You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I am working on a PR for this, but I want to check first if you are open for this, before opening a PR.
Rustls does not allow for a mix between Raw Public Key certificates and X.509 (for reference), so if I want to use Reqwest with RPK, I need a trait that returns a rustls::ClientConfig based on the dst: http::Uri.
This would require an extra method in the builder, but existing users won't need to change anything, except that internally there is going to be a slight overhead of pointers and implementing that new trait to the Arc<rustls::ClientConfig> to return a clone of itself regardless of the http::Uri input.
The main benefit of this is that if you know the public key of a server, you can skip CAs and talk to the server directly.
This might not be the ideal way to solve for this use case, the general solution might be customizing connection based on the Uri and possibly the HTTPS records in their DNS etc. But that is much harder for me than adding a trait for a dynamic rustls client configuration.
Note: this doesn't seem to be doable in http3 unless the same concept is added to quinn.
The text was updated successfully, but these errors were encountered:
I wouldn't want to expose anything publicly that depends on rustls. That would make us tied to version, so we couldn't upgrade rustls without it being a breaking change.
I am working on a PR for this, but I want to check first if you are open for this, before opening a PR.
Rustls does not allow for a mix between Raw Public Key certificates and X.509 (for reference), so if I want to use Reqwest with RPK, I need a trait that returns a
rustls::ClientConfig
based on thedst: http::Uri
.This would require an extra method in the builder, but existing users won't need to change anything, except that internally there is going to be a slight overhead of pointers and implementing that new trait to the
Arc<rustls::ClientConfig>
to return a clone of itself regardless of thehttp::Uri
input.The main benefit of this is that if you know the public key of a server, you can skip CAs and talk to the server directly.
This might not be the ideal way to solve for this use case, the general solution might be customizing connection based on the Uri and possibly the HTTPS records in their DNS etc. But that is much harder for me than adding a trait for a dynamic rustls client configuration.
Note: this doesn't seem to be doable inhttp3
unless the same concept is added toquinn
.The text was updated successfully, but these errors were encountered: