You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@arrow.apache.org by "crepererum (via GitHub)" <gi...@apache.org> on 2023/09/27 14:19:22 UTC
[GitHub] [arrow-rs] crepererum opened a new issue, #4870: object_store: native certs, w/o webpki-roots
crepererum opened a new issue, #4870:
URL: https://github.com/apache/arrow-rs/issues/4870
**Is your feature request related to a problem or challenge? Please describe what you are trying to do.**
I would like to be able to build a version of `object_store` that uses the OS-native CA root system and NOT bundle CAs. This has the following advantages:
- some server environments use custom CAs
- webpki-roots is MPL-2.0 licensed which might not be desired for certain projects
Note that using builtin roots should still be an option since some users may prefer that.
**Describe the solution you'd like**
Have feature flags that toggle between `reqwest/rustls-tls-native-roots` and `reqwest/rustls-tls-webpki-roots`. Do NOT use `reqwest/rustls-tls` which selects `reqwest/rustls-tls-webpki-roots`.
**Describe alternatives you've considered**
\-
**Additional context**
\-
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] object_store: native certs, w/o webpki-roots [arrow-rs]
Posted by "tustvold (via GitHub)" <gi...@apache.org>.
tustvold commented on issue #4870:
URL: https://github.com/apache/arrow-rs/issues/4870#issuecomment-1791535806
> Can't use it to access some endpoints that have use a self signed/internal certificate
I've filed https://github.com/apache/arrow-rs/issues/5034 for this use-case, as I believe it slightly different to this ticket
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [arrow-rs] jonas-w commented on issue #4870: object_store: native certs, w/o webpki-roots
Posted by "jonas-w (via GitHub)" <gi...@apache.org>.
jonas-w commented on issue #4870:
URL: https://github.com/apache/arrow-rs/issues/4870#issuecomment-1741188230
This also seems to be creating issues with `pola-rs`. Can't use it to access some endpoints that have use a self signed/internal certificate.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] object_store: native certs, w/o webpki-roots [arrow-rs]
Posted by "crepererum (via GitHub)" <gi...@apache.org>.
crepererum closed issue #4870: object_store: native certs, w/o webpki-roots
URL: https://github.com/apache/arrow-rs/issues/4870
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org