Skip to content

Commit

Permalink
cdh/kms/aliyun: use rustls for client
Browse files Browse the repository at this point in the history
native-tls leverages openssl that does not support RC2 in rust wrapper.

Signed-off-by: Xynnn007 <[email protected]>
  • Loading branch information
Xynnn007 committed Oct 18, 2023
1 parent 414942c commit a435a25
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions confidential-data-hub/kms/src/plugins/aliyun/client.rs
Original file line number Diff line number Diff line change
Expand Up @@ -58,6 +58,7 @@ impl AliyunKmsClient {
let endpoint = format!("https://{kms_instance_id}.cryptoservice.kms.aliyuncs.com");
let cert = Self::read_kms_instance_cert(cert_pem.as_bytes())?;
let http_client = ClientBuilder::new()
.use_rustls_tls()
.add_root_certificate(cert)
.build()
.map_err(|e| Error::AliyunKmsError(format!("build http client failed: {e}")))?;
Expand Down

0 comments on commit a435a25

Please sign in to comment.