Struct TlsConnectorConfig 

pub struct TlsConnectorConfig {
    pub trust_store: TrustStore,
    pub key_store: Option<KeyStore>,
    pub server_name: String,
    pub hostname_verification: bool,
    pub protocol: TlsVersion,
    pub enabled_protocols: Vec<TlsVersion>,
    pub cipher_suites: Option<Vec<String>>,
    /* private fields */
}

Client-side TLS settings, as Kafka’s SslConfigs defines them.

Default gives Kafka’s defaults: the platform trust store, no client certificate, hostname verification on, ssl.protocol=TLSv1.3, ssl.enabled.protocols=TLSv1.2,TLSv1.3, and the default cipher suites.

Fields

trust_store: TrustStore

The CA certificates that verify the broker certificate.

key_store: Option<KeyStore>

The client certificate and key for mutual TLS. None presents no client certificate.

server_name: String

Explicit SNI / server-name override. An empty string uses each connection’s target hostname, including brokers learned from metadata.

hostname_verification: bool

Whether the client checks that the broker certificate names the host it connects to. Kafka’s ssl.endpoint.identification.algorithm=https (the default) turns it on, and an empty value turns it off. With the check off, the client still verifies the certificate chain.

protocol: TlsVersion

The highest protocol version that the client uses (ssl.protocol).

enabled_protocols: Vec<TlsVersion>

The protocol versions that the client offers (ssl.enabled.protocols).

cipher_suites: Option<Vec<String>>

The cipher suites that the client offers, by IANA name (ssl.cipher.suites). None offers the default suites. The client skips a known suite name that it does not implement, such as a CBC suite.

Implementations

impl TlsConnectorConfig

pub fn build(&self) -> Result<Arc<ClientConfig>, TlsConfigError>

Build a rustls::ClientConfig.

Errors

Returns TlsConfigError when a store does not load, when a protocol or cipher suite setting leaves nothing to offer, or when the platform trust store is empty or, on WebAssembly, absent.

pub fn connector(&self) -> Result<TlsConnector, TlsConfigError>

Build a ready TlsConnector.

The first call builds the client configuration, and later calls on this value or its clones reuse it while the settings stay the same. A store file that changes after the first build therefore does not change the connections, as a Kafka client reads its stores once.

Errors

Propagates Self::build failures.

Trait Implementations

impl Clone for TlsConnectorConfig

fn clone(&self) -> TlsConnectorConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsConnectorConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TlsConnectorConfig

fn default() -> Self

Returns the “default value” for a type.

impl Eq for TlsConnectorConfig

impl PartialEq for TlsConnectorConfig

fn eq(&self, other: &TlsConnectorConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for TlsConnectorConfig