pub fn build_tls_acceptor(
config: &TlsConfig,
hsm: Option<&Arc<HsmContext>>,
) -> Result<TlsAcceptor, KipukaError>Expand description
Build a TlsAcceptor from the Kipuka TLS configuration.
When hsm is Some and tls.key_file starts with pkcs11:, the
TLS server key is backed by the HSM — all handshake signatures are
performed via PKCS#11 C_Sign and the private key never leaves the
HSM boundary.