Remove aws-lc-rs

Author: a.zavernyaev

Cargo.lock

@@ -144,6 +144,7 @@ rolldown-notify-debouncer-full = "0.7.5"
 ropey = "1.6.1"
 rusqlite = { version = "0.37.0", features = ["bundled"] }
 rustc-hash = "2.1.1"
+rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
 schemars = "1.0.0"
 self_cell = "1.2.0"
 node-semver = "2.2.0"

Cargo.toml

@@ -29,7 +29,7 @@ wax = { workspace = true }
 reqwest = { workspace = true, features = ["stream", "native-tls-vendored", "json"] }
 
 [target.'cfg(not(target_os = "windows"))'.dependencies]
-reqwest = { workspace = true, features = ["stream", "rustls", "json"] }
+reqwest = { workspace = true, features = ["stream", "rustls-no-provider", "json"] }
 
 [lib]
 test = false

crates/vite_error/Cargo.toml

@@ -37,7 +37,8 @@ vite_workspace = { workspace = true }
 reqwest = { workspace = true, features = ["stream", "native-tls-vendored", "json"] }
 
 [target.'cfg(not(target_os = "windows"))'.dependencies]
-reqwest = { workspace = true, features = ["stream", "rustls", "json"] }
+reqwest = { workspace = true, features = ["stream", "rustls-no-provider", "json"] }
+rustls = { workspace = true }
 
 [dev-dependencies]
 httpmock = { workspace = true }

crates/vite_install/Cargo.toml

@@ -11,6 +11,14 @@ use tar::Archive;
 use tokio::{fs, io::AsyncWriteExt};
 use vite_error::Error;
 
+#[cfg(not(target_os = "windows"))]
+fn ensure_tls_provider() {
+    static INIT: std::sync::OnceLock<()> = std::sync::OnceLock::new();
+    INIT.get_or_init(|| {
+        let _ = rustls::crypto::ring::default_provider().install_default();
+    });
+}
+
 /// HTTP client with built-in retry support
 #[derive(Clone)]
 pub struct HttpClient {
@@ -57,6 +65,8 @@ impl HttpClient {
     }
 
     async fn get(&self, url: &str) -> Result<Response, Error> {
+        ensure_tls_provider();
+
         let response = (|| async { reqwest::get(url).await?.error_for_status() })
             .retry(
                 ExponentialBuilder::default()

crates/vite_install/src/request.rs

@@ -32,7 +32,8 @@ zip = { workspace = true }
 reqwest = { workspace = true, features = ["stream", "native-tls-vendored"] }
 
 [target.'cfg(not(target_os = "windows"))'.dependencies]
-reqwest = { workspace = true, features = ["stream", "rustls"] }
+reqwest = { workspace = true, features = ["stream", "rustls-no-provider"] }
+rustls = { workspace = true }
 
 [dev-dependencies]
 tempfile = { workspace = true }

crates/vite_js_runtime/Cargo.toml

@@ -15,6 +15,14 @@ use vite_str::Str;
 
 use crate::{Error, provider::ArchiveFormat};
 
+#[cfg(not(target_os = "windows"))]
+fn ensure_tls_provider() {
+    static INIT: std::sync::OnceLock<()> = std::sync::OnceLock::new();
+    INIT.get_or_init(|| {
+        let _ = rustls::crypto::ring::default_provider().install_default();
+    });
+}
+
 /// Response from a cached fetch operation
 pub struct CachedFetchResponse {
     /// Response body (None if 304 Not Modified)
@@ -37,6 +45,8 @@ pub async fn download_file(
     target_path: &AbsolutePath,
     message: &str,
 ) -> Result<(), Error> {
+    ensure_tls_provider();
+
     tracing::debug!("Downloading {url} to {target_path:?}");
 
     let response = (|| async { reqwest::get(url).await?.error_for_status() })
@@ -114,6 +124,8 @@ pub async fn download_file(
 /// Download text content from a URL with retry logic
 #[expect(clippy::disallowed_types, reason = "HTTP response body is a String")]
 pub async fn download_text(url: &str) -> Result<String, Error> {
+    ensure_tls_provider();
+
     tracing::debug!("Downloading text from {url}");
 
     let content = (|| async { reqwest::get(url).await?.text().await })
@@ -137,6 +149,8 @@ pub async fn fetch_with_cache_headers(
     url: &str,
     if_none_match: Option<&str>,
 ) -> Result<CachedFetchResponse, Error> {
+    ensure_tls_provider();
+
     tracing::debug!("Fetching with cache headers from {url}");
 
     let response = (|| async {