Handle PKCS12 files about pemfile HOT 5 CLOSED

    let openssl_pkcs12 = openssl::pkcs12::Pkcs12::from_der(server_identity_pkcs12_der.as_slice())
        .expect("Failed to parse identity file")
        .parse2(password)
        .expect("Failed to parse identity file with given password");
    let cert = openssl_pkcs12
        .cert
        .expect("No TLS certificate found in identity file");
    let ca_cert_chain: Vec<_> = openssl_pkcs12
        .ca
        .map(|stack| stack.into_iter().collect())
        .expect("At least 1 CA cert is needed");

    // TODO check validity of cert, etc
    let private_key = openssl_pkcs12
        .pkey
        .expect("No TLS private key found in identity file");

    println!(
        "Loaded cert with Subject alt names (SNA): {:?}",
        &cert.subject_alt_names().expect("Cert must have SNA field.")
    );

    // Rustls has no support for pkcs12
    let mut cert_chain = ca_cert_chain.clone();
    cert_chain.insert(0, cert);
    let an_entire_pem: Vec<_> = cert_chain
        .into_iter()
        .map(|c| c.to_pem().unwrap())
        .collect();

    let der_encoded_cert_chain: Vec<tokio_rustls::rustls::Certificate> =
        rustls_pemfile::certs(&mut an_entire_pem.concat().as_ref())
            .expect("Parse DER")
            .into_iter()
            .map(|c| tokio_rustls::rustls::Certificate(c))
            .collect();

    let der_encoded_pkey = tokio_rustls::rustls::PrivateKey(
        private_key
            .private_key_to_der()
            .expect("Unable to encode private key as DER"),
    );

    let config = ServerConfig::builder()
        .with_safe_default_cipher_suites()
        .with_safe_default_kx_groups()
        .with_protocol_versions(&[&tokio_rustls::rustls::version::TLS13])
        .expect("Unable to set TLS settings")
        .with_no_client_auth()
        .with_single_cert(der_encoded_cert_chain, der_encoded_pkey)
        .expect("Unable to build rustls ServerConfig");
    let tls_acceptor = TlsAcceptor::from(std::sync::Arc::new(config));

openssl-sys = "0.9"
openssl = "0.10"
tokio-rustls = "0.23.4"
rustls-pemfile = "1.0.2"