for the baseline.

Explicit defaults remain distinct from absence. Equivalent settings compare independently of the TLS implementation. Shared stores and log sinks reuse connections while retaining their original instance identity. Connector defaults are fixed for the lifetime of the pool and must not be layered onto this request-only view.

pub fn session_scope(&self) -> Option<TlsPoolId>

Identity of compatible client sessions: security settings, the non-GREASE cipher list, the session domain and the optional profile scope. Other wire settings, diagnostic sinks, chain retention and the separately keyed server name are not part of it, so sessions resume across those variants.

pub fn peer_matches_name(&self, leaf: &CertificateDer<'_>, name: &Host) -> bool

Whether the leaf of a connection authenticated under this configuration is also valid for name, including pins scoped to that name.

pub fn authenticates_server(&self) -> bool

Whether a successful handshake establishes the configured server identity.

Trait Implementations

impl<'a> Clone for BoringTlsConnectorConfig<'a>

fn clone(&self) -> BoringTlsConnectorConfig<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl TryFrom<BoringTlsConnectorConfig<'_>> for TlsConnectorData

type Error = Box<dyn Error + Sync + Send>

The type returned in the event of a conversion error.

fn try_from( value: BoringTlsConnectorConfig<'_>, ) -> Result<TlsConnectorData, <TlsConnectorData as TryFrom<BoringTlsConnectorConfig<'_>>>::Error>

Performs the conversion.

impl TryFrom<BoringTlsConnectorConfig<'_>> for TlsConnectorContextBuilder

type Error = Box<dyn Error + Sync + Send>

The type returned in the event of a conversion error.

fn try_from( value: BoringTlsConnectorConfig<'_>, ) -> Result<TlsConnectorContextBuilder, <TlsConnectorContextBuilder as TryFrom<BoringTlsConnectorConfig<'_>>>::Error>

Performs the conversion.