Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support configuring a CA certificates bundle #290

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Commits on Apr 27, 2023

  1. Support configuring a CA certificates bundle

    The trust_cert_ca() config option configures one specific trusted CA certificate. However, there are two downsides:
    - it requires a file path, so an in-memory certificate would have to be written to a temporary file
    - it supports loading exactly one certificate, so if you need to load an entire bundle (e.g. the AWS RDS bundle) you're out of luck
    
    The trust_cert_ca_bundle() method implemented here solves both of these issues by taking a bundle of PEM-encoded CA certificates in a Vec<u8> and adding all of them to the TLS context.
    For cases where a CA bundle needs to be loaded from disk, users can of course simply read the file on their end and pass the contents to trust_cert_ca_bundle.
    main-- committed Apr 27, 2023
    Configuration menu
    Copy the full SHA
    3d16596 View commit details
    Browse the repository at this point in the history