tokio-rustls

Asynchronous TLS/SSL streams for Tokio using Rustls.

Basic Structure of a Client

use webpki::DNSNameRef;
use rustls::ClientConfig;
use tokio_rustls::ClientConfigExt;

// ...

let mut config = ClientConfig::new();
config.root_store.add_server_trust_anchors(&webpki_roots::TLS_SERVER_ROOTS);
let config = Arc::new(config);
let domain = DNSNameRef::try_from_ascii_str("www.rust-lang.org").unwrap();

TcpStream::connect(&addr)
	.and_then(|socket| config.connect_async(domain, socket))

// ...

Client Example Program

See examples/client.rs. You can run it with:

cargo run --example client hsts.badssl.com

Currently on Windows the example client reads from stdin and writes to stdout using blocking I/O. Until this is fixed, do something this on Windows:

echo | cargo run --example client hsts.badssl.com

Server Example Program

See examples/server.rs. You can run it with:

cargo run --example server -- 127.0.0.1 --cert mycert.der --key mykey.der

License & Origin

tokio-rustls is primarily distributed under the terms of both the MIT license and the Apache License (Version 2.0), with portions covered by various BSD-like licenses.

This started as a fork of tokio-tls.