reqwest rustls https related bugs
hi list!
I'd like to raise awareness about this issue and collect other bugs that
are related to it (also to have something I can link to in those bugs):
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1096190
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1092918
- Updating hyper-rustls to 0.27, needed for reqwest 0.12 rustls
https://packages.debian.org/experimental/librust-rustls-pemfile-dev
- There's currently version 2 in experimental, which is needed by
reqwest 0.12, but we likely need to have a semver suffixed version 1 too
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1096228
- issue with reqwest 0.11, we can probably remove the patch that
downgrades from reqwest 0.12, the upcoming rebuilderd-common releases is
about to depend on reqwest with rustls however
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1096230
- another issue with reqwest 0.11
https://github.com/kpcyrd/debian-repro-status/pull/6
- this I still need to merge and release, but can not upload to
Debian without losing https support on the binary
https://tracker.debian.org/pkg/rust-apt-swarm
- I didn't file a bug for this yet to not interfere with transitions
of other packages, but the 0.4.0-1 binary can't do https anymore - the
p2p stack still works but Debian systems are not able to discover
signatures with the default configuration and instead depend on other
nodes in the network (mostly running Alpine or the Github-built docker
image).
cheers,
kpcyrd
Reply to: