fedserv/echoIRCd
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

tls: add opt-in pure-Rust rustls backend behind the TlsBackend trait (tls_backend = rustls; default stays openssl) — TLS1.3, CertFP via handshake-sig verify, SNI, REHASH reload; bump integration timeouts for loaded-host robustness

Browse source
This commit is contained in:
Jean Chevronnet 2026-08-18 20:20:21 +00:00
parent 2565089666
commit fc58113db9
5 changed files with 379 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

4
Cargo.toml
View file

@ -29,6 +29,10 @@ ahash = "0.8"
mimalloc = "0.1"
# SIMD byte search — accelerates the newline scan in the line framer.
memchr = "2"
# Pure-Rust TLS backend, opt-in via `tls_backend = rustls` (default stays openssl).
# ring provider (no aws-lc-rs); its `unsafe` stays internal like every other crate.
rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12", "logging"] }
rustls-pemfile = "2"
[dev-dependencies]
# integration tests spawn the built binary and act as a TLS client against it