Post

James Munns
@jamesmunns.com

In case anyone wants a template for using `rustls` for ad-hoc self signed certs (and actually an ad-hoc CA), I polished up what I was hacking on today. It also dynamically regenerates a cert every time your IPs change, which seems useful to me. github.com/OneVariable/...

github.comGitHub - OneVariable/rustls-self-signed-demo: A demo of rustls, tokio-rustls, and rcgen in one placeA demo of rustls, tokio-rustls, and rcgen in one place - OneVariable/rustls-self-signed-demo

4 reposts29 likes

James Munns
@jamesmunns.com

From the README: > Additionally, rustls will verify the "Subject Alternative Names", or SANs, are accurate when the client connects to the server. This means if you are using an IP address to connect to the server, that IP address needs to be encoded in the generated certificate.