Net: always use ring as crypto provider

Author: Ash-L2L

lib/net/error.rs

@@ -41,6 +41,35 @@ pub enum AcceptConnection {
     ServerEndpointClosed,
 }
 
+pub(in crate::net) mod configure_client {
+    use thiserror::Error;
+
+    #[derive(Debug, Error)]
+    pub(in crate::net) enum Inner {
+        #[error(transparent)]
+        NoInitialCipherSuite(
+            #[from] quinn::crypto::rustls::NoInitialCipherSuite,
+        ),
+        #[error("rustls error")]
+        Rustls(#[source] rustls::Error),
+    }
+
+    #[derive(Debug, Error)]
+    #[error("failed to configure p2p client")]
+    #[repr(transparent)]
+    pub struct Error(#[source] Inner);
+
+    impl<E> From<E> for Error
+    where
+        Inner: From<E>,
+    {
+        fn from(err: E) -> Self {
+            Self(err.into())
+        }
+    }
+}
+pub use configure_client::Error as ConfigureClient;
+
 #[allow(clippy::duplicated_attributes)]
 #[derive(Debug, Error, Transitive)]
 #[transitive(from(db::error::Put, db::Error))]
@@ -58,6 +87,8 @@ pub enum Error {
     AlreadyConnected(#[from] AlreadyConnected),
     #[error("bincode error")]
     Bincode(#[from] bincode::Error),
+    #[error(transparent)]
+    ConfigureClient(#[from] ConfigureClient),
     #[error("connect error")]
     Connect(#[from] quinn::ConnectError),
     #[error(transparent)]
@@ -74,8 +105,6 @@ pub enum Error {
     /// `0.0.0.0` is one example of an "unspecified" IP.
     #[error("unspecified peer ip address (cannot connect to '{0}')")]
     UnspecfiedPeerIP(IpAddr),
-    #[error(transparent)]
-    NoInitialCipherSuite(#[from] quinn::crypto::rustls::NoInitialCipherSuite),
     #[error("peer connection")]
     PeerConnection(#[source] Box<PeerConnectionError>),
     #[error("quinn rustls error")]

lib/net/mod.rs

@@ -100,9 +100,11 @@ impl rustls::client::danger::ServerCertVerifier for SkipServerVerification {
     }
 }
 
-fn configure_client()
--> Result<ClientConfig, quinn::crypto::rustls::NoInitialCipherSuite> {
-    let crypto = rustls::ClientConfig::builder()
+fn configure_client() -> Result<ClientConfig, error::ConfigureClient> {
+    let crypto_provider = Arc::new(rustls::crypto::ring::default_provider());
+    let crypto = rustls::ClientConfig::builder_with_provider(crypto_provider)
+        .with_safe_default_protocol_versions()
+        .map_err(error::configure_client::Inner::Rustls)?
         .dangerous()
         .with_custom_certificate_verifier(SkipServerVerification::new())
         .with_no_client_auth();