Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to tungstenite 0.20 #118

Merged
merged 17 commits into from
Aug 8, 2023
Merged

Update to tungstenite 0.20 #118

merged 17 commits into from
Aug 8, 2023

Conversation

sdroege
Copy link
Owner

@sdroege sdroege commented Jun 2, 2023

Various backports from tokio-tungstenite plus snapview/tokio-tungstenite#284

@sdroege sdroege marked this pull request as draft June 2, 2023 08:14
README.md Outdated Show resolved Hide resolved
daniel-abramov and others added 5 commits June 2, 2023 11:33
Before this patch, the `rustls::RootCertStore::add` method was used
to add all the root certificates found by `rustls_native_certs` crate.
This is a problem when an ancient or invalid certificate is present
in the native root store. `rustls` documentation says the following:

> This is suitable for a small set of root certificates that
> are expected to parse successfully. For large collections of
> roots (for example from a system store) it is expected that
> some of them might not be valid according to the rules `rustls`
> implements. As long as a relatively limited number of certificates
> are affected, this should not be a cause for concern. Use
> `RootCertStore::add_parsable_certificates` in order to add as many
> valid roots as possible and to understand how many certificates have
> been diagnosed as malformed.

With this patch, `RootCertStore::add_parsable_certificates` is used
instead for maximal compability with system store.

> Parse the given DER-encoded certificates and add all that can be
> parsed in a best-effort fashion.
>
> This is because large collections of root certificates often include
> ancient or syntactically invalid certificates.
@sdroege sdroege changed the title Draft: Update to tungstenite 0.20 Update to tungstenite 0.20 Aug 8, 2023
@sdroege sdroege marked this pull request as ready for review August 8, 2023 12:42
@sdroege sdroege merged commit 968d9d3 into main Aug 8, 2023
16 checks passed
@sdroege sdroege deleted the tungstenite-0.20 branch August 8, 2023 13:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants