Skip to content

Use rustls by default#1427

Merged
inickles merged 4 commits intomainfrom
inickles/rustls
Apr 27, 2026
Merged

Use rustls by default#1427
inickles merged 4 commits intomainfrom
inickles/rustls

Conversation

@inickles
Copy link
Copy Markdown
Contributor

This unsets the native-tls-vendored feature for reqwest by default for both the SDK and CLI, causing them to use the default TLS provider rustls, but makes an optional features for both packages to reenable for users who still want to use native-tls-vendored.

This feature flag to reqwest was initially added in #526. Those functions danger_accept_invalid_hostnames and danger_accept_invalid_certs seem to no longer need the native-tls-vendored feature (https://docs.rs/reqwest/0.13.2/reqwest/struct.ClientBuilder.html#method.danger_accept_invalid_hostnames), though they are now deprecated, but the same can be said for the new functions that replace them.

I've added a commit to move off the deprecated functions.

@inickles
Copy link
Copy Markdown
Contributor Author

Looks like we're hitting this issue rustls/rustls-platform-verifier#214, which was fixed in rustls-platform-verifier v0.7.0, but latest reqwest release v0.13.2 points to rustls-platform-verifier v0.6.0.

@inickles inickles force-pushed the inickles/rustls branch 2 times, most recently from 8c1c950 to 4edb9f4 Compare April 27, 2026 17:31
Copy link
Copy Markdown
Collaborator

@ahl ahl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

needs more NIST

Comment thread cli/Cargo.toml Outdated
Comment thread cli/Cargo.toml
oauth2 = { workspace = true }
oauth2-reqwest = { workspace = true }
open = { workspace = true }
oxide = { workspace = true, features = ["clap", "extras"] }
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

did you want to use this feature you added to the sdk?

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nevermind: you explicitly don't want to use this.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I wanted to expose it to users in case they wanted/needed to preserve the original behavior.

@inickles inickles merged commit 13e9ada into main Apr 27, 2026
17 checks passed
@inickles inickles deleted the inickles/rustls branch April 27, 2026 18:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants