Module tls 

Structs

TlsOptions

The TLS settings of a worker or CLI, as given on the command line.

Enums

NameSource 🔒

Track what the SAN is authenticated against (based on user parameters).

Constants

CERTIFICATE_LABEL 🔒

PEM label of an X.509 certificate (other blocks, e.g. private keys, are ignored).

Functions

certificates 🔒

Parse every PEM certificate in pem, in file order.

client_config 🔒

Build the client-side TLS configuration from a file of trust anchors.

default_key_path 🔒

The private key path implied by a certificate path (same name, .key extension).

describe_served_chain 🔒

Parse Orchestrator certificate and warn for possibly malformed certificates.

host_of 🔒

Get the hostname/address part of an address:port value

pinned_self_signed_name 🔒

Get the name pinned in self-signed certificates.

server_identity

Load the orchestrator’s TLS identity (certificate + private key).

server_name 🔒

Determine the name to authenticate the orchestrator as.

subject_alternative_names 🔒

Get the SAN values (hostnames and IP addresses) a certificate is valid for.

to_ip 🔒

Convert the raw bytes of an IP address SAN into an IpAddr.