Use rustls for http fetches

mmastrac · Jan 10, 2025 · 7263ab3 · 7263ab3
1 parent 7e5b00e
commit 7263ab3
Show file tree

Hide file tree

Showing 2 changed files with 146 additions and 77 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/rust/http/Cargo.toml b/rust/http/Cargo.toml
@@ -17,10 +17,18 @@ tokio.workspace = true
 pyo3_util.workspace = true
 tracing.workspace = true
 
-reqwest = { version = "0.12", features = ["gzip", "deflate", "stream"] }
 scopeguard = "1"
 eventsource-stream = "0.2.3"
 
+# We want to use rustls to avoid setenv issues OpenSSL and the system certs.
+# We add these features:
+# - http2: to use HTTP/2
+# - charset: to support charset encoding
+# - gzip/deflate/brotli: to support compression
+# - stream: to support streaming responses
+# - rustls-tls-native-roots: to use the native root certificates (rather than WebPKI)
+reqwest = { version = "0.12", default-features = false, features = ["http2", "charset", "gzip", "deflate", "brotli", "stream", "rustls-tls-native-roots"] }
+
 futures = "0"
 
 [dev-dependencies]