Method from_files

crates/openshell-server/src/tls.rs:62–77

Create a new TLS acceptor from certificate and key files. When `client_ca_path` is `Some` and `require_client_auth` is `true`, the TLS handshake rejects connections that do not present a valid client certificate signed by the given CA. When `client_ca_path` is `Some` and `require_client_auth` is `false`, client certificates are validated against the CA but not required. Clients may connect witho

(
        cert_path: &Path,
        key_path: &Path,
        client_ca_path: Option<&Path>,
        require_client_auth: bool,
    )

    ///
    /// Returns an error if the certificate, key, or CA files cannot be read or parsed.
    pub fn from_files(
        cert_path: &Path,
        key_path: &Path,
        client_ca_path: Option<&Path>,
        require_client_auth: bool,
    ) -> Result<Self> {
        let config = build_server_config(cert_path, key_path, client_ca_path, require_client_auth)?;
        Ok(Self {
            config: Arc::new(ArcSwap::from(config)),
            cert_path: cert_path.to_path_buf(),
            key_path: key_path.to_path_buf(),
            client_ca_path: client_ca_path.map(Path::to_path_buf),
            require_client_auth,
            reload_spawned: Arc::new(AtomicBool::new(false)),
        })
    }

    /// Re-read certificates from the same paths used at construction and
    /// atomically swap the active config.