tuxmain/rust-rpxy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Disable resumption
Some checks failed
Unit Test / test (push) Has been cancelled
Details
ShiftLeft Scan / Scan-Build (push) Has been cancelled
Details

Browse source
This commit is contained in:
Pascal Engélibert 2025-12-01 17:05:26 +01:00
commit 2a8aba6346
8 changed files with 27 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

2
rpxy-lib/Cargo.toml
View file

@ -87,7 +87,7 @@ hyper-rustls = { version = "0.27.7", default-features = false, features = [
# tls and cert management for server
rpxy-certs = { path = "../rpxy-certs/", default-features = false }
hot_reload = "0.2.0"
rustls = { version = "0.23.32", default-features = false }
rustls = { version = "0.23.32", default-features = false, features = ["std"] }
boring-rustls-provider = { git = "https://github.com/janrueth/boring-rustls-provider.git", rev = "490340afa77e2c08fc45853124f99d49f4f9f8a0", optional = true }
rustls-openssl = { version = "0.3.0", default-features = false, features = ["tls12"], optional = true }
rustls-post-quantum = { version = "0.2.4", optional = true }

17
rpxy-lib/src/forwarder/client.rs
View file

@ -216,11 +216,18 @@ where
info!("Rustls backend: Mozilla WebPKI root certs used for backend connections");
#[cfg(not(feature = "webpki-roots"))]
let builder = hyper_rustls::HttpsConnectorBuilder::new().with_platform_verifier();
#[cfg(not(feature = "webpki-roots"))]
let builder_h2 = hyper_rustls::HttpsConnectorBuilder::new().with_platform_verifier();
#[cfg(not(feature = "webpki-roots"))]
info!("Rustls backend: Platform verifier used for backend connections");
let (builder, builder_h2) = {
use rustls::{ClientConfig, client::Resumption};
use hyper_rustls::ConfigBuilderExt;
let mut client_config = ClientConfig::builder()
.try_with_platform_verifier().unwrap()
.with_no_client_auth();
client_config.resumption = Resumption::disabled();
let builder = hyper_rustls::HttpsConnectorBuilder::new().with_tls_config(client_config.clone());
let builder_h2 = hyper_rustls::HttpsConnectorBuilder::new().with_tls_config(client_config);
info!("Rustls backend: Platform verifier used for backend connections");
(builder, builder_h2)
};
let mut http = HttpConnector::new();
http.enforce_http(false);