build_ipc_server_tls_config

Function build_ipc_server_tls_config 

Source
pub async fn build_ipc_server_tls_config<P: AsRef<Path>>(
    cert_path: P,
) -> Result<ServerConfig, GenericError>
Expand description

Builds an exact shared-certificate mTLS server configuration for Datadog Agent IPC.

The server requires every client to present a leaf certificate whose DER encoding exactly matches the configured IPC certificate and to prove possession of its private key with the handshake signature. The server presents the same certificate as its identity. Certificate chains and CA trust do not broaden the accepted client identity, and no overlap between different certificates is accepted.

ยงErrors

If the IPC TLS identity file cannot be read or does not contain a valid PEM-encoded certificate and private key, an error is returned.