Rustls Issue

[drusellers]

Looks like I'm seeing the following error when I'm calling QDrant client on an Alpine box.

Call CryptoProvider::install_default() before this point to select a provider manually, or make sure exactly one of the 'aws-lc-rs' and 'ring' features is enabled.

I'm using qdrant-client = "1.16.0"

My Cargo.toml looks like

[package]
name = "traind"
version = "0.1.0"
edition = "2024"

[dependencies]
axum = { version = "0.8.4", features = ["http1", "json", "matched-path", "tokio", "macros", "form", "query", "tracing", "original-uri"] }
tokio = { version = "1", features = ["full"] }
serde = { version = "1.0.219", features = ["derive"] }
clap = { version = "4.5.45", features = ["derive"] }
modyne = { version = "0.3.0", features = ["derive"] }
aws-config = { version = "1.1.7", features = ["behavior-version-latest", "rustls"] }
aws-sdk-s3 = { version = "1.115.0", default-features = false, features = ["rustls"] }
aws-sdk-dynamodb = { version = "1.90.0", default-features = false, features = ["rustls"] }
aws-sdk-sqs = { version = "1.90.0", default-features = false, features = ["rustls"] }

# Ensure consistent crypto provider for rustls
rustls = { version = "0.23", features = ["ring"] }
dotenvy = "0.15.7"
rand = "0.9.2"
tower-http = { version = "0.6.6", features = [
    "cors",
    "compression-gzip",
    "compression-deflate",
    "trace",
] }
tracing = "0.1.41"
tracing-subscriber = { version = "0.3", features = ["env-filter", "fmt", "json", "time"] }
anyhow = "1.0.99"
thiserror = "2.0.16"
serde_json = "1.0.143"
jsonwebtoken = { version = "10.2.0", features = ["rust_crypto"] }
arc-swap = "1.7.1"
schemars = { version = "1.0.5", features = ["derive"] }
base64 = "0.22.1"
reqwest = { version = "0.12.24", default-features = false, features = ["native-tls", "json"] }
openssl-sys = { version = "0.9", features = ["vendored"] }
cliform = "0.1.0"
infer = "0.19.0"
mime_guess = "2.0.5"
open = "5.3.3"
confy = "2.0.0"
reqwest-middleware = { version = "0.4.2", features = ["json"] }
reqwest-tracing = "0.5.8"
qdrant-client = "1.16.0"
http = "1.4.0"
indoc = "2.0.7"
modelsocket = "0.2.1"
directories = "6.0.0"
slack-morphism = { version = "2.17", features = ["axum"] }
jiff = { version = "0.2.16", features = ["serde"] }
futures = "0.3"

[nazq]

Solutions (in order of preference):

1. Install crypto provider at app startup (Recommended)
   fn main() {
   // Install ring as the default crypto provider before any TLS usage
   rustls::crypto::ring::default_provider()
   .install_default()
   .expect("Failed to install rustls crypto provider");
   // ... rest of app
   }
2. Use aws-lc-rs feature instead of ring
   If you want to align with AWS SDK's preferred provider:
   rustls = { version = "0.23", default-features = false, features =
   ["aws_lc_rs"] }
   Then in main:
   rustls::crypto::aws_lc_rs::default_provider()
   .install_default()
   .expect("Failed to install rustls crypto provider");

[nazq]

But fair point, my PR already uses tls-ring explicitly which should help, but you
would still need to install the provider at runtime since rustls 0.23 requires explicit provider installation.

[drusellers]

TY i was under the impression that rustls could detect it. That's what I get for trusting the darn 🤖

[nazq]

I hit this myself in another proj some time back. It's my best recollection for how I got round it.