Module client 

Items for use in a client.

Structs

CertificateTransparencyPolicy

Policy for enforcing Certificate Transparency.

ClientConfig

Common configuration for (typically) all connections made by a program.

ClientConnection

This represents a single TLS client connection.

ClientConnectionData

State associated with a client connection.

ClientSessionMemoryCache

An implementer of ClientSessionStore that stores everything in memory.

DangerousClientConfig

Accessor for dangerous configuration options.

HandshakeSignatureValid

Zero-sized marker type representing verification of a signature.

InvalidDnsNameError

The provided input could not be parsed because it is not a syntactically-valid DNS Name.

Resumption

Configuration for how/when a client is allowed to resume a previous session.

ServerCertVerified

Zero-sized marker type representing verification of a server cert chain.

Tls12ClientSessionValue

Tls13ClientSessionValue

WantsClientCert

A config builder state where the caller needs to supply whether and how to provide a client certificate.

WantsTransparencyPolicyOrClientCert

A config builder state where the caller needs to supply a certificate transparency policy or client certificate resolver.

WebPkiVerifier

Default ServerCertVerifier, see the trait impl for more information.

WriteEarlyData

Stub that implements io::Write and dispatches to write_early_data.

Enums

ServerName

Encodes ways a client can know the expected name of the server.

Tls12Resumption

What mechanisms to support for resuming a TLS 1.2 session.

Traits

ClientSessionStore

A trait for the ability to store client session data, so that sessions can be resumed in future connections.

ResolvesClientCert

A trait for the ability to choose a certificate chain and private key for the purposes of client authentication.

ServerCertVerifier

Something that can verify a server certificate chain, and verify signatures made by certificates.

Functions

verify_server_cert_signed_by_trust_anchor

Verify that the end-entity certificate end_entity is a valid server cert and chains to at least one of the OwnedTrustAnchor in the roots RootCertStore.

verify_server_name

Verify that the end_entity has a name or alternative name matching the server_name note: this only verifies the name and should be used in conjuction with more verification like verify_server_cert_signed_by_trust_anchor