rustls-native-certs icon indicating copy to clipboard operation
rustls-native-certs copied to clipboard

Android and iOS support

Open quininer opened this issue 4 years ago • 6 comments

I think we can look at how chromium is implemented.

https://github.com/chromium/chromium/blob/master/net/cert/cert_verify_proc_android.cc https://github.com/chromium/chromium/blob/master/net/cert/cert_verify_proc_ios.cc

quininer avatar Nov 13 '19 06:11 quininer

Any updates on this?

buraktabn avatar Jun 13 '22 07:06 buraktabn

Nope -- but if you're willing to contribute I'm happy to provide any guidance you need.

djc avatar Jun 13 '22 08:06 djc

TBH, I was planning on it because of https://github.com/paritytech/subxt/issues/563. However, using webpki seems to work on Android.

buraktabn avatar Jun 13 '22 19:06 buraktabn

Android and iOS are both supported by https://github.com/rustls/rustls-platform-verifier

Is there user demand for a native-certs solution or should we suggest users consider using the platform verifier instead? That crate isn't quite ready for primetime but I also suspect we can get it ready sooner than we could add support for those platforms here.

cpu avatar Mar 31 '23 17:03 cpu

iOS support might be as easy as enabling the security-framework path for ios in addition to macos, I think?

But in general, the rustls-platform-verifier is probably a better alternative for most use cases.

djc avatar Apr 03 '23 11:04 djc

rustls-platform-verifier has been released and is probably a better option in most cases.

djc avatar Jan 24 '24 09:01 djc