Summary
TlsConfig exists in hyperdb-api-core but is not reachable through the public Connection / AsyncConnection / ConnectionBuilder surface. There is no with_tls() / tls() method on any of them. TLS code is built and tested at the lower layer but has no on-ramp from the high-level API.
Current state
$ grep -rn "fn with_tls\|fn tls\|TlsConfig\|tls_config" \
hyperdb-api/src/connection_builder.rs \
hyperdb-api-core/src/config.rs
# (no output)
The original gap analysis (§7 of docs/RUST_API_GAP_ANALYSIS.md in the predecessor repo) called this out:
TlsConfig exists with a full builder. But the module doc says "TODO: with_tls not yet on Config" — i.e. there is no way to pass a TlsConfig to Client::connect(&Config). Config has no tls field/method. TLS code exists but isn't reachable through the public Connection/AsyncConnection or ConnectionBuilder.
Proposed work
Backwards compatibility
Purely additive — new methods, no changes to existing signatures.
Note on cert verification
Whatever default TlsConfig produces today should remain the default. This issue is about exposing TLS, not redesigning the security defaults.
Summary
TlsConfigexists inhyperdb-api-corebut is not reachable through the publicConnection/AsyncConnection/ConnectionBuildersurface. There is nowith_tls()/tls()method on any of them. TLS code is built and tested at the lower layer but has no on-ramp from the high-level API.Current state
The original gap analysis (§7 of
docs/RUST_API_GAP_ANALYSIS.mdin the predecessor repo) called this out:Proposed work
tls(TlsConfig) -> Selfmethod onConfiginhyperdb-api-core(or whichever structConnectionconsumes for its TLS settings).tls(TlsConfig) -> Selfmethod onConnectionBuilderand its async counterparts.Client::connectcall so it has effect.hyperdb-api/examples/demonstrating TLS configuration.ConnectionBuilderto mention TLS.Backwards compatibility
Purely additive — new methods, no changes to existing signatures.
Note on cert verification
Whatever default
TlsConfigproduces today should remain the default. This issue is about exposing TLS, not redesigning the security defaults.