Should Certificate be constructable with just a TrustAnchor? #2951
seanmonstar
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
I discussed this briefly I think on Discord, but this feels like a better place. Should
reqwest::tls::Certificatehave an ability to be constructed from just a trust anchor, instead of requiring a full certificate? The default TLS backend,rustls, only requires the trust anchor information, which is a smaller amount of data, and whywebpki-rootsexists. But currently,Certificateconstructors require the full data, so users need to depend onwebpki-root-certsinstead.There's already precedent in reqwest that some of the
Certificateconstructors might not be usable with a different backend, and they are documented as such. So, we could do the same withCertificate::from_trust_anchor()(or whatever the name is).It also wouldn't mess with client certificates, because those are
reqwest::tls::Identity.Beta Was this translation helpful? Give feedback.
All reactions