78 lines
2.5 KiB
Markdown
78 lines
2.5 KiB
Markdown
# tokio-rustls
|
|
[](https://github.com/rustls/tokio-rustls/actions)
|
|
[](https://crates.io/crates/tokio-rustls)
|
|
[](https://github.com/rustls/tokio-rustls/blob/main/LICENSE-MIT)
|
|
[](https://github.com/rustls/tokio-rustls/blob/main/LICENSE-APACHE)
|
|
[](https://docs.rs/tokio-rustls)
|
|
|
|
Asynchronous TLS/SSL streams for [Tokio](https://tokio.rs/) using
|
|
[Rustls](https://github.com/rustls/rustls).
|
|
|
|
### Basic Structure of a Client
|
|
|
|
```rust
|
|
use std::sync::Arc;
|
|
use tokio::net::TcpStream;
|
|
use tokio_rustls::rustls::{ClientConfig, OwnedTrustAnchor, RootCertStore, ServerName};
|
|
use tokio_rustls::TlsConnector;
|
|
|
|
// ...
|
|
|
|
let mut root_cert_store = RootCertStore::empty();
|
|
root_cert_store.add_server_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.0.iter().map(|ta| {
|
|
OwnedTrustAnchor::from_subject_spki_name_constraints(
|
|
ta.subject,
|
|
ta.spki,
|
|
ta.name_constraints,
|
|
)
|
|
}));
|
|
let config = ClientConfig::builder()
|
|
.with_safe_defaults()
|
|
.with_root_certificates(root_cert_store)
|
|
.with_no_client_auth();
|
|
let connector = TlsConnector::from(Arc::new(config));
|
|
let dnsname = ServerName::try_from("www.rust-lang.org").unwrap();
|
|
|
|
let stream = TcpStream::connect(&addr).await?;
|
|
let mut stream = connector.connect(dnsname, stream).await?;
|
|
|
|
// ...
|
|
```
|
|
|
|
### Client Example Program
|
|
|
|
See [examples/client](examples/client/src/main.rs). You can run it with:
|
|
|
|
```sh
|
|
cd examples/client
|
|
cargo run -- hsts.badssl.com
|
|
```
|
|
|
|
### Server Example Program
|
|
|
|
See [examples/server](examples/server/src/main.rs). You can run it with:
|
|
|
|
```sh
|
|
cd examples/server
|
|
cargo run -- 127.0.0.1:8000 --cert mycert.der --key mykey.der
|
|
```
|
|
|
|
### License & Origin
|
|
|
|
This project is licensed under either of
|
|
|
|
* Apache License, Version 2.0, ([LICENSE-APACHE](LICENSE-APACHE) or
|
|
https://www.apache.org/licenses/LICENSE-2.0)
|
|
* MIT license ([LICENSE-MIT](LICENSE-MIT) or
|
|
https://opensource.org/licenses/MIT)
|
|
|
|
at your option.
|
|
|
|
This started as a fork of [tokio-tls](https://github.com/tokio-rs/tokio-tls).
|
|
|
|
### Contribution
|
|
|
|
Unless you explicitly state otherwise, any contribution intentionally submitted
|
|
for inclusion in tokio-rustls by you, as defined in the Apache-2.0 license, shall be
|
|
dual licensed as above, without any additional terms or conditions.
|