Skip to content

new feature: allow TLS certification config #7762

Description

@erickguan

Feature Description

With recent refactor based on RFC 7749, #7759 allows more customization. We could allow more customizations on TLS certificates.

Problem and Solution

This issue describes what TLS options we want to support:

  • native-roots: Rustls (a TLS library in Rust) with native roots
  • webpki-roots: Rustls with WebPKI roots
  • native-tls: Native TLS
    • SChannel on Windows
    • Secure Transport on macOS
    • OpenSSL on other platforms

reqsign is a dependency which relies on http client support as well.

Additional Context

Consider suggest other configuration or print errors when one TLS configuration fails.

Are you willing to contribute to the development of this feature?

  • Yes, I am willing to contribute to the development of this feature.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestreleases-note/featThe PR implements a new feature or has a title that begins with "feat"services/http

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions