| # tokio-rustls |
| [](https://github.com/rustls/tokio-rustls/actions) |
| [](https://crates.io/crates/tokio-rustls) |
| [](https://github.com/rustls/tokio-rustls/blob/main/LICENSE-MIT) |
| [](https://github.com/rustls/tokio-rustls/blob/main/LICENSE-APACHE) |
| [](https://docs.rs/tokio-rustls) |
| |
| Asynchronous TLS/SSL streams for [Tokio](https://tokio.rs/) using |
| [Rustls](https://github.com/rustls/rustls). |
| |
| ### Basic Structure of a Client |
| |
| ```rust |
| use std::sync::Arc; |
| use tokio::net::TcpStream; |
| use tokio_rustls::rustls::{ClientConfig, OwnedTrustAnchor, RootCertStore, ServerName}; |
| use tokio_rustls::TlsConnector; |
| |
| // ... |
| |
| let mut root_cert_store = RootCertStore::empty(); |
| root_cert_store.add_server_trust_anchors(webpki_roots::TLS_SERVER_ROOTS.0.iter().map(|ta| { |
| OwnedTrustAnchor::from_subject_spki_name_constraints( |
| ta.subject, |
| ta.spki, |
| ta.name_constraints, |
| ) |
| })); |
| let config = ClientConfig::builder() |
| .with_safe_defaults() |
| .with_root_certificates(root_cert_store) |
| .with_no_client_auth(); |
| let connector = TlsConnector::from(Arc::new(config)); |
| let dnsname = ServerName::try_from("www.rust-lang.org").unwrap(); |
| |
| let stream = TcpStream::connect(&addr).await?; |
| let mut stream = connector.connect(dnsname, stream).await?; |
| |
| // ... |
| ``` |
| |
| ### Client Example Program |
| |
| See [examples/client](examples/client/src/main.rs). You can run it with: |
| |
| ```sh |
| cd examples/client |
| cargo run -- hsts.badssl.com |
| ``` |
| |
| ### Server Example Program |
| |
| See [examples/server](examples/server/src/main.rs). You can run it with: |
| |
| ```sh |
| cd examples/server |
| cargo run -- 127.0.0.1:8000 --cert mycert.der --key mykey.der |
| ``` |
| |
| ### License & Origin |
| |
| This project is licensed under either of |
| |
| * Apache License, Version 2.0, ([LICENSE-APACHE](LICENSE-APACHE) or |
| https://www.apache.org/licenses/LICENSE-2.0) |
| * MIT license ([LICENSE-MIT](LICENSE-MIT) or |
| https://opensource.org/licenses/MIT) |
| |
| at your option. |
| |
| This started as a fork of [tokio-tls](https://github.com/tokio-rs/tokio-tls). |
| |
| ### Contribution |
| |
| Unless you explicitly state otherwise, any contribution intentionally submitted |
| for inclusion in tokio-rustls by you, as defined in the Apache-2.0 license, shall be |
| dual licensed as above, without any additional terms or conditions. |