Struct CertificateSelection 

pub struct CertificateSelection<'ssl>(/* private fields */);

Available on crate feature boring only.

Certificate-selection state, available only while the selection callback runs. Copy request metadata before moving it into an asynchronous operation. Borrowed metadata prevents mutating the SSL while that metadata is still used:

use rama_boring::ssl::CertificateSelection;
fn change(mut selection: CertificateSelection<'_>) {
    let algorithms = selection.peer_verify_algorithms();
    selection.ssl_mut().clear_certificates();
    assert!(!algorithms.is_empty());
}

Implementations

impl CertificateSelection<'_>

pub fn ssl(&self) -> &SslRef

Borrows the connection being configured by this selection callback.

pub fn ssl_mut(&mut self) -> &mut SslRef

Mutably borrows the connection to configure credentials or handshake policy.

pub fn peer_verify_algorithms(&self) -> &[SslSignatureAlgorithm]

Signature algorithms the peer can verify. Empty if the peer omitted them.

This corresponds to SSL_get0_peer_verify_algorithms.

pub fn certificate_types(&self) -> &[u8]

Client certificate types requested by the server. Empty for TLS 1.3 and on servers; use signature algorithms for TLS 1.3.

This corresponds to SSL_get0_certificate_types.

pub fn requested_ca_names(&self) -> impl Iterator<Item = &[u8]>

DER-encoded CA distinguished names requested by the server, in wire order. Empty on servers or when no CA names were sent. These are selection hints, not trust anchors.

This corresponds to SSL_get0_server_requested_CAs.