-
Notifications
You must be signed in to change notification settings - Fork 726
expand documentation for Certificate and PrivateKey #1301
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks, these are great improvements!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you! I think this will be helpful.
Codecov Report
@@ Coverage Diff @@
## main #1301 +/- ##
=======================================
Coverage 95.55% 95.55%
=======================================
Files 60 60
Lines 14351 14351
=======================================
Hits 13713 13713
Misses 638 638
📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more |
(Going to work around the MSRV failure with #1302, feel free to ignore.) |
this is only relevant for implementers of ClientCertVerifier or ServerCertVerifier traits, and what validation should happen should be documented on those trait's methods.
416ae2a
to
8a50c44
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks!
Some of the rustls documentation is... not that helpful to those unfamiliar with TLS and certificates. The
Certificate
andPrivateKey
types had particularly little documentation. This is my attempt to improve the situation.I've included code samples using
rustls_pemfile
. tried to give some info to quickly check "does this file I have match roughly what rustls would expect" and provide some links to more info and thercgen
crate, if a user wants to generate a new certificate or private key.