Joseph Doherty cdfad420bb fix(client-rust): apply TLS guard to GalaxyClient and add CLI strict flag ...

Extract the TLS-without-CA guard into a shared `build_tls_config` helper
in options.rs so both GatewayClient and GalaxyClient use identical logic.
GalaxyClient previously had no guard, so TLS-without-CA produced a cryptic
tonic handshake failure; it now returns the same actionable InvalidEndpoint
error. The guard message notes that a server-name override affects SNI but
does not pin trust. Add --require-certificate-validation to ConnectionArgs
in the CLI binary. Add a mirror test for GalaxyClient in tests/tls.rs.

2026-06-01 07:28:16 -04:00

..

client_behavior.rs

Resolve Client.Rust-022..029: MalformedReply, correlation ids, clippy

2026-05-24 08:50:15 -04:00

proto_fixtures.rs

Rust client: port stream-alarms and acknowledge-alarm + fix stream-events family + 8MB Windows stack

2026-05-24 06:45:46 -04:00

tls.rs

fix(client-rust): apply TLS guard to GalaxyClient and add CLI strict flag

2026-06-01 07:28:16 -04:00