Skip to content

backport #2465 and #2470 to v2.203 - #2471

Merged
hawkw merged 2 commits into
release/v2.203from
eliza/203-webpki-backports
Sep 18, 2023
Merged

backport #2465 and #2470 to v2.203#2471
hawkw merged 2 commits into
release/v2.203from
eliza/203-webpki-backports

Conversation

@hawkw

@hawkw hawkw commented Sep 18, 2023

Copy link
Copy Markdown
Contributor

This branch backports PRs #2465 and #2470 to the release/v2.203 branch.

This commit changes the `linkerd-meshtls-rustls` crate to use the
upstream `rustls-webpki` crate, maintained by Rustls, rather than our
fork of `briansmith/webpki` from GitHub. Since `rustls-webpki` includes
the change which was the initial motivation for the `linkerd/webpki`
fork (rustls/webpki#42), we can now depend on upstream.

Currently, we must take a Git dependency on `rustls-webpki`, since a
release including a fix for an issue (rustls/webpki#167) which prevents
`rustls-webpki` from parsing our test certificates has not yet been
published. Once v0.101.5 of `rustls-webpki` is published (PR see
rustls/webpki#170), we can remove the Git dep. For now, I've updated
`cargo-deny` to allow the Git dependency.
Now that [v0.101.5 of `rustls-webpki`][1] has been [published][2], we
can now depend on the crate from crates.io. This allows us to remove the
Git dependency on the branch preparing that release to be published,
which allows us to remove the allowance for Git dependencies in the
`cargo-deny` config.

[1]: https://github.com/rustls/webpki/releases/tag/v%2F0.101.5
[2]: https://crates.io/crates/rustls-webpki/0.101.5
@hawkw
hawkw requested a review from a team as a code owner September 18, 2023 18:26
@hawkw
hawkw merged commit 8bbbc78 into release/v2.203 Sep 18, 2023
@hawkw
hawkw deleted the eliza/203-webpki-backports branch September 18, 2023 18:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants