max / makenotwork

synckit-client: switch reqwest to rustls (OS-native trust) Move the shared sync client's HTTP off native-tls onto rustls with the OS-native trust store (rustls-platform-verifier, no bundled crypto provider — consuming apps install one ring default). Lets goingson and audiofiles ship a single TLS stack instead of native-tls + the updater's rustls. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Max Johnson <me@maxj.phd> · 2026-07-23 16:50 UTC

Commit: 4f33d2401a84bff31f232ef1d997393dc1854342

Parent: 926fa16

1 file changed, +3 insertions, -1 deletion

M shared/synckit-client/Cargo.toml +3 -1

			@@ -32,7 +32,9 @@ sha2 = "0.11"
32	32		hex = "0.4"
33	33
34	34		# HTTP
35		-	reqwest = { version = "0.13", default-features = false, features = ["json", "native-tls", "stream", "form", "charset", "http2", "system-proxy"] }
	35	+	# rustls-no-provider: rustls TLS with the OS-native trust store (rustls-platform-verifier),
	36	+	# no bundled crypto provider — the consuming app installs one process default (ring).
	37	+	reqwest = { version = "0.13", default-features = false, features = ["json", "rustls-no-provider", "stream", "form", "charset", "http2", "system-proxy"] }
36	38		bytes = "1"
37	39		tokio = { version = "1", features = ["rt-multi-thread", "macros", "time", "fs", "io-util"] }
38	40		tokio-stream = "0.1"