Migrate to rustls 0.24.0-dev.0 - #24
Merged
Merged
Conversation
janrueth
force-pushed
the
rustls-0.24
branch
10 times, most recently
from
April 21, 2026 10:20
956fbcc to
d809ecd
Compare
Adapt boring-rustls-provider to the rustls 0.24 API, bumping the crate version to 6.0.0-dev.0. rustls API changes: - CryptoProvider: cipher_suites split into tls12_cipher_suites/tls13_cipher_suites, new ticketer_factory field, kx_groups uses Cow - fips() returns FipsStatus enum (Pending/Unvalidated) instead of bool - SupportedKxGroup::start() returns StartedKeyExchange enum (Single/Hybrid) - HybridKeyExchange: new trait replacing hybrid_component/complete_hybrid_component on ActiveKeyExchange; X25519MlKem768 now implements both traits - Prf: for_secret() replaced by new_secret() returning Box<dyn PrfSecret> - SigningKey: algorithm() removed, public_key() added - Signer::sign() now takes Box<Self> instead of &self - KeyProvider::load_private_key() returns Box instead of Arc - Cipher message types renamed (OutboundOpaqueMessage -> EncodedMessage<OutboundOpaque>, etc.) - Nonce/Iv API changes (no more tuple field access, Iv::copy -> Iv::new) - QUIC PacketKey: encrypt/decrypt_in_place take path_id for multipath support, nonce derivation uses Nonce::quic() to incorporate path_id - Tls12/Tls13CipherSuite: new protocol_version field - Many types relocated under crypto:: (NamedGroup, CipherSuite, SignatureScheme, SignatureAlgorithm, ActiveKeyExchange, SharedSecret, etc.) - builder_with_provider renamed to builder, with_single_cert takes Arc<Identity> - tls12 feature removed from rustls (no longer forwarded) Dependency updates: - spki 0.7 -> 0.8 (updated RSA DER decoding to use reader.sequence() API) - rcgen 0.12 -> 0.14 (CertifiedIssuer/signed_by API, KeyPair::generate_for) - Dropped tokio and tokio-rustls dev-dependencies Test changes: - E2e TLS handshake tests rewritten using synchronous in-memory ClientConnection/ServerConnection (no network, no tokio)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adapt boring-rustls-provider to the rustls 0.24 API. Key changes:
Bumps crate version to 6.0.0-dev.0. E2e tests not yet updated.