To connect the sender with TLS enabled one would typically use Sender(..., tls=True).
This connection parameter previously used root certificates sourced from the webpki-roots Rust crate.
With this change, tls=True will also use the certificates stored on the OS certificate root store.
The tls=True behaviour is also equivalent to specifying tls='webpki_and_os_roots'.
To use the old behaviour, use tls='webpki_roots'.
Or, to only use the OS root certificate store, specify tls='os_roots'.
amunra
commented
1 year ago
More TLS connection options and new default
To connect the sender with TLS enabled one would typically use
Sender(..., tls=True). This connection parameter previously used root certificates sourced from thewebpki-rootsRust crate. With this change,tls=Truewill also use the certificates stored on the OS certificate root store.tls=Truebehaviour is also equivalent to specifyingtls='webpki_and_os_roots'.tls='webpki_roots'.tls='os_roots'.