The original implementation uses rustls-client, and rusttls uses webpki-roots, a rather static set of certificates from Mozilla, for certificate verification. Therefore, a user cannot use their own CA certificates.
This problem can be resolved if we simply use native tls client, which will use the certificates stored on OS.
The original implementation uses
rustls-client, andrusttlsuseswebpki-roots, a rather static set of certificates from Mozilla, for certificate verification. Therefore, a user cannot use their own CA certificates. This problem can be resolved if we simply use native tls client, which will use the certificates stored on OS.