tuxmain/rust-rpxy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: rustls-0.21. quinn (and hence h3-quinn) do not support rustls-0.21 yet.

Browse source
This commit is contained in:
Jun Kurihara 2023-04-03 12:42:03 +09:00
commit d9868442c5
No known key found for this signature in database
GPG key ID: D992B3E3DE1DED23
6 changed files with 595 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/backend/mod.rs
View file

@ -168,7 +168,8 @@ impl Backend {
let owned_trust_anchors: Vec<_> = certs
.iter()
.map(|v| {
let trust_anchor = tokio_rustls::webpki::TrustAnchor::try_from_cert_der(&v.0).unwrap();
// let trust_anchor = tokio_rustls::webpki::TrustAnchor::try_from_cert_der(&v.0).unwrap();
let trust_anchor = webpki::TrustAnchor::try_from_cert_der(&v.0).unwrap();
rustls::OwnedTrustAnchor::from_subject_spki_name_constraints(
trust_anchor.subject,
trust_anchor.spki,
@ -279,7 +280,7 @@ impl Backends {
let client_certs_verifier = rustls::server::AllowAnyAuthenticatedClient::new(client_ca_roots_local);
ServerConfig::builder()
.with_safe_defaults()
.with_client_cert_verifier(client_certs_verifier)
.with_client_cert_verifier(Arc::new(client_certs_verifier))
.with_cert_resolver(Arc::new(resolver_local))
};
server_config_local.alpn_protocols.push(b"h2".to_vec());