Remove vendored OpenSSL in favor of platform-native TLS

Switch to using platform-native TLS implementations:
- Windows: WinHTTP/Schannel (built-in)
- macOS: SecureTransport (built-in)
- Linux: System OpenSSL (via package manager)

This removes the vendor-openssl feature and the openssl-sys dependency,
eliminating the need to bundle OpenSSL with the binary. Users on Windows
and macOS get TLS support out of the box, while Linux users need to have
OpenSSL development libraries installed (which is common on most systems).

Closes #2004

Author: AndyBodnar

Cargo.toml

@@ -24,14 +24,13 @@ members = [
 ]
 
 [features]
-default = ["ghemoji", "regex-fancy", "trace-libgit", "vendor-openssl"]
+default = ["ghemoji", "regex-fancy", "trace-libgit"]
 ghemoji = ["gh-emoji"]
 # regex-* features are mutually exclusive.
 regex-fancy = ["syntect/regex-fancy", "two-face/syntect-fancy"]
 regex-onig = ["syntect/regex-onig", "two-face/syntect-onig"]
 timing = ["scopetime/enabled"]
 trace-libgit = ["asyncgit/trace-libgit"]
-vendor-openssl = ["asyncgit/vendor-openssl"]
 
 [dependencies]
 anyhow = "1.0"

README.md

@@ -223,9 +223,12 @@ see [NIGHTLIES.md](./NIGHTLIES.md)
 - Minimum supported `rust`/`cargo` version: `1.82`
   - See [Install Rust](https://www.rust-lang.org/tools/install)
 
-- To build openssl dependency (see https://docs.rs/openssl/latest/openssl/)
-  - perl >= 5.12 (strawberry perl works for windows https://strawberryperl.com/)
-  - a c compiler (msvc, gcc or clang, cargo will find it)
+- TLS/SSL support uses platform-native libraries:
+  - **Windows**: Uses WinHTTP/Schannel (built-in, no additional setup needed)
+  - **macOS**: Uses SecureTransport (built-in, no additional setup needed)
+  - **Linux**: Requires system OpenSSL development libraries (e.g., `libssl-dev` on Debian/Ubuntu, `openssl-devel` on Fedora)
+
+- A C compiler is required to build native dependencies (msvc on Windows, gcc or clang on Unix)
 
 - To run the complete test suite python is required (and it must be invocable as `python`)
 

asyncgit/Cargo.toml

@@ -14,14 +14,17 @@ keywords = ["git"]
 [features]
 default = ["trace-libgit"]
 trace-libgit = []
-vendor-openssl = ["openssl-sys"]
 
 [dependencies]
 bitflags = "2"
 crossbeam-channel = "0.5"
 dirs = "6.0"
 easy-cast = "0.5"
 fuzzy-matcher = "0.3"
+# TLS is provided by platform-native libraries:
+# - Windows: WinHTTP/Schannel (built-in)
+# - macOS: SecureTransport (built-in)
+# - Linux: System OpenSSL (install via package manager)
 git2 = "0.20"
 git2-hooks = { path = "../git2-hooks", version = ">=0.6" }
 gix = { version = "0.77.0", default-features = false, features = [
@@ -31,10 +34,6 @@ gix = { version = "0.77.0", default-features = false, features = [
     "status",
 ] }
 log = "0.4"
-# git2 = { path = "../../extern/git2-rs", features = ["vendored-openssl"]}
-# git2 = { git="https://github.com/extrawurst/git2-rs.git", rev="fc13dcc", features = ["vendored-openssl"]}
-# pinning to vendored openssl, using the git2 feature this gets lost with new resolver
-openssl-sys = { version = '0.9', features = ["vendored"], optional = true }
 rayon = "1.11"
 rayon-core = "1.13"
 scopetime = { path = "../scopetime", version = "0.1" }