Skip to content

Add Certificate::from_rustls()#1844

Closed
daxpedda wants to merge 1 commit intoseanmonstar:masterfrom
daxpedda:from-rustls
Closed

Add Certificate::from_rustls()#1844
daxpedda wants to merge 1 commit intoseanmonstar:masterfrom
daxpedda:from-rustls

Conversation

@daxpedda
Copy link
Copy Markdown
Contributor

Introducing a new method to Certificate: from_rustls(). This allows adding OwnedTrustAnchor directly, for example from webpki-roots.

Certificates added through this method will be ignored on native-tls clients.

Fixes #1843.

@seanmonstar
Copy link
Copy Markdown
Owner

It's currently by-design that we don't expose publicly either native-tls or rustls types in the API, so we can upgrade to new versions internally without that being "breaking changes".

@daxpedda
Copy link
Copy Markdown
Contributor Author

Right, I didn't consider this, I guess I could replicate the interface of OwnedTrustAnchor::from_subject_spki_name_constraints?

@daxpedda
Copy link
Copy Markdown
Contributor Author

CI fails because some MSRV issue with base64, unrelated to this PR.

@daxpedda
Copy link
Copy Markdown
Contributor Author

daxpedda commented Apr 2, 2024

#1843 was addressed by #2232.

@daxpedda daxpedda closed this Apr 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Only use webpki certs despite enabled rustls-tls-native-roots feature

2 participants