Repository files navigation

This crate allows you to use the Windows CNG private keys together withrustlsfor both the client and server sides of the TLS channel.

Rationale: In many situations, it is required to use non-exportable private certificate chainsfrom the Windows certificate store instead of the external PKCS8 file.rustls-cng can use such chains in therustls context.

Supported key/certificate types:RSA,ECDSA/ECDH. Supported elliptic curves: secp256r1 (prime256v1), secp384r1, secp521r1.

Documentation.

The main struct to use inrustls-cng isCngSigningKey, which can be constructedfrom the low-levelNCryptKey handle. The instance ofCngSigningKey can then beused inrustls in the customServerCredentialResolver orClientCredentialResolver implementation.

See theexamples directory for usage examples.

Licensed under the MIT or Apache licenses (LICENSE-MIT orLICENSE-APACHE)