Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature hyper-rustls requires dynamically linked CA certificates #92

Closed
enfipy opened this issue Jun 7, 2020 · 2 comments · Fixed by #95
Closed

Feature hyper-rustls requires dynamically linked CA certificates #92

enfipy opened this issue Jun 7, 2020 · 2 comments · Fixed by #95

Comments

@enfipy
Copy link

enfipy commented Jun 7, 2020

Even if I add egg-mode like this:

egg-mode = { version = "0.14", features = ["hyper-rustls"], default-features = false }

I run into the following errors:

WARN rustls::session            > Sending fatal alert BadCertificate
ERROR server::error             > Network error: error trying to connect: invalid certificate: UnknownIssuer

I figured out that hyper-rustls started to use rustls-native-certs from v18.

How can it be fixed without adding CA certs to the root?

@QuietMisdreavus
Copy link
Collaborator

It looks like hyper-rustls version 0.20 introduced a webpki-tokio feature to use compiled-in root certificates from webpki-roots instead of rustls-native-certs. We could expose that feature in egg-mode to allow you to use those certificates instead of using the root certs on your system. I'll give this a shot and add it in if it works.

@QuietMisdreavus
Copy link
Collaborator

Update: i got it working locally, so i've opened #95 to enable this. I'll make sure to merge it before cutting the next release with the raw stuff in it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants