#tls #ssl #native #windows #openssl #macos #schannel

native-tls

A wrapper over a platform’s native TLS implementation

11 releases

0.2.4 Mar 6, 2020
0.2.3 Apr 27, 2019
0.2.2 Oct 22, 2018
0.2.0 Jun 26, 2018
0.1.0 Nov 9, 2016
Download history 73038/week @ 2019-12-10 65376/week @ 2019-12-17 40289/week @ 2019-12-24 49004/week @ 2019-12-31 75085/week @ 2020-01-07 74416/week @ 2020-01-14 80831/week @ 2020-01-21 78872/week @ 2020-01-28 78492/week @ 2020-02-04 73320/week @ 2020-02-11 72628/week @ 2020-02-18 74493/week @ 2020-02-25 81753/week @ 2020-03-03 85916/week @ 2020-03-10 91585/week @ 2020-03-17 83429/week @ 2020-03-24

298,165 downloads per month
Used in 1,526 crates (191 directly)

MIT/Apache

78KB
2K SLoC

rust-native-tls

CircleCI Build Status

Documentation

An abstraction over platform-specific TLS implementations.

Specifically, this crate uses SChannel on Windows (via the schannel crate), Secure Transport on macOS (via the security-framework crate), and OpenSSL (via the openssl crate) on all other platforms.

Installation

# Cargo.toml
[dependencies]
native-tls = "0.2"

Usage

An example client looks like:

extern crate native_tls;

use native_tls::TlsConnector;
use std::io::{Read, Write};
use std::net::TcpStream;

fn main() {
    let connector = TlsConnector::new().unwrap();

    let stream = TcpStream::connect("google.com:443").unwrap();
    let mut stream = connector.connect("google.com", stream).unwrap();

    stream.write_all(b"GET / HTTP/1.0\r\n\r\n").unwrap();
    let mut res = vec![];
    stream.read_to_end(&mut res).unwrap();
    println!("{}", String::from_utf8_lossy(&res));
}

To accept connections as a server from remote clients:

extern crate native_tls;

use native_tls::{Identity, TlsAcceptor, TlsStream};
use std::fs::File;
use std::io::{Read};
use std::net::{TcpListener, TcpStream};
use std::sync::Arc;
use std::thread;

fn main() {
    let mut file = File::open("identity.pfx").unwrap();
    let mut identity = vec![];
    file.read_to_end(&mut identity).unwrap();
    let identity = Identity::from_pkcs12(&identity, "hunter2").unwrap();

    let acceptor = TlsAcceptor::new(identity).unwrap();
    let acceptor = Arc::new(acceptor);

    let listener = TcpListener::bind("0.0.0.0:8443").unwrap();

    fn handle_client(stream: TlsStream<TcpStream>) {
        // ...
    }

    for stream in listener.incoming() {
        match stream {
            Ok(stream) => {
                let acceptor = acceptor.clone();
                thread::spawn(move || {
                    let stream = acceptor.accept(stream).unwrap();
                    handle_client(stream);
                });
            }
            Err(e) => { /* connection failed */ }
        }
    }
}

License

rust-native-tls is primarily distributed under the terms of both the MIT license and the Apache License (Version 2.0), with portions covered by various BSD-like licenses.

See LICENSE-APACHE, and LICENSE-MIT for details.

Dependencies

~0–770KB
~17K SLoC