You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
ring is no longer maintained, and while there's a discussion about transferring ownership it seems not much development is likely to happen in the future.
graviola is an alternative that promises to be much easier to deal with in terms of compilation and distribution, and based on their benchmarks performs quite well compared to ring (sometimes better, sometimes worse).
The tls-graviola branch contains a bunch of changes needed to make this happen , but this work is blocked by the following:
The rand dependency issue is resolved as of ff875da. ctz/graviola@057a4c5 in turn fixes the certificate validation issue. This means that in theory we should be able to replace ring with graviola as part of 0.20.0.
Uh oh!
There was an error while loading. Please reload this page.
Description
ring is no longer maintained, and while there's a discussion about transferring ownership it seems not much development is likely to happen in the future.
graviola is an alternative that promises to be much easier to deal with in terms of compilation and distribution, and based on their benchmarks performs quite well compared to ring (sometimes better, sometimes worse).
The tls-graviola branch contains a bunch of changes needed to make this happen
, but this work is blocked by the following:Invalid certificates are not signaled as such when used through rustls ctz/graviola#67Adding graviola as a dependency introduces some dependencies with multiple versions, most of which are introduced through the rand crate, which I want to get rid of as part of Replace usage of the rand crate with a custom ChaCha12 CSPRNG #813Related work
No response
The text was updated successfully, but these errors were encountered: