Ignore `RUSTSEC-2025-0007` (for now) and use rustls' aws-lc-rs feature where possible (!172) · Merge requests · Arch Linux / signstar

Merged David Runge requested to merge chore/rustls-ureq into main 1 month ago

Feb 22, 2025

feat: Rely on `aws-lc-rs` as default crypto provider for `rustls` · f52204b7

David Runge authored 1 month ago

The `ring` feature for the `rustls` crate is no longer feasible now that
the upstream project is unmaintained.
Switch the direct use of `rustls` to rely on the default features, which
include the `aws-lc-rs` crypto provider (an AWS maintained fork of
OpenSSL).
Allow the OpenSSL license to be able to use the `aws-lc-rs` feature.

Fixes: #152


Signed-off-by: David Runge <dvzrv@archlinux.org>

Verified

f52204b7

chore(deny.toml): Ignore `RUSTSEC-2025-0007` (for now) · 0cd63db7
David Runge authored 1 month ago
```
Fixes: #151


Signed-off-by: David Runge <dvzrv@archlinux.org>
```
Verified

0cd63db7

Admin message

Ignore `RUSTSEC-2025-0007` (for now) and use rustls' aws-lc-rs feature where possible

Merge request reports

Activity