feat!: support disabling of webpki-roots dependency

Add Cargo features rustls-tls-manual-roots and rustls-tls-webpki-roots.
The latter is the default enabled feature.

Author: jutuon

Cargo.toml

@@ -21,7 +21,7 @@ serde = { version = "1.0.137", features = ["derive"] }
 ring = { version = "0.17.0", features = ["std"] }
 base64 = "0.22"
 log = "0.4.17"
-webpki-roots = "0.26"
+webpki-roots = { version = "0.26", optional = true }
 pem = "3.0"
 thiserror = "2.0"
 x509-parser = "0.16"
@@ -34,9 +34,7 @@ tokio = { version = "1.20.1", default-features = false }
 tokio-rustls = { version = "0.26", default-features = false, features = [
     "tls12",
 ] }
-reqwest = { version = "0.12", default-features = false, features = [
-    "rustls-tls",
-] }
+reqwest = { version = "0.12", default-features = false }
 
 # Axum
 axum-server = { version = "0.7", features = ["tokio-rustls"], optional = true }
@@ -68,9 +66,12 @@ all-features = true
 rustdoc-args = ["--cfg", "doc_auto_cfg"]
 
 [features]
-default = []
+default = ["rustls-tls-webpki-roots"]
 axum = ["dep:axum-server"]
 
+rustls-tls-manual-roots = ["reqwest/rustls-tls-manual-roots"]
+rustls-tls-webpki-roots = ["dep:webpki-roots", "reqwest/rustls-tls-webpki-roots"]
+
 [[example]]
 name = "low_level_axum"
 required-features = ["axum"]

src/config.rs

@@ -8,7 +8,6 @@ use std::convert::Infallible;
 use std::fmt::Debug;
 use std::sync::Arc;
 use tokio::io::{AsyncRead, AsyncWrite};
-use webpki_roots::TLS_SERVER_ROOTS;
 
 /// Configuration for an ACME resolver.
 ///
@@ -49,9 +48,11 @@ impl AcmeConfig<Infallible, Infallible> {
     /// ```
     ///
     pub fn new(domains: impl IntoIterator<Item = impl AsRef<str>>) -> Self {
+        #[allow(unused_mut)]
         let mut root_store = RootCertStore::empty();
+        #[cfg(feature = "rustls-tls-webpki-roots")]
         root_store.extend(
-            TLS_SERVER_ROOTS
+            webpki_roots::TLS_SERVER_ROOTS
                 .iter()
                 .map(|ta| rustls::pki_types::TrustAnchor {
                     subject: ta.subject.clone(),