Selaa lähdekoodia

feat: Allow use of system default TLS trusted root by omitting the trusted_root client config parameter. (#192)

Peter Neumark 3 vuotta sitten
vanhempi
sitoutus
187f4f0335
2 muutettua tiedostoa jossa 5 lisäystä ja 6 poistoa
  1. 0 5
      src/config.rs
  2. 5 1
      src/transport/tls.rs

+ 0 - 5
src/config.rs

@@ -296,11 +296,6 @@ impl Config {
                         .as_ref()
                         .and(tls_config.pkcs12_password.as_ref())
                         .ok_or_else(|| anyhow!("Missing `pkcs12` or `pkcs12_password`"))?;
-                } else {
-                    tls_config
-                        .trusted_root
-                        .as_ref()
-                        .ok_or_else(|| anyhow!("Missing `trusted_root`"))?;
                 }
                 Ok(())
             }

+ 5 - 1
src/transport/tls.rs

@@ -42,7 +42,11 @@ impl Transport for TlsTransport {
                     .build()?;
                 Some(TlsConnector::from(connector))
             }
-            None => None,
+            None => {
+                // if no trusted_root is specified, allow TlsConnector to use system default
+                let connector = native_tls::TlsConnector::builder().build()?;
+                Some(TlsConnector::from(connector))
+            },
         };
 
         let tls_acceptor = match config.pkcs12.as_ref() {