Struct native_tls::TlsConnectorBuilder

source · [−]

pub struct TlsConnectorBuilder { /* private fields */ }

Expand description

A builder for TlsConnectors.

Implementations

source

impl TlsConnectorBuilder

source

pub fn identity(&mut self, identity: Identity) -> &mut TlsConnectorBuilder

Sets the identity to be used for client certificate authentication.

source

pub fn min_protocol_version(
&mut self,
protocol: Option<Protocol>
) -> &mut TlsConnectorBuilder

Sets the minimum supported protocol version.

A value of None enables support for the oldest protocols supported by the implementation.

Defaults to Some(Protocol::Tlsv10).

source

pub fn max_protocol_version(
&mut self,
protocol: Option<Protocol>
) -> &mut TlsConnectorBuilder

Sets the maximum supported protocol version.

A value of None enables support for the newest protocols supported by the implementation.

Defaults to None.

source

pub fn add_root_certificate(
&mut self,
cert: Certificate
) -> &mut TlsConnectorBuilder

Adds a certificate to the set of roots that the connector will trust.

The connector will use the system’s trust root by default. This method can be used to add to that set when communicating with servers not trusted by the system.

Defaults to an empty set.

source

pub fn disable_built_in_roots(
&mut self,
disable: bool
) -> &mut TlsConnectorBuilder

Controls the use of built-in system certificates during certificate validation.

Defaults to false – built-in system certs will be used.

source

pub fn danger_accept_invalid_certs(
&mut self,
accept_invalid_certs: bool
) -> &mut TlsConnectorBuilder

Controls the use of certificate validation.

Defaults to false.

You should think very carefully before using this method. If invalid certificates are trusted, any certificate for any site will be trusted for use. This includes expired certificates. This introduces significant vulnerabilities, and should only be used as a last resort.

source

pub fn use_sni(&mut self, use_sni: bool) -> &mut TlsConnectorBuilder

Controls the use of Server Name Indication (SNI).

Defaults to true.

source

pub fn danger_accept_invalid_hostnames(
&mut self,
accept_invalid_hostnames: bool
) -> &mut TlsConnectorBuilder

Controls the use of hostname verification.

Defaults to false.

Warning

You should think very carefully before using this method. If invalid hostnames are trusted, any valid certificate for any site will be trusted for use. This introduces significant vulnerabilities, and should only be used as a last resort.

source