Skip to content

backport #2465 and #2470 to v2.203#2471

Merged
hawkw merged 2 commits intorelease/v2.203from
eliza/203-webpki-backports
Sep 18, 2023
Merged

backport #2465 and #2470 to v2.203#2471
hawkw merged 2 commits intorelease/v2.203from
eliza/203-webpki-backports

Conversation

@hawkw
Copy link
Contributor

@hawkw hawkw commented Sep 18, 2023

This branch backports PRs #2465 and #2470 to the release/v2.203 branch.

This commit changes the `linkerd-meshtls-rustls` crate to use the
upstream `rustls-webpki` crate, maintained by Rustls, rather than our
fork of `briansmith/webpki` from GitHub. Since `rustls-webpki` includes
the change which was the initial motivation for the `linkerd/webpki`
fork (rustls/webpki#42), we can now depend on upstream.

Currently, we must take a Git dependency on `rustls-webpki`, since a
release including a fix for an issue (rustls/webpki#167) which prevents
`rustls-webpki` from parsing our test certificates has not yet been
published. Once v0.101.5 of `rustls-webpki` is published (PR see
rustls/webpki#170), we can remove the Git dep. For now, I've updated
`cargo-deny` to allow the Git dependency.
Now that [v0.101.5 of `rustls-webpki`][1] has been [published][2], we
can now depend on the crate from crates.io. This allows us to remove the
Git dependency on the branch preparing that release to be published,
which allows us to remove the allowance for Git dependencies in the
`cargo-deny` config.

[1]: https://github.com/rustls/webpki/releases/tag/v%2F0.101.5
[2]: https://crates.io/crates/rustls-webpki/0.101.5
@hawkw hawkw requested a review from a team as a code owner September 18, 2023 18:26
@hawkw hawkw merged commit 8bbbc78 into release/v2.203 Sep 18, 2023
@hawkw hawkw deleted the eliza/203-webpki-backports branch September 18, 2023 18:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants