Move TLS related errors to a separate enum

src/client.rs

@@ -26,17 +26,20 @@ mod encryption {
     /// TCP stream switcher (plain/TLS).
     pub type AutoStream = StreamSwitcher<TcpStream, TlsStream<TcpStream>>;
 
-    use crate::{error::Result, stream::Mode};
+    use crate::{
+        error::{Result, TlsError},
+        stream::Mode,
+    };
 
     pub fn wrap_stream(stream: TcpStream, domain: &str, mode: Mode) -> Result<AutoStream> {
         match mode {
             Mode::Plain => Ok(StreamSwitcher::Plain(stream)),
             Mode::Tls => {
-                let connector = TlsConnector::builder().build()?;
+                let connector = TlsConnector::builder().build().map_err(TlsError::Native)?;
                 connector
                     .connect(domain, stream)
                     .map_err(|e| match e {
-                        TlsHandshakeError::Failure(f) => f.into(),
+                        TlsHandshakeError::Failure(f) => TlsError::Native(f).into(),
                         TlsHandshakeError::WouldBlock(_) => {
                             panic!("Bug: TLS handshake not blocked")
                         }
@@ -58,7 +61,10 @@ mod encryption {
     /// TCP stream switcher (plain/TLS).
     pub type AutoStream = StreamSwitcher<TcpStream, StreamOwned<ClientSession, TcpStream>>;
 
-    use crate::{error::Result, stream::Mode};
+    use crate::{
+        error::{Result, TlsError},
+        stream::Mode,
+    };
 
     pub fn wrap_stream(stream: TcpStream, domain: &str, mode: Mode) -> Result<AutoStream> {
         match mode {
@@ -70,7 +76,7 @@ mod encryption {
 
                     Arc::new(config)
                 };
-                let domain = DNSNameRef::try_from_ascii_str(domain)?;
+                let domain = DNSNameRef::try_from_ascii_str(domain).map_err(TlsError::Dns)?;
                 let client = ClientSession::new(&config, domain);
                 let stream = StreamOwned::new(client, stream);
 

src/error.rs

@@ -11,7 +11,6 @@ pub type Result<T> = result::Result<T, Error>;
 
 /// Possible WebSocket errors.
 #[derive(Error, Debug)]
-#[non_exhaustive]
 pub enum Error {
     /// WebSocket connection closed normally. This informs you of the close.
     /// It's not an error as such and nothing wrong happened.
@@ -39,18 +38,12 @@ pub enum Error {
     /// underlying connection and you should probably consider them fatal.
     #[error("IO error: {0}")]
     Io(#[from] io::Error),
-    /// TLS error
+    /// TLS error.
-    #[cfg(feature = "native-tls")]
+    ///
-    #[error("TLS (native-tls) error: {0}")]
+    /// Note that this error variant is enabled unconditionally even if no TLS feature is enabled,
-    TlsNative(#[from] native_tls_crate::Error),
+    /// to provide a feature-agnostic API surface.
-    /// TLS error
+    #[error("TLS error: {0}")]
-    #[cfg(feature = "rustls-tls")]
+    TlsNative(#[from] TlsError),
-    #[error("TLS (rustls) error: {0}")]
-    TlsRustls(#[from] rustls::TLSError),
-    /// DNS name resolution error.
-    #[cfg(feature = "rustls-tls")]
-    #[error("Invalid DNS name: {0}")]
-    Dns(#[from] webpki::InvalidDNSNameError),
     /// - When reading: buffer capacity exhausted.
     /// - When writing: your message is bigger than the configured max message size
     ///   (64MB by default).
@@ -251,3 +244,25 @@ pub enum UrlError {
     #[error("No path/query in URL")]
     NoPathOrQuery,
 }
+
+/// TLS errors.
+///
+/// Note that even if you enable only the rustls-based TLS support, the error at runtime could still
+/// be `Native`, as another crate in the dependency graph may enable native TLS support.
+#[allow(missing_copy_implementations)]
+#[derive(Error, Debug)]
+#[non_exhaustive]
+pub enum TlsError {
+    /// Native TLS error.
+    #[cfg(feature = "native-tls")]
+    #[error("native-tls error: {0}")]
+    Native(#[from] native_tls_crate::Error),
+    /// Rustls error.
+    #[cfg(feature = "rustls-tls")]
+    #[error("rustls error: {0}")]
+    Rustls(#[from] rustls::TLSError),
+    /// DNS name resolution error.
+    #[cfg(feature = "rustls-tls")]
+    #[error("Invalid DNS name: {0}")]
+    Dns(#[from] webpki::InvalidDNSNameError),
+}