customize roots - Githubissues

awslabs / aws-sdk-rust

AWS SDK for the Rust Programming Language

https://awslabs.github.io/aws-sdk-rust/

Apache License 2.0

2.95k stars 242 forks source link

customize roots #1171

Open flisky opened 1 month ago

flisky commented 1 month ago

Describe the feature

There're three ways in hyper-rustls to customize roots:

rustls-native-certs
webpki-roots
rustls-platform-verifier

aws-smithy-experimental only uses rustls-native-certs, but rustls-native-certs doesn't work on ios & android. And there's no way to customize?

refer: #575

Use Case

upgrade to hyper 1.x and use aws-sdk on mobile platforms

Proposed Solution

Add more feature flags to choose cert providers?

Other Information

No response

Acknowledgements

[X] I may be able to implement this feature request
[ ] This feature might incur a breaking change

A note for the community

Community Note

Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
If you are interested in working on this issue, please leave a comment

ysaito1001 commented 1 month ago

Hi @flisky, thank you for submitting an enhancement request.

We are aware of the need to configure the roots and will ensure that is indeed configurable as we roll out hyper 1.x.

Note that when we do roll it out, it could be that configuration is achieved by customizing an HttpConnector, and what we provide might be documentation in that case.