Skip to content

Upgrade to rustls-platform-verifier 0.6 - #303

Merged
djc merged 2 commits into
mainfrom
platform-verifier-0.6
Jun 6, 2025
Merged

djc merged 2 commits into
mainfrom
platform-verifier-0.6

Conversation

@djc

@djc djc commented Jun 5, 2025 •

Copy link
Copy Markdown
Member

Proposed release notes

  • Seal the ConfigBuilderExt trait. This is an extension trait used to offer a more convenient server verifier configuration API. This is technically a breaking change, but we think it is unlikely that anyone has actually implemented this trait.
  • Upgrade to rustls-platform-verifier 0.6. Because the platform verifier is now initializing its root certificate store on some platforms eagerly (on initialization rather than on first use), infallible API for setting up the platform verifier has been deprecated in favor of newly added fallible API.

@djc
djc requested review from cpu and ctz June 5, 2025 12:46
Comment thread src/config.rs
/// See the documentation for [rustls-platform-verifier] for more details.
///
/// [rustls-platform-verifier]: https://docs.rs/rustls-platform-verifier
#[cfg(feature = "rustls-platform-verifier")]

@djc djc Jun 5, 2025 •

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is technically not semver compatible, since we didn't seal our extension trait. It seems unlikely that anyone actually implemented it?

Should we consider deprecating with_native_roots() to try and get more people to use the platform verifier?

@ctz ctz left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we want to seal ConfigBuilderExt? I think that would make this a non-breaking change.

@djc

djc commented Jun 5, 2025

Copy link
Copy Markdown
Member Author

Do we want to seal ConfigBuilderExt? I think that would make this a non-breaking change.

In the future, yes -- sealing it would be breaking now.

@djc
djc force-pushed the platform-verifier-0.6 branch from 97d6f1c to bd42b90 Compare June 6, 2025 09:07
@djc
djc requested a review from ctz June 6, 2025 09:08
djc added 2 commits June 6, 2025 11:11
This is technically semver-breaking, but we think it's unlikely that
anyone has actually implemented the trait.
@djc
djc force-pushed the platform-verifier-0.6 branch from bd42b90 to 60cfcc2 Compare June 6, 2025 09:11
@djc
djc enabled auto-merge June 6, 2025 09:28
@djc
djc disabled auto-merge June 6, 2025 09:29
@djc
djc merged commit aff7441 into main Jun 6, 2025
@djc
djc deleted the platform-verifier-0.6 branch June 6, 2025 09:29
@djc

djc commented Jun 6, 2025

Copy link
Copy Markdown
Member Author
  • Published hyper-rustls v0.27.7 at registry crates-io
  • [new tag] v/0.27.7 -> v/0.27.7
  • Release notes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants