Struct TlsClientConfig 

pub struct TlsClientConfig(/* private fields */);

Available on crate feature tls only.

A backend agnostic builder for the common TLS configs.

It holds a set of fine grained config extensions (e.g. TlsAlpn, TlsServerVerify) and exposes typed setters for the settings both TLS backends support. Backend crates add setters for their backend-specific pieces via extension traits (RustlsClientConfigExt or BoringServerConfigExt).

Implementations

impl TlsClientConfig

pub fn with_alpn_policy(self, policy: AlpnPolicy) -> TlsClientConfig

Available on crate feature boring only.

Configure application protocol agreement for HTTP connections. Strict mode requires ALPN for HTTP/2 whether selected explicitly or by fallback. Without an override, explicit HTTP/2 targets may proceed without ALPN; HTTP/3 requires ALPN. HTTP/1 retains its legacy no-ALPN behavior. Out-of-band HTTP/3 requires a supporting QUIC TLS backend.

pub fn set_alpn_policy(&mut self, policy: AlpnPolicy) -> &mut TlsClientConfig

Available on crate feature boring only.

Configure application protocol agreement for HTTP connections. Strict mode requires ALPN for HTTP/2 whether selected explicitly or by fallback. Without an override, explicit HTTP/2 targets may proceed without ALPN; HTTP/3 requires ALPN. HTTP/1 retains its legacy no-ALPN behavior. Out-of-band HTTP/3 requires a supporting QUIC TLS backend.

pub fn with_client_handshake(self, mode: ClientHandshake) -> TlsClientConfig

Available on crate feature boring only.

Select the session offer for new connections. Ticket retention and reuse of established connections remain independent.

pub fn set_client_handshake( &mut self, mode: ClientHandshake, ) -> &mut TlsClientConfig

Available on crate feature boring only.

Select the session offer for new connections. Ticket retention and reuse of established connections remain independent.

pub fn with_session_profile_scope( self, scope: TlsSessionProfileScope, ) -> TlsClientConfig

Available on crate feature boring only.

Add a stable emulation profile identity to TLS session and connection reuse. Server identity and the effective security policy remain mandatory.

pub fn set_session_profile_scope( &mut self, scope: TlsSessionProfileScope, ) -> &mut TlsClientConfig

Available on crate feature boring only.

Add a stable emulation profile identity to TLS session and connection reuse. Server identity and the effective security policy remain mandatory.

pub fn new() -> TlsClientConfig

Available on crate feature boring only.

Create an empty config.

pub fn default_http() -> TlsClientConfig

Available on crate feature boring only.

Create a default TlsClientConfig that enables:

• ALPN: H2, http1.1
• Keylogger: KeyLogIntent::Environment

pub fn write_to(&self, extensions: &Extensions)

Available on crate feature boring only.

Transfer this config’s pieces onto extensions (appending, so they override existing entries of the same type — newest-wins). Use this to transfer the tls config to e.g. request extensions

pub fn alpn(&self) -> Option<TlsAlpn>

Available on crate feature boring only.

Return the configured ALPN offer, if one was set explicitly.

pub fn with_alpn( self, protocols: SmallVec<[ApplicationProtocol; 2]>, ) -> TlsClientConfig

Available on crate feature boring only.

Set the ALPN protocols to offer.

pub fn set_alpn( &mut self, protocols: SmallVec<[ApplicationProtocol; 2]>, ) -> &mut TlsClientConfig

Available on crate feature boring only.

Set the ALPN protocols to offer.

pub fn with_alpn_http_auto(self) -> TlsClientConfig

Available on crate feature boring only.

Offer HTTP/2 and HTTP/1.1 via ALPN.

pub fn set_alpn_http_auto(&mut self) -> &mut TlsClientConfig

Available on crate feature boring only.

Offer HTTP/2 and HTTP/1.1 via ALPN.

pub fn with_alpn_http_1(self) -> TlsClientConfig

Available on crate feature boring only.

Offer HTTP/1.1 only via ALPN.

pub fn set_alpn_http_1(&mut self) -> &mut TlsClientConfig

Available on crate feature boring only.

Offer HTTP/1.1 only via ALPN.

pub fn with_alpn_http_2(self) -> TlsClientConfig

Available on crate feature boring only.

Offer HTTP/2 only via ALPN.

pub fn set_alpn_http_2(&mut self) -> &mut TlsClientConfig

Available on crate feature boring only.

Offer HTTP/2 only via ALPN.

pub fn with_server_name(self, server_name: Host) -> TlsClientConfig

Available on crate feature boring only.

Set the server identity used for certificate verification.

A DNS identity is also sent as SNI. An IP identity is matched against an iPAddress subject alternative name and is not sent as SNI. Overrides the identity the connector would otherwise derive from the transport authority host. When this config is installed as a tunnel connector’s dedicated base, it also overrides [TlsTunnel::server_identity]. Top-level origin request extensions are not applied to a proxy-side tunnel handshake.

pub fn set_server_name(&mut self, server_name: Host) -> &mut TlsClientConfig

Available on crate feature boring only.

Set the server identity used for certificate verification.

A DNS identity is also sent as SNI. An IP identity is matched against an iPAddress subject alternative name and is not sent as SNI. Overrides the identity the connector would otherwise derive from the transport authority host. When this config is installed as a tunnel connector’s dedicated base, it also overrides [TlsTunnel::server_identity]. Top-level origin request extensions are not applied to a proxy-side tunnel handshake.

pub fn with_server_verify(self, mode: ServerVerifyMode) -> TlsClientConfig

Available on crate feature boring only.

Set how the server certificate is verified.

pub fn set_server_verify( &mut self, mode: ServerVerifyMode, ) -> &mut TlsClientConfig

Available on crate feature boring only.

Set how the server certificate is verified.

pub fn with_server_cert_pins(self, pins: TlsServerCertPins) -> TlsClientConfig

Available on crate feature boring only.

Require the server leaf certificate to match an applicable pin set.

With ServerVerifyMode::Auto, normal certificate verification must also succeed. With ServerVerifyMode::Disable, applicable pins are the only certificate check.

pub fn set_server_cert_pins( &mut self, pins: TlsServerCertPins, ) -> &mut TlsClientConfig

Available on crate feature boring only.

Require the server leaf certificate to match an applicable pin set.

With ServerVerifyMode::Auto, normal certificate verification must also succeed. With ServerVerifyMode::Disable, applicable pins are the only certificate check.

pub fn with_server_cert_chain_policy( self, policy: impl Into<DynTlsServerCertChainPolicy>, ) -> TlsClientConfig

Available on crate feature boring only.

Reject server certificate chains that policy refuses.

Enforced with every trust source and also with ServerVerifyMode::Disable. Without verification the policy only sees the chain the server chose to present, so it cannot stop an attacker who presents another. Resumed sessions are re-checked by the BoringSSL backend only. See [TlsServerCertChainPolicy].

Replaces any previously configured chain policy. To combine checks, implement a policy that invokes each check and rejects on any error. With rustls, adding a policy under Disable also enables handshake signature verification using the configured crypto provider.

pub fn set_server_cert_chain_policy( &mut self, policy: impl Into<DynTlsServerCertChainPolicy>, ) -> &mut TlsClientConfig

Available on crate feature boring only.

Reject server certificate chains that policy refuses.

Enforced with every trust source and also with ServerVerifyMode::Disable. Without verification the policy only sees the chain the server chose to present, so it cannot stop an attacker who presents another. Resumed sessions are re-checked by the BoringSSL backend only. See [TlsServerCertChainPolicy].

Replaces any previously configured chain policy. To combine checks, implement a policy that invokes each check and rejects on any error. With rustls, adding a policy under Disable also enables handshake signature verification using the configured crypto provider.

pub fn try_with_server_trust_anchors( self, certificates: impl IntoIterator<Item = CertificateDer<'static>>, ) -> Result<TlsClientConfig, Box<dyn Error + Sync + Send>>

Available on crate feature boring only.

Replace the default server trust anchors with certificates.

The certificates are used only with ServerVerifyMode::Auto, and a backend-specific verifier or store takes precedence.

pub fn try_set_server_trust_anchors( &mut self, certificates: impl IntoIterator<Item = CertificateDer<'static>>, ) -> Result<&mut TlsClientConfig, Box<dyn Error + Sync + Send>>

Available on crate feature boring only.

Replace the default server trust anchors with certificates.

The certificates are used only with ServerVerifyMode::Auto, and a backend-specific verifier or store takes precedence.

pub fn with_server_trust(self, trust: TlsServerTrust) -> TlsClientConfig

Available on crate feature boring only.

Set the complete server trust policy.

pub fn set_server_trust( &mut self, trust: TlsServerTrust, ) -> &mut TlsClientConfig

Available on crate feature boring only.

Set the complete server trust policy.

pub fn try_with_extra_server_trust_anchors( self, certificates: impl IntoIterator<Item = CertificateDer<'static>>, ) -> Result<TlsClientConfig, Box<dyn Error + Sync + Send>>

Available on crate feature boring only.

Add certificates to the configured server trust roots.

Without another trust setting, the certificates extend the default native roots. This composes with Self::with_webpki_roots.

pub fn try_set_extra_server_trust_anchors( &mut self, certificates: impl IntoIterator<Item = CertificateDer<'static>>, ) -> Result<&mut TlsClientConfig, Box<dyn Error + Sync + Send>>

Available on crate feature boring only.

Add certificates to the configured server trust roots.

Without another trust setting, the certificates extend the default native roots. This composes with Self::with_webpki_roots.

pub fn with_webpki_roots(self) -> TlsClientConfig

Available on crate feature boring only.

Use Rama’s bundled Mozilla (CCADB) roots instead of native roots.

Replaces custom trust anchors; additional trust anchors are retained.

pub fn set_webpki_roots(&mut self) -> &mut TlsClientConfig

Available on crate feature boring only.

Use Rama’s bundled Mozilla (CCADB) roots instead of native roots.

Replaces custom trust anchors; additional trust anchors are retained.

pub fn with_platform_verifier(self) -> TlsClientConfig

Available on crate feature boring only.

Let the operating system verify server certificates.

Replaces custom trust anchors; additional trust anchors are retained. See ServerTrustSource::Platform.

pub fn set_platform_verifier(&mut self) -> &mut TlsClientConfig

Available on crate feature boring only.

Let the operating system verify server certificates.

Replaces custom trust anchors; additional trust anchors are retained. See ServerTrustSource::Platform.

pub fn with_supported_versions( self, versions: Vec<ProtocolVersion>, ) -> TlsClientConfig

Available on crate feature boring only.

Set the supported protocol versions.

pub fn set_supported_versions( &mut self, versions: Vec<ProtocolVersion>, ) -> &mut TlsClientConfig

Available on crate feature boring only.

Set the supported protocol versions.

pub fn with_keylog(self, intent: KeyLogIntent) -> TlsClientConfig

Available on crate feature boring only.

Set the keylog intent.

pub fn set_keylog(&mut self, intent: KeyLogIntent) -> &mut TlsClientConfig

Available on crate feature boring only.

Set the keylog intent.

pub fn with_client_auth(self, client_auth: ClientAuth) -> TlsClientConfig

Available on crate feature boring only.

Set the client certificate authentication material (mTLS).

pub fn set_client_auth( &mut self, client_auth: ClientAuth, ) -> &mut TlsClientConfig

Available on crate feature boring only.

Set the client certificate authentication material (mTLS).

pub fn with_store_server_cert_chain(self, store: bool) -> TlsClientConfig

Available on crate feature boring only.

Set whether the peer certificate chain is captured.

pub fn set_store_server_cert_chain( &mut self, store: bool, ) -> &mut TlsClientConfig

Available on crate feature boring only.

Set whether the peer certificate chain is captured.

pub fn with_store_server_hello(self, store: bool) -> TlsClientConfig

Available on crate feature boring only.

Set whether the server’s ServerHello is captured, for server fingerprints such as Ja4S and Ja3S. Backends that cannot observe handshake messages (rustls) report none.

pub fn set_store_server_hello(&mut self, store: bool) -> &mut TlsClientConfig

Available on crate feature boring only.

Set whether the server’s ServerHello is captured, for server fingerprints such as Ja4S and Ja3S. Backends that cannot observe handshake messages (rustls) report none.

pub fn with_overrides(self, overrides: &Extensions) -> TlsClientConfig

Available on crate feature boring only.

Layer request-specific TLS extensions over this configuration. Parent scopes are preserved and subsequent setters remain local to the result.

pub fn set_overrides(&mut self, overrides: &Extensions) -> &mut TlsClientConfig

Available on crate feature boring only.

Layer request-specific TLS extensions over this configuration. Parent scopes are preserved and subsequent setters remain local to the result.

pub fn as_extensions(&self) -> &Extensions

Available on crate feature boring only.

Trait Implementations

impl BoringClientConfigExt for TlsClientConfig

fn new_from_client_hello(hello: &ClientHello) -> TlsClientConfig

Create a new config that mimics the provided ClientHello

fn with_mimic_client_hello(self, hello: &ClientHello) -> TlsClientConfig

Layer the fingerprint pieces captured in a ClientHello onto this config.

fn set_mimic_client_hello( &mut self, hello: &ClientHello, ) -> &mut TlsClientConfig

Layer the fingerprint pieces captured in a ClientHello onto this config.

fn with_cipher_suites(self, suites: Vec<CipherSuite>) -> TlsClientConfig

Set the cipher suites to offer, in order.

fn set_cipher_suites( &mut self, suites: Vec<CipherSuite>, ) -> &mut TlsClientConfig

Set the cipher suites to offer, in order.

fn with_supported_groups(self, groups: Vec<SupportedGroup>) -> TlsClientConfig

Set the supported groups (named curves), in order.

fn set_supported_groups( &mut self, groups: Vec<SupportedGroup>, ) -> &mut TlsClientConfig

Set the supported groups (named curves), in order.

fn with_key_shares(self, groups: Vec<SupportedGroup>) -> TlsClientConfig

Send key shares for exactly these groups, in order.

fn set_key_shares( &mut self, groups: Vec<SupportedGroup>, ) -> &mut TlsClientConfig

Send key shares for exactly these groups, in order.

fn with_signature_schemes( self, schemes: Vec<SignatureScheme>, ) -> TlsClientConfig

Set the signature schemes to advertise, in order.

fn set_signature_schemes( &mut self, schemes: Vec<SignatureScheme>, ) -> &mut TlsClientConfig

Set the signature schemes to advertise, in order.

fn with_grease(self, enabled: bool) -> TlsClientConfig

Enable/disable GREASE injection.

fn set_grease(&mut self, enabled: bool) -> &mut TlsClientConfig

Enable/disable GREASE injection.

fn with_grease_signature_schemes(self, enabled: bool) -> TlsClientConfig

Lead the signature schemes with a GREASE value (default: disabled).

fn set_grease_signature_schemes( &mut self, enabled: bool, ) -> &mut TlsClientConfig

Lead the signature schemes with a GREASE value (default: disabled).

fn with_alps( self, protocols: Vec<ApplicationProtocol>, new_codepoint: bool, ) -> TlsClientConfig

Set Application-Layer Protocol Settings (ALPS).

fn set_alps( &mut self, protocols: Vec<ApplicationProtocol>, new_codepoint: bool, ) -> &mut TlsClientConfig

Set Application-Layer Protocol Settings (ALPS).

fn with_extension_order(self, order: Vec<ExtensionId>) -> TlsClientConfig

Set the ClientHello extension prefix order; unlisted extensions follow. With GREASE on, an order naming no GREASE codepoint gets the native slots, first and last; an empty order keeps the native layout.

fn set_extension_order( &mut self, order: Vec<ExtensionId>, ) -> &mut TlsClientConfig

Set the ClientHello extension prefix order; unlisted extensions follow. With GREASE on, an order naming no GREASE codepoint gets the native slots, first and last; an empty order keeps the native layout.

fn with_permute_extensions(self, enabled: bool) -> TlsClientConfig

Permute the extension order for every handshake (default: disabled), as Chromium-based browsers do.

fn set_permute_extensions(&mut self, enabled: bool) -> &mut TlsClientConfig

Permute the extension order for every handshake (default: disabled), as Chromium-based browsers do.

fn with_unknown_values(self, policy: UnknownValues) -> TlsClientConfig

What to do with listed values BoringSSL cannot negotiate (groups, signature schemes, extensions): drop them (the default), send them as listed (UnknownValues::Preserve: a server that selects or answers one fails the handshake), or fail (UnknownValues::Forbid).

fn set_unknown_values(&mut self, policy: UnknownValues) -> &mut TlsClientConfig

What to do with listed values BoringSSL cannot negotiate (groups, signature schemes, extensions): drop them (the default), send them as listed (UnknownValues::Preserve: a server that selects or answers one fails the handshake), or fail (UnknownValues::Forbid).

fn with_grease_values(self, values: GreaseValues) -> TlsClientConfig

How GREASE slots are filled: fresh per connection (the default), from a seed, or exactly the listed codepoints (GreaseValues::Pinned, for a relay that mirrors its client).

fn set_grease_values(&mut self, values: GreaseValues) -> &mut TlsClientConfig

How GREASE slots are filled: fresh per connection (the default), from a seed, or exactly the listed codepoints (GreaseValues::Pinned, for a relay that mirrors its client).

fn with_client_hello_padding(self, padding: Padding) -> TlsClientConfig

Control ClientHello padding independently of extension order. Native padding is the default; explicit modes affect connection reuse.

fn set_client_hello_padding(&mut self, padding: Padding) -> &mut TlsClientConfig

Control ClientHello padding independently of extension order. Native padding is the default; explicit modes affect connection reuse.

fn with_legacy_extensions(self, enabled: bool) -> TlsClientConfig

Send extended_master_secret and renegotiation_info even when the minimum version is TLS 1.3, as some browsers do over QUIC. Off by default.

fn set_legacy_extensions(&mut self, enabled: bool) -> &mut TlsClientConfig

Send extended_master_secret and renegotiation_info even when the minimum version is TLS 1.3, as some browsers do over QUIC. Off by default.

fn with_extension_presence( self, presence: BoringExtensionPresence, ) -> TlsClientConfig

Whether the TLS 1.3 ClientHello sends ec_point_formats and omits psk_key_exchange_modes, as some clients do. Native presence by default.

fn set_extension_presence( &mut self, presence: BoringExtensionPresence, ) -> &mut TlsClientConfig

Whether the TLS 1.3 ClientHello sends ec_point_formats and omits psk_key_exchange_modes, as some clients do. Native presence by default.

fn with_extension_bodies( self, bodies: Vec<(ExtensionId, Bytes)>, ) -> TlsClientConfig

Bodies of GREASE extensions and of preserved extensions BoringSSL does not build itself, as a mimicked ClientHello sent them.

fn set_extension_bodies( &mut self, bodies: Vec<(ExtensionId, Bytes)>, ) -> &mut TlsClientConfig

Bodies of GREASE extensions and of preserved extensions BoringSSL does not build itself, as a mimicked ClientHello sent them.

fn with_requested_trust_anchors( self, anchors: BoringRequestedTrustAnchors, ) -> TlsClientConfig

Set requested trust anchor identifiers without changing certificate verification.

fn set_requested_trust_anchors( &mut self, anchors: BoringRequestedTrustAnchors, ) -> &mut TlsClientConfig

Set requested trust anchor identifiers without changing certificate verification.

fn with_cert_compression( self, algorithms: Vec<CertificateCompressionAlgorithm>, ) -> TlsClientConfig

Set certificate compression algorithms to advertise.

fn set_cert_compression( &mut self, algorithms: Vec<CertificateCompressionAlgorithm>, ) -> &mut TlsClientConfig

Set certificate compression algorithms to advertise.

fn with_delegated_credentials( self, schemes: Vec<SignatureScheme>, ) -> TlsClientConfig

Set delegated credential signature schemes.

fn set_delegated_credentials( &mut self, schemes: Vec<SignatureScheme>, ) -> &mut TlsClientConfig

Set delegated credential signature schemes.

fn with_record_size_limit(self, limit: u16) -> TlsClientConfig

Set the record_size_limit value; 0 omits the extension.

fn set_record_size_limit(&mut self, limit: u16) -> &mut TlsClientConfig

Set the record_size_limit value; 0 omits the extension.

fn with_server_padding_request( self, bytes: impl Into<Option<u16>>, ) -> TlsClientConfig

Request experimental server certificate padding on each new SSL. None omits it; Some(0) explicitly requests zero bytes. This does not require the server to respond or change certificate verification.

fn set_server_padding_request( &mut self, bytes: impl Into<Option<u16>>, ) -> &mut TlsClientConfig

Request experimental server certificate padding on each new SSL. None omits it; Some(0) explicitly requests zero bytes. This does not require the server to respond or change certificate verification.

fn with_encrypted_client_hello(self, enabled: bool) -> TlsClientConfig

Enable/disable Encrypted ClientHello (ECH) GREASE.

fn set_encrypted_client_hello(&mut self, enabled: bool) -> &mut TlsClientConfig

Enable/disable Encrypted ClientHello (ECH) GREASE.

fn with_ech_grease(self, shape: EchGrease) -> TlsClientConfig

Select the algorithms and lengths of ECH GREASE. Enable emission with encrypted_client_hello; invalid shapes fail when building a connector.

fn set_ech_grease(&mut self, shape: EchGrease) -> &mut TlsClientConfig

Select the algorithms and lengths of ECH GREASE. Enable emission with encrypted_client_hello; invalid shapes fail when building a connector.

fn with_ocsp_stapling(self, enabled: bool) -> TlsClientConfig

Enable/disable OCSP stapling request.

fn set_ocsp_stapling(&mut self, enabled: bool) -> &mut TlsClientConfig

Enable/disable OCSP stapling request.

fn with_signed_cert_timestamps(self, enabled: bool) -> TlsClientConfig

Enable/disable signed certificate timestamps request.

fn set_signed_cert_timestamps(&mut self, enabled: bool) -> &mut TlsClientConfig

Enable/disable signed certificate timestamps request.

fn with_tls12_session_tickets(self, enabled: bool) -> TlsClientConfig

Offer TLS 1.2 session tickets via the session_ticket extension (default: enabled).

fn set_tls12_session_tickets(&mut self, enabled: bool) -> &mut TlsClientConfig

Offer TLS 1.2 session tickets via the session_ticket extension (default: enabled).

fn with_server_verify_cert_store(self, store: Arc<X509Store>) -> TlsClientConfig

Set a custom server-certificate verification store (custom CA roots).

fn set_server_verify_cert_store( &mut self, store: Arc<X509Store>, ) -> &mut TlsClientConfig

Set a custom server-certificate verification store (custom CA roots).

fn with_min_version(self, version: ProtocolVersion) -> TlsClientConfig

Set the minimum TLS version boring will negotiate.

fn set_min_version(&mut self, version: ProtocolVersion) -> &mut TlsClientConfig

Set the minimum TLS version boring will negotiate.

fn with_max_version(self, version: ProtocolVersion) -> TlsClientConfig

Cap the maximum TLS version boring will negotiate.

fn set_max_version(&mut self, version: ProtocolVersion) -> &mut TlsClientConfig

Cap the maximum TLS version boring will negotiate.

impl Clone for TlsClientConfig

fn clone(&self) -> TlsClientConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsClientConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for TlsClientConfig

fn default() -> TlsClientConfig

Returns the “default value” for a type.

impl RamaFrom<&ClientHello, RamaTlsBoringCrateMarker> for TlsClientConfig

fn rama_from(hello: &ClientHello) -> TlsClientConfig

impl RamaTryFrom<&TlsClientConfig, RamaTlsRustlsCrateMarker> for ClientConfig

type Error = Box<dyn Error + Sync + Send>

fn rama_try_from( value: &TlsClientConfig, ) -> Result<ClientConfig, <ClientConfig as RamaTryFrom<&TlsClientConfig, RamaTlsRustlsCrateMarker>>::Error>

impl RamaTryFrom<TlsClientConfig, RamaTlsRustlsCrateMarker> for ClientConfig

type Error = Box<dyn Error + Sync + Send>

fn rama_try_from( value: TlsClientConfig, ) -> Result<ClientConfig, <ClientConfig as RamaTryFrom<TlsClientConfig, RamaTlsRustlsCrateMarker>>::Error>

impl RustlsClientConfigExt for TlsClientConfig

fn with_cert_verifier( self, verifier: Arc<dyn ServerCertVerifier>, ) -> TlsClientConfig

Set a custom server certificate verifier

fn set_cert_verifier( &mut self, verifier: Arc<dyn ServerCertVerifier>, ) -> &mut TlsClientConfig

Set a custom server certificate verifier

fn with_modify_rustls_config( self, modify: impl Fn(ClientConfig) -> Result<ClientConfig, Box<dyn Error + Sync + Send>> + Send + Sync + 'static, ) -> TlsClientConfig

Take over the final rustls ClientConfig build: see ModifyRustlsClientConfig.

fn set_modify_rustls_config( &mut self, modify: impl Fn(ClientConfig) -> Result<ClientConfig, Box<dyn Error + Sync + Send>> + Send + Sync + 'static, ) -> &mut TlsClientConfig

Take over the final rustls ClientConfig build: see ModifyRustlsClientConfig.

impl TryFrom<&TlsClientConfig> for TlsConnectorData

fn try_from( value: &TlsClientConfig, ) -> Result<TlsConnectorData, <TlsConnectorData as TryFrom<&TlsClientConfig>>::Error>

Build TlsConnectorData from a TlsClientConfig by gathering its pieces (the same path the connector uses internally).

type Error = Box<dyn Error + Sync + Send>

The type returned in the event of a conversion error.

impl TryFrom<&TlsClientConfig> for TlsConnectorContextBuilder

type Error = Box<dyn Error + Sync + Send>

The type returned in the event of a conversion error.

fn try_from( value: &TlsClientConfig, ) -> Result<TlsConnectorContextBuilder, <TlsConnectorContextBuilder as TryFrom<&TlsClientConfig>>::Error>

Performs the conversion.