build_ipc_client_ipc_tls_config

Function build_ipc_client_ipc_tls_config 

Source
pub async fn build_ipc_client_ipc_tls_config<P: AsRef<Path>>(
    cert_path: P,
) -> Result<ClientConfig, GenericError>
Expand description

Builds an exact shared-certificate mTLS client configuration for Datadog Agent IPC.

The client accepts only a server leaf certificate whose DER encoding exactly matches the configured IPC certificate and verifies the handshake signature as proof that the server possesses its private key. The client presents the same certificate and proves possession of its private key to satisfy mandatory server-side client authentication. Certificate chains and CA trust do not broaden the accepted server identity.

ยงErrors

If the IPC TLS identity file cannot be read or does not contain a valid PEM-encoded certificate and private key, an error is returned.