[Breaking changes] Update rustls from 0.21 to 0.23
Closed this issue · 6 comments
rpxy heavily relies on rustls and its dependents. to upgrade rpxy, we need to wait for updates of the following crates based on rustls.
- rustls 0.22
- tokio-rustls 0.25.0
- rustls-pemfile 2.0.0
- quinn 0.11 (waiting for the release quinn-rs/quinn#1715 rustls/rustls#1741)
- h3 hyperium/h3#238 (comment)
- s2n-quic-rustls (alternative: stop using rustls and use s2n-tls)
- [x] hyper-rustls (waiting for rustls/hyper-rustls#234 with hyper-1.0 support, alternative: hyper-tls could be workaround)
hyper-rustls v0.26.0 is available independently from other updates.
updated hyper-rustls to v0.26 in #137
hyperium/h3#238 was merged.
@yerke Thanks! Now waiting for the release ofs2n-quic-rustls. (It already supports rustls-0.23 in its unreleased version.)
Almost done in the draft PR #156. In my environment, it works flawlessly. Moreover, in the PR, we completely redefined the certificate manager as a separated crate that can support multiple types of certificate sources in addition to the static files in the current version. Thus in the future, we can extended the function of the cert manager to support other types of certificate management, e.g., ACME-based dynamic fetching of certificates.
NOTE:s2n-quic-0.38 supporting rustls-0.23 is not released yet. Currently, we are directly using the HEAD of s2n-quic repo.
Resolved by #126