tls icon indicating copy to clipboard operation
tls copied to clipboard

Allow vendoring openssl

Open pimeys opened this issue 4 years ago • 2 comments
trafficstars

We have certain environments where vendoring OpenSSL is the only possible solution to get somehow sane compilation for our users. native-tls has a parameter for this, and it only does something on Linux environments. Now, if our users run on AWS Lambda, which is Amazon Linux 2 and holds openssl 1.0. And the node version they have statically links against 1.1.1j, calling a rust napi module linking against openssl 1.0 from statically linked nodejs will cause tls errors due to the cipher params being different.

Would it be possible to expose this feature from tokio-native-tls so we could use this flag from crates such as mysql_async and tokio-postgres?

pimeys avatar Mar 22 '21 17:03 pimeys

I have similar use cases, and I believe it's nice to have this feature. Moreover, reqwest allows the user to vendor OpenSSL when using native-tls.

LEXUGE avatar Mar 12 '22 09:03 LEXUGE

Not saying I'm against this, but as a workaround, you can just depend on a (compatible) version of native-tls (or openssl directly) with the feature enabled, features are additive.

thalesfragoso avatar Mar 17 '22 22:03 thalesfragoso

Added in #125, might wanna close the PR.

Selyatin avatar Dec 20 '22 19:12 Selyatin