RUST-1083 Can you features ring/rustls replace with openssl?

[govo]

Because ring has some problem at some OS system, like this briansmith/ring#1417.

This make the project build failed at centos 6.8. Old OS but still in use.

Is it able to change ring/rustls to openssl?

[kakoc]

Seems that being able to use openssl could potentially solve this issue(due to rustls limitations) as well: #487

[patrickfreed]

Thanks for your suggestion! I filed RUST-1083 to track this; the team will discuss this at our next triage meeting.

[bajanam]

@kakoc We have discussed and this this is an interesting idea, however, we do not have the capacity to work on this right now and we will revisit in a few months.

[loafofpiecrust]

Just to second this: I'd love an option to use system OpenSSL because ring has some difficulties with cross-compiling that make it a challenge to produce binaries for AWS Lambda (x86_64 linux gnu) from a MacOS host.

[techbelle]

Update on this issue: we will offer the OpenSSL option in the rust driver in our upcoming version, 2.2.0

[patrickfreed]

An important caveat: we're unfortunately not currently able to remove rustls or ring as dependencies, even when the OpenSSL feature is enabled, without creating a breaking change for users that build with --no-default-features. Introducing a feature flag for rustls is something we'll want to consider for the next major version of the crate, though.

[mahmoudajawad]

Any update to this? I decided to use rust for a new project I'm on, and as part of creating the PoC, I wanted to add mongodb driver but I'm hitting a problem getting mongodb installed due to ring dependency on my fedora box. I'm using rust v1.66.1 (fedora distributed), and installing mongodb driver v2.3.1.

[abr-egn]

When we release a new major version (not soon), we'll be able to drop rustls and ring as mandatory dependencies. Until then, if those dependencies are a blocker the best I can recommend is to clone the driver repository and remove those dependencies by hand (I believe it's just a matter of removing them from Cargo.toml if you'll always use openssl).