Open elprans opened 2 years ago
rustls-native-cert
is /etc/ssl
on linux.
The crate that has certificates is webpki-roots
which we depend on in edgedb-rust anyways too.
But the problem is that reqwest
has compile-time feature flag to use webpki-roots
so it's unclear if we can use that as a fallback without too much issues (i.e. without embedding two versions of reqwest through intermediate crates).
I've built a Docker image containing only the CLI binary and got this:
Ideally we should fallback to a bundled certificate store if the system store cannot be found. We seem to already depend on rustls-native-certs, so it should be a matter of actually using it.