Skip to main content

TLS Client

Creating a TLS client is exactly the same process as a TCP client, except that an extra TlsClientConfig is required. For more details about TLS support and the configuration options, check the TLS general information page.

Examples​

Certificate chain configuration​

let tls_config = TlsClientConfig::full_pki(
    Some("test.com".to_string()),
    Path::new("./certs/ca_chain/ca_cert.pem"),
    Path::new("./certs/ca_chain/client_cert.pem"),
    Path::new("./certs/ca_chain/client_key.pem"),
    None, // no password
    MinTlsVersion::V1_2,
)?;

let channel = spawn_tls_client_task(
    HostAddr::ip(IpAddr::V4(Ipv4Addr::LOCALHOST), 802),
    1,
    default_retry_strategy(),
    tls_config,
    DecodeLevel::new(
        AppDecodeLevel::DataValues,
        FrameDecodeLevel::Nothing,
        PhysDecodeLevel::Nothing,
    ),
    Some(Box::new(LoggingListener)),
);

Self-signed certificate configuration​

let tls_config = TlsClientConfig::self_signed(
    Path::new("./certs/self_signed/entity2_cert.pem"),
    Path::new("./certs/self_signed/entity1_cert.pem"),
    Path::new("./certs/self_signed/entity1_key.pem"),
    None, // no password
    MinTlsVersion::V1_2,
)?;

let channel = spawn_tls_client_task(
    HostAddr::ip(IpAddr::V4(Ipv4Addr::LOCALHOST), 802),
    1,
    default_retry_strategy(),
    tls_config,
    DecodeLevel::new(
        AppDecodeLevel::DataValues,
        FrameDecodeLevel::Nothing,
        PhysDecodeLevel::Nothing,
    ),
    Some(Box::new(LoggingListener)),
);