Is it feasable to replace all of the openssl code with rustls or is there not enough overlap between the crates?

[TheToddmeister]

I have only really used Rustls.
Asking becuase openssl is frustrating on windows

[sebadob]

Unfortunately, it's not. If it was, I would have done it years ago already. openssl is a hard requirement for webauthn-rs right now, which is the only reason it's in the dependencies. Because there were quite a few requests in the past and basically everyone has issues with openssl, more or less, they started to create their own rust crypto provider to fit their needs, but there is no ETA yet. They could have used ring, but this is a lot harder to get working everywhere than openssl, and rustls does not provide, what they need. To make it a bit less anoying, I overwrote it everywhere with the vendored version, which already fixes a few issues.

openssl is only used in combination with Webauthn in Rauthy. Everything else is already pure rust and as soon as they have the crypto provider ready, I will change it. openssl bugs me since years as well.

[TheToddmeister]

loved the response.
It has bugged me so much i started a project where i could RIP openssl out, but it was so extensive that i figured i should ask first.
Also not very surprising that it is extensive

[TheToddmeister]

If anyone is here looking for answers i recommend this link:
./vcpkg.exe integrate install

With this recipe if the link is dead:
clone vcpkg
open directory where you've cloned vcpkg
run ./bootstrap-vcpkg.bat
run ./vcpkg.exe install openssl:x64-windows
run ./vcpkg.exe install openssl:x64-windows-static
run ./vcpkg.exe integrate install
run set VCPKGRS_DYNAMIC=1 (or simply set it as your environment variable)

[TheToddmeister]

wrong link. Here is the correct one
: https://stackoverflow.com/questions/55912871/how-to-work-with-openssl-for-rust-within-a-windows-development-environment

[TheToddmeister]

Also openssl really is a house built on a pile of marbles. Holy hell what an experience it is to use.