customize roots

[flisky]

Describe the feature

There're three ways in hyper-rustls to customize roots:

• rustls-native-certs
• webpki-roots
• rustls-platform-verifier

aws-smithy-experimental only uses rustls-native-certs, but rustls-native-certs doesn't work on ios & android. And there's no way to customize?

refer: #575

Use Case

upgrade to hyper 1.x and use aws-sdk on mobile platforms

Proposed Solution

Add more feature flags to choose cert providers?

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

A note for the community

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue, please leave a comment

[ysaito1001]

Hi @flisky, thank you for submitting an enhancement request.

We are aware of the need to configure the roots and will ensure that is indeed configurable as we roll out hyper 1.x.

Note that when we do roll it out, it could be that configuration is achieved by customizing an HttpConnector, and what we provide might be documentation in that case.

[aajtodd]

Support for supplying your own custom trust store was implemented in the upgrade to hyper 1.x. The developer guide now documents how to setup your own trust store. Going to close this, please open a new issue if you encounter any issues.

[github-actions]

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.