-
Notifications
You must be signed in to change notification settings - Fork 59
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove dependency on rustls #26
Conversation
4651698
to
6116ef5
Compare
This now includes the commits from #27 to make sure these changes work. |
Updated this to depend on rustls 0.20 for the tests. Would be nice to get this merged and published to unblock downstream users (as always, I'm happy to work on that myself -- would follow a similar release process as outlined in the rustls release process -- would it be helpful to copy that in this repository?). |
Any chance to get a new release with this soon-ish, or are you waiting for some other things first? |
We definitely plan to publish a new release soon. |
rustls-native-certs used to filter out invalid certs on Unix, where certs are parsed from PEM files. rustls/rustls-native-certs#26 changed it to passing them unparsed. Now that hyper-rustls does the parsing, keep being robust to invalid certs. Implementation modified from rustls::RootCertStore::add_parsable_certificates, which cannot be used directly due to a newtype in rustls-native-certs.
Expose a simpler API that just returns a
Vec<Certificate>
, whereCertificate
is a newtype wrapper overVec<u8>
(as is done in rustls itself), relying on rustls-pemfile for PEM parsing.