filip/Stalwart
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Use rustls-platform-verifier for TLS certificate verification instead of webpki + Use aws-lc for cryptographic operations instead of ring

Browse Source
This commit is contained in:
Maurus Decimus
2026-04-04 12:23:30 +02:00
parent c44d3da6dc
commit 71f54f7e84
80 changed files with 1921 additions and 2198 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
crates/coordinator/Cargo.toml
View File

@@ -10,10 +10,10 @@ registry = { path = "../registry" }
trc = { path = "../trc" }
futures = { version = "0.3", optional = true }
tokio = { version = "1.47", features = ["sync", "fs", "io-util"] }
async-nats = { version = "0.44", default-features = false, features = ["server_2_10", "server_2_11", "ring"], optional = true }
async-nats = { version = "0.47", default-features = false, features = ["server_2_10", "server_2_11", "aws-lc-rs"], optional = true }
zenoh = { version = "1.3.4", default-features = false, features = ["auth_pubkey", "transport_multilink", "transport_compression", "transport_quic", "transport_tcp", "transport_tls", "transport_udp"], optional = true }
rdkafka = { version = "0.38", features = ["cmake-build"], optional = true }
redis = { version = "0.32", features = [ "tokio-comp", "tokio-rustls-comp", "tls-rustls-insecure", "tls-rustls-webpki-roots", "cluster-async"], optional = true }
rdkafka = { version = "0.39", features = ["cmake-build"], optional = true }
redis = { version = "1.1", features = [ "tokio-comp", "tokio-rustls-comp", "tls-rustls-insecure", "tls-rustls", "cluster-async"], optional = true }
[features]
nats = ["async-nats"]

4
crates/coordinator/src/backend/nats/mod.rs
View File

@@ -44,9 +44,7 @@ impl NatsPubSub {
opts = opts.user_and_password(user.to_string(), pass.to_string());
} else if let Some(credentials) = config.credentials.secret().await?.map(|v| v.into_owned())
{
opts = opts
.credentials(&credentials)
.map_err(|err| format!("Failed to parse Nats credentials: {}", err))?;
opts = opts.token(credentials);
}
async_nats::connect_with_options(config.addresses.into_inner(), opts)