Skip to content

Commit c6f4514

Browse files
committed
Bundle root certificates at compile time
In order to make https connections for authorisation, the reqwuest library needs root certificates. In the minimal container used, these are not present in the OS so authorisation fails. By bundling them at compile time (via the webpki-roots crate) the native certificates are not required. This usually presents a maintenance burden as the application needs to be recompiled if root CA certificates change, however in the case where the application is running in a container, the container would need to be rebuilt in either case to include the new certificates.
1 parent b0b527e commit c6f4514

File tree

2 files changed

+12
-63
lines changed

2 files changed

+12
-63
lines changed

Cargo.lock

Lines changed: 11 additions & 62 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

Cargo.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ opentelemetry-otlp = "0.27.0"
2222
opentelemetry-semantic-conventions = "0.27.0"
2323
opentelemetry-stdout = "0.27.0"
2424
opentelemetry_sdk = { version = "0.27.1", features = ["rt-tokio"] }
25-
reqwest = { version = "0.12.7", features = ["json", "rustls-tls-native-roots"], default-features = false }
25+
reqwest = { version = "0.12.7", features = ["json", "rustls-tls"], default-features = false }
2626
serde = { version = "1.0.210", features = ["derive"] }
2727
sqlx = { version = "0.8.2", features = ["runtime-tokio", "sqlite"] }
2828
tokio = { version = "1.42.0", features = ["full"] }

0 commit comments

Comments
 (0)