Skip to content

Conversation

@c5soft
Copy link

@c5soft c5soft commented Sep 8, 2024

Refactoring Cargo.toml makes the current version code compatible with the old version code. The provider defaults to ring (replacing aws-lc-rs which involves C/NASM compiling) and supports tls1.2 included. This is very important for production as supporting only tls1.3 without tls1.2 may cause old client systems to crash.

… the old version code, and the provider defaults to using ring and supports tls1.2
@c5soft c5soft changed the title Refactoring Cargo.toml makes the current version code compatible with the old Refactoring Cargo.toml makes the current version code compatible with the old #148 Sep 8, 2024
@c5soft c5soft changed the title Refactoring Cargo.toml makes the current version code compatible with the old #148 Refactoring Cargo.toml makes the current version code compatible with the old Sep 8, 2024
@daxpedda
Copy link
Collaborator

The default being aws-lc-rs has been done on purpose to align with the default of Rustls.
I would argue to take this up with Rustls instead.

However, I do agree that TLS v1.2 should be enabled by default, which I've already done here: #130.

On a side note: Ring also requires a C toolchain, but aws-lc-rs requires a C++ toolchain.

@daxpedda daxpedda closed this Sep 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants