Commit acec387
authored
Add support for
Starting from [0.22.0,
`rustls`](https://github.com/rustls/rustls/releases/tag/v%2F0.22.0),
ecosystem has started supporting
[`aws-lc-rs`](https://github.com/aws/aws-lc-rs) as crypto back-end. This
latter replaces crypto functionalities provided by `ring`.
The main reason behind this is to provide
[FIPS](https://en.wikipedia.org/wiki/FIPS_140-2) compliance in the
future via `aws-lc`:
> Optional support for cryptography from
[aws-lc-rs](https://github.com/aws/aws-lc-rs). Once the certification
process completes , we will support FIPS mode using aws-lc-rs.
---
This PR is implementing the
[same](https://github.com/rustls/rustls/blob/4d1b762b5328a1714862ba73ec72d5522fe0c049/rustls/Cargo.toml#L19)
supporting mechanism.
In short:
* if cfg(feature = "ring") -> ring (this will be the default)
* if cfg(feature = "aws-lc-rc") -> aws-lc-rs
* if both -> ~compile_error!~ EDIT: ring
* if none -> compile_error!aws_lc_rs as crypto backend (#201)1 parent 53a5232 commit acec387
File tree
8 files changed
+493
-122
lines changed- .github/workflows
- rcgen
- src
- rustls-cert-gen
8 files changed
+493
-122
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
39 | 39 | | |
40 | 40 | | |
41 | 41 | | |
42 | | - | |
| 42 | + | |
43 | 43 | | |
44 | 44 | | |
45 | 45 | | |
| |||
117 | 117 | | |
118 | 118 | | |
119 | 119 | | |
| 120 | + | |
| 121 | + | |
120 | 122 | | |
121 | 123 | | |
122 | 124 | | |
| |||
125 | 127 | | |
126 | 128 | | |
127 | 129 | | |
128 | | - | |
129 | | - | |
| 130 | + | |
| 131 | + | |
130 | 132 | | |
131 | 133 | | |
132 | 134 | | |
| |||
164 | 166 | | |
165 | 167 | | |
166 | 168 | | |
167 | | - | |
168 | | - | |
| 169 | + | |
| 170 | + | |
169 | 171 | | |
170 | 172 | | |
171 | 173 | | |
| |||
0 commit comments