ctz / rustls / 393

96%

Pull #110

travis-ci

More flexible and safer client authentication API.

Stop making "no client authentication" the silent default, because that
is not a safe default. Instead, require the user to make an explicit
choice of whether/how to do client authentication.

Previously, the default client authentication setting was the least
safe, so there's was no need to make the ability to plug in a client
auth implementation a “dangerous” feature. With this change, the
ability to provide one's own client authentication implementation
is available in the default configuration.

Some servers need more flexibility in doing client authentication than
was previously provided. Now all the choices for client authentication
are made by `ClientCertVerifier`.

4057 of 6198 branches covered (65.46%)

178 of 178 new or added lines in 10 files covered. (100.0%)

6370 of 6763 relevant lines covered (94.19%)

6721.7 hits per line