RUST-1083 Can you features ring/rustls replace with openssl?

[govo]

Because ring has some problem at some OS system, like this https://github.com/briansmith/ring/issues/1417.

This make the project build failed at centos 6.8. Old OS but still in use.

Is it able to change ring/rustls to openssl?

[kakoc]

Seems that being able to use openssl could potentially solve this issue(due to rustls limitations) as well: https://github.com/mongodb/mongo-rust-driver/issues/487

[patrickfreed]

Thanks for your suggestion! I filed RUST-1083 to track this; the team will discuss this at our next triage meeting.

[bajanam]

@kakoc We have discussed and this this is an interesting idea, however, we do not have the capacity to work on this right now and we will revisit in a few months.

[loafofpiecrust]

Just to second this: I'd love an option to use system OpenSSL because ring has some difficulties with cross-compiling that make it a challenge to produce binaries for AWS Lambda (x86_64 linux gnu) from a MacOS host.

[techbelle]

Update on this issue: we will offer the OpenSSL option in the rust driver in our upcoming version, 2.2.0

[patrickfreed]

An important caveat: we're unfortunately not currently able to remove rustls or ring as dependencies, even when the OpenSSL feature is enabled, without creating a breaking change for users that build with --no-default-features. Introducing a feature flag for rustls is something we'll want to consider for the next major version of the crate, though.