Skip to content

rtcompat: remove Letsencrypt/Rustls kludge

Closes #2004 (closed)

Makes some minor adjustments to the custom rustls Verifier in rtcompat to remove an unnecessary workaround and delete some related code/files that are no longer needed.

TLDR; it's not necessary to instantiate a client::WebPkiServerVerifier here, so the kludge that was used to get it's builder to succeed by adding an unused Letsencrypt root certificate isn't needed and can be removed. The relevant methods the Verifier needs (verify_tls12_signature and verify_tls12_signature) can be called directly via the rustls::crypto crate, and the Verifier just needs an instance of the CryptoProvider's WebPkiSupportedAlgorithms.

For reference, the relevant bits of source code in rustls crate are here:

Edited by retort-dev

Merge request reports

Loading