Remove webpki transitive dependency somehow.
Because of https://rustsec.org/advisories/RUSTSEC-2023-0052 , we want to get rid of the transitive webpki
dependency from tls-api
in arti-hyper
. The webpki
crate is unmaintained; the rustls-webpki
crate is apparently what is recommended instead.
I've opened an issue in tls-api
as https://github.com/stepancheg/rust-tls-api/issues/45.
But also see #509 and https://github.com/stepancheg/rust-tls-api/issues/44. I suspect tls-api
may be unmaintained?