Merge pull request #46 from OverShifted/main

Stop automatically pulling in aws-lc as a dependency

Author: tmccombs

Cargo.toml

@@ -9,7 +9,11 @@ license = "Apache-2.0"
 
 [features]
 default = ["tokio-net"]
-rustls = ["tokio-rustls"]
+rustls-core = ["tokio-rustls"]
+rustls-aws-lc = ["rustls-core", "tokio-rustls/aws-lc-rs"]
+rustls-fips = ["rustls-aws-lc", "tokio-rustls/fips"]
+rustls-ring = ["rustls-core", "tokio-rustls/ring"]
+rustls = ["rustls-aws-lc", "tokio-rustls/default"]
 native-tls = ["tokio-native-tls"]
 openssl = ["tokio-openssl", "openssl_impl"]
 rt = ["tokio/rt"]
@@ -22,7 +26,7 @@ pin-project-lite = "0.2.13"
 thiserror = "1.0.30"
 tokio = { version = "1.0", features = ["time"] }
 tokio-native-tls = { version = "0.3.0", optional = true }
-tokio-rustls = { version = ">=0.25.0,<0.27", optional = true }
+tokio-rustls = { version = ">=0.25.0,<0.27", default-features = false, optional = true }
 tokio-openssl = { version = "0.6.3", optional = true }
 openssl_impl = { package = "openssl", version = "0.10.32", optional = true }
 
@@ -60,5 +64,14 @@ name = "http-change-certificate"
 path = "examples/http-change-certificate.rs"
 
 [package.metadata.docs.rs]
-features = ["rustls", "native-tls", "openssl", "rt"]
+features = [
+    "rustls-core",
+    "rustls",
+    "rustls-aws-lc",
+    "rustls-fips",
+    "rustls-ring",
+    "native-tls",
+    "openssl",
+    "rt"
+]
 rustdoc-args = ["--cfg", "docsrs"]

README.md

@@ -13,5 +13,11 @@ It can be used to easily create a `Stream` of TLS connections from a listening s
 
 See examples for examples of usage.
 
-You must enable either one of the `rustls`, `native-tls`, or `openssl` features depending on which implementation you
-would like to use.
+You must enable either one of the `rustls` (more details below), `native-tls`, or `openssl`
+features depending on which implementation you would like to use.
+
+When enabling the `rustls` feature, the `rustls` crate will be added as a dependency along
+with it's default [cryptography provider](https://docs.rs/rustls/latest/rustls/#cryptography-providers).
+To avoid this behaviour and use other cryptography providers, the `rustls-core` feature can be used instead.
+Additional feature flags for other [rustls built-in cryptography providers](https://docs.rs/rustls/latest/rustls/#built-in-providers) are also available:
+`rustls-aws-lc` (default), `rustls-fips` and `rustls-ring`

examples/echo-threads.rs

@@ -4,9 +4,9 @@ use tls_listener::{SpawningHandshakes, TlsListener};
 use tokio::io::{copy, split};
 use tokio::net::{TcpListener, TcpStream};
 use tokio::signal::ctrl_c;
-#[cfg(all(feature = "native-tls", not(feature = "rustls")))]
+#[cfg(all(feature = "native-tls", not(feature = "rustls-core")))]
 use tokio_native_tls::TlsStream;
-#[cfg(feature = "rustls")]
+#[cfg(feature = "rustls-core")]
 use tokio_rustls::server::TlsStream;
 
 mod tls_config;

examples/echo.rs

@@ -7,15 +7,15 @@ use tokio::signal::ctrl_c;
 
 #[cfg(all(
     feature = "native-tls",
-    not(any(feature = "rustls", feature = "openssl"))
+    not(any(feature = "rustls-core", feature = "openssl"))
 ))]
 use tokio_native_tls::TlsStream;
 #[cfg(all(
     feature = "openssl",
-    not(any(feature = "rustls", feature = "native-tls"))
+    not(any(feature = "rustls-core", feature = "native-tls"))
 ))]
 use tokio_openssl::SslStream as TlsStream;
-#[cfg(feature = "rustls")]
+#[cfg(feature = "rustls-core")]
 use tokio_rustls::server::TlsStream;
 
 mod tls_config;

examples/tls_config/mod.rs

@@ -1,4 +1,4 @@
-#[cfg(feature = "rustls")]
+#[cfg(feature = "rustls-core")]
 mod config {
     use std::sync::Arc;
     use tokio_rustls::rustls::{
@@ -39,7 +39,7 @@ mod config {
 
 #[cfg(all(
     feature = "native-tls",
-    not(any(feature = "rustls", feature = "openssl"))
+    not(any(feature = "rustls-core", feature = "openssl"))
 ))]
 mod config {
     use tokio_native_tls::native_tls::{Identity, TlsAcceptor};
@@ -65,7 +65,7 @@ mod config {
 
 #[cfg(all(
     feature = "openssl",
-    not(any(feature = "rustls", feature = "native-tls"))
+    not(any(feature = "rustls-core", feature = "native-tls"))
 ))]
 mod config {
     use openssl_impl::ssl::{SslContext, SslFiletype, SslMethod};

src/lib.rs

@@ -30,7 +30,7 @@ use tokio::time::{timeout, Timeout};
 pub use tokio_native_tls as native_tls;
 #[cfg(feature = "openssl")]
 pub use tokio_openssl as openssl;
-#[cfg(feature = "rustls")]
+#[cfg(feature = "rustls-core")]
 pub use tokio_rustls as rustls;
 
 #[cfg(feature = "rt")]
@@ -270,8 +270,8 @@ where
     }
 }
 
-#[cfg(feature = "rustls")]
-#[cfg_attr(docsrs, doc(cfg(feature = "rustls")))]
+#[cfg(feature = "rustls-core")]
+#[cfg_attr(docsrs, doc(cfg(feature = "rustls-core")))]
 impl<C: AsyncRead + AsyncWrite + Unpin> AsyncTls<C> for tokio_rustls::TlsAcceptor {
     type Stream = tokio_rustls::server::TlsStream<C>;
     type Error = std::io::Error;