Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[PM-4269] Use rustls on non-wasm platforms #374

Merged
merged 12 commits into from
Jan 8, 2024
Merged

[PM-4269] Use rustls on non-wasm platforms #374

merged 12 commits into from
Jan 8, 2024

Conversation

dani-garcia
Copy link
Member

@dani-garcia dani-garcia commented Dec 1, 2023

Type of change

- [ ] Bug fix
- [x] New feature development
- [ ] Tech debt (refactoring, code cleanup, dependency upgrades, etc)
- [ ] Build/deploy pipeline (DevOps)
- [ ] Other

Objective

Updated reqwest to use rustls on all platforms. We're also using rustls-platform-verifier where possible to load the CA certificates from the operating system store instead of including them in the binary.

Note that WASM doesn't need a TLS stack as reqwest just uses the browser's fetch

TLS Stack CA Validator Accepts self signed in OS root store
Windows RusTLS ustls-platform-verifier Yes
Linux RusTLS rustls-platform-verifier (Native+WebPKI) Yes
Mac RusTLS rustls-platform-verifier (Native) Yes
Android RusTLS WebPKI No
iOS RusTLS rustls-platform-verifier (Native) Yes
WASM fetch fetch Maybe, use browser config

@bitwarden-bot
Copy link

bitwarden-bot commented Dec 1, 2023

Logo
Checkmarx One – Scan Summary & Details79f8eda9-9656-492f-9199-7c94cb8f2ef7

No New Or Fixed Issues Found

crates/bitwarden/Cargo.toml Outdated Show resolved Hide resolved
@dani-garcia dani-garcia changed the title Support Rustls through cargo features Use rustls on non-windows platforms Dec 13, 2023
@dani-garcia dani-garcia changed the title Use rustls on non-windows platforms Use rustls on non-wasm platforms Dec 14, 2023
Hinton
Hinton previously approved these changes Dec 14, 2023
Copy link
Member

@Hinton Hinton left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, let's hold of on merging this until next week.

@dani-garcia dani-garcia changed the title Use rustls on non-wasm platforms [PM-4269] Use rustls on non-wasm platforms Dec 19, 2023
Hinton
Hinton previously approved these changes Jan 8, 2024
# Conflicts:
#	Cargo.lock
#	crates/bws/Cargo.toml
Copy link

codecov bot commented Jan 8, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (719f7e8) 48.60% compared to head (02730b1) 48.64%.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #374      +/-   ##
==========================================
+ Coverage   48.60%   48.64%   +0.04%     
==========================================
  Files         152      152              
  Lines        7271     7277       +6     
==========================================
+ Hits         3534     3540       +6     
  Misses       3737     3737              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@dani-garcia dani-garcia merged commit 6796730 into main Jan 8, 2024
42 checks passed
@dani-garcia dani-garcia deleted the ps/rustls branch January 8, 2024 17:28
@coltonhurst coltonhurst mentioned this pull request Mar 12, 2024
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants