Struct TlsConfigBuilder 

pub struct TlsConfigBuilder { /* private fields */ }

Builder for constructing a rustls::ServerConfig.

Enforces NIAP CA PP requirements:

• FCS_TLSS_EXT.1: TLS 1.2 minimum, no deprecated protocols
• FCS_TLSC_EXT.1: FIPS-approved cipher suites only
• FCS_COP.1: Approved cryptographic operations

Implementations

impl TlsConfigBuilder

pub fn new() -> Self

Start building a TLS configuration.

pub fn with_cert_chain(self, path: &Path) -> Result<Self, TlsError>

Load the server certificate chain from a PEM file.

pub fn with_private_key(self, path: &Path) -> Result<Self, TlsError>

Load the server private key from a PEM or PKCS#8 file.

If the file content starts with pkcs11:, returns an error indicating that the HSM crate should be used instead.

pub fn with_client_auth( self, ca_path: &Path, required: bool, ) -> Result<Self, TlsError>

Set up client certificate verification for mTLS.

pub fn build(self) -> Result<ServerConfig, TlsError>

Build the rustls::ServerConfig.

Enforces NIAP CA PP requirements:

• TLS 1.2+ only (FCS_TLSS_EXT.1)
• FIPS-approved cipher suites (FCS_TLSC_EXT.1)

pub fn from_config(config: &TlsConfig) -> Result<ServerConfig, TlsError>

Build from a TlsConfig (convenience wrapper).

Trait Implementations

impl Default for TlsConfigBuilder

fn default() -> Self

Returns the “default value” for a type.