Module client

Expand description

Items for use in a client.

Modules§

danger: Dangerous configuration that should be audited and used with extreme care.

ClientConfig: Common configuration for (typically) all connections made by a program.
ClientConnection: This represents a single TLS client connection.
ClientConnectionBuilder: Builder for ClientConnection values.
ClientSessionCommon: Common data for stored client sessions.
ClientSessionKey: Identifies a security context and server in the ClientSessionStore interface.
ClientSessionMemoryCache: An implementer of ClientSessionStore that stores everything in memory.
ClientSide: State associated with a client connection.
CredentialRequest: Context from the server to inform client credential selection.
EchConfig: Configuration for performing encrypted client hello.
EchGreaseConfig: Configuration for GREASE Encrypted Client Hello.
Resumption: Configuration for how/when a client is allowed to resume a previous session.
ServerVerifierBuilderwebpki: A builder for configuring a webpki server certificate verifier.
Tls12Session: A stored TLS 1.2 client session value.
Tls13Session: A stored TLS 1.3 client session value.
WantsClientCert: A config builder state where the caller needs to supply whether and how to provide a client certificate.
WebPkiServerVerifierwebpki: Default ServerVerifier, see the trait impl for more information.
WriteEarlyData: Allows writing of early data in resumed TLS 1.3 connections.

EarlyDataError: Errors that may arise when encrypting early (RTT-0) data
EchMode: Controls how Encrypted Client Hello (ECH) is used in a client handshake.
EchStatus: An enum representing ECH offer status.
Tls12Resumption: What mechanisms to support for resuming a TLS 1.2 session.
VerifierBuilderErrorwebpki: An error that can occur when building a certificate verifier.

ClientCredentialResolver: A trait for the ability to choose a certificate chain and private key for the purposes of client authentication.
ClientSessionStore: Client session data store for possible future resumption.

verify_identity_signed_by_trust_anchorwebpki: Verify that the end-entity certificate end_entity is a valid server cert and chains to at least one of the trust anchors in the roots RootCertStore.
verify_server_namewebpki: Verify that the end_entity has an alternative name matching the server_name.