Use rustls-platform-verifier for TLS certificate verification instead of webpki + Use aws-lc for cryptographic operations instead of ring

This commit is contained in:
Maurus Decimus
2026-04-04 12:23:30 +02:00
parent c44d3da6dc
commit 71f54f7e84
80 changed files with 1921 additions and 2198 deletions

View File

@@ -1,6 +1,6 @@
[package]
name = "common"
version = "0.15.5"
version = "0.16.0"
edition = "2024"
build = "build.rs"
@@ -19,7 +19,6 @@ sieve-rs = { version = "0.7", features = ["rkyv", "serde"] }
mail-parser = { version = "0.11", features = ["full_encoding"] }
mail-builder = { version = "0.4" }
mail-auth = { path = "/Users/me/code/mail-auth" }
mail-send = { version = "0.5", default-features = false, features = ["cram-md5", "ring", "tls12"] }
smtp-proto = { version = "0.2", features = ["rkyv"] }
dns-update = { path = "/Users/me/code/dns-update" }
calcard = { version = "0.3", features = ["rkyv"] }
@@ -28,15 +27,15 @@ parking_lot = "0.12.1"
regex = "1.7.0"
proxy-header = { version = "0.1.0", features = ["tokio"] }
arc-swap = "1.6.0"
rustls = { version = "0.23.5", default-features = false, features = ["std", "ring", "tls12"] }
rustls = { version = "0.23.5", default-features = false, features = ["std", "aws_lc_rs", "tls12"] }
rustls-pemfile = "2.0"
rustls-pki-types = { version = "1" }
ring = { version = "0.17" }
tokio = { version = "1.47", features = ["net", "macros"] }
tokio-rustls = { version = "0.26", default-features = false, features = ["ring", "tls12"] }
tokio-rustls = { version = "0.26", default-features = false, features = ["aws_lc_rs", "tls12"] }
futures = "0.3"
rcgen = "0.12"
reqwest = { version = "0.12", default-features = false, features = ["rustls-tls-webpki-roots", "http2", "stream"]}
rcgen = "0.14"
reqwest = { version = "0.13", default-features = false, features = ["rustls", "http2", "stream"]}
serde = { version = "1.0", features = ["derive"]}
serde_json = "1.0"
base64 = "0.22"
@@ -46,12 +45,12 @@ chrono = { version = "0.4", features = ["serde"] }
hyper = { version = "1.0.1", features = ["server", "http1", "http2"] }
opentelemetry = { version = "0.29" }
opentelemetry_sdk = { version = "0.29" }
opentelemetry-otlp = { version = "0.29", default-features = false, features = ["reqwest-client", "http-proto", "trace", "metrics", "logs", "internal-logs", "grpc-tonic", "tls-webpki-roots", "reqwest-rustls-webpki-roots"] }
opentelemetry-otlp = { version = "0.29", default-features = false, features = ["reqwest-client", "http-proto", "trace", "metrics", "logs", "internal-logs", "grpc-tonic", "tls-roots", "reqwest-rustls"] }
opentelemetry-semantic-conventions = { version = "0.29.0" }
prometheus = { version = "0.14", default-features = false }
imagesize = "0.14"
sha1 = "0.10"
sha2 = "0.10.6"
sha1 = "0.11"
sha2 = "0.11"
md5 = "0.8.0"
whatlang = "0.18"
idna = "1.0"
@@ -79,9 +78,9 @@ lz4_flex = { version = "0.13", features = ["frame"], default-features = false }
hickory-proto = "0.25"
nohash-hasher = "0.2.0"
quick_cache = "0.6.9"
rasn = "0.10"
rasn-cms = "0.10"
rasn-pkix = "0.10"
rasn = "0.28"
rasn-cms = "0.28"
rasn-pkix = "0.28"
sequoia-openpgp = { version = "2.0", default-features = false, features = ["crypto-rust", "allow-experimental-crypto", "allow-variable-time-crypto"] }
zxcvbn = "3.1.0"
pkcs8 = { version = "0.10.2", features = ["alloc", "std"] }