Function load_rustls_config

https-tls/acme-letsencrypt/src/main.rs:183–196

(cert: Certificate)

}

fn load_rustls_config(cert: Certificate) -> eyre::Result<rustls::ServerConfig> {
    // init server config builder with safe defaults
    let config = rustls::ServerConfig::builder().with_no_client_auth();

    // convert ACME-obtained private key
    let private_key = PrivateKeyDer::Pkcs8(PrivatePkcs8KeyDer::from(cert.private_key_der()?));

    // convert ACME-obtained certificate chain
    let cert_chain = CertificateDer::pem_slice_iter(cert.certificate().as_bytes())
        .flatten()
        .collect();

    Ok(config.with_single_cert(cert_chain, private_key)?)
}