From 122b8a89e7c93556b451c953f154f1d1382cb75f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Apr 2023 08:59:54 +0000 Subject: [PATCH] deps: bump rustls from 0.20.8 to 0.21.0 Bumps [rustls](https://github.com/rustls/rustls) from 0.20.8 to 0.21.0. - [Release notes](https://github.com/rustls/rustls/releases) - [Changelog](https://github.com/rustls/rustls/blob/main/RELEASE_NOTES.md) - [Commits](https://github.com/rustls/rustls/compare/v/0.20.8...v/0.21.0) --- updated-dependencies: - dependency-name: rustls dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- Cargo.lock | 25 +++++++++++++++++++++++-- transports/quic/Cargo.toml | 2 +- transports/tls/Cargo.toml | 2 +- 3 files changed, 25 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 0e071f5e93f..7b73f3bf099 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2585,7 +2585,7 @@ dependencies = [ "quickcheck", "quinn-proto", "rand 0.8.5", - "rustls 0.20.8", + "rustls 0.21.0", "thiserror", "tokio", ] @@ -2735,7 +2735,7 @@ dependencies = [ "libp2p-yamux", "rcgen 0.10.0", "ring", - "rustls 0.20.8", + "rustls 0.21.0", "thiserror", "tokio", "webpki 0.22.0", @@ -4138,6 +4138,17 @@ dependencies = [ "webpki 0.22.0", ] +[[package]] +name = "rustls" +version = "0.21.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "07180898a28ed6a7f7ba2311594308f595e3dd2e3c3812fa0a80a47b45f17e5d" +dependencies = [ + "ring", + "rustls-webpki", + "sct 0.7.0", +] + [[package]] name = "rustls-pemfile" version = "1.0.2" @@ -4147,6 +4158,16 @@ dependencies = [ "base64 0.21.0", ] +[[package]] +name = "rustls-webpki" +version = "0.100.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "d6207cd5ed3d8dca7816f8f3725513a34609c0c765bf652b8c3cb4cfd87db46b" +dependencies = [ + "ring", + "untrusted", +] + [[package]] name = "rw-stream-sink" version = "0.3.0" diff --git a/transports/quic/Cargo.toml b/transports/quic/Cargo.toml index b059edceca6..1b4ade175a5 100644 --- a/transports/quic/Cargo.toml +++ b/transports/quic/Cargo.toml @@ -20,7 +20,7 @@ log = "0.4" parking_lot = "0.12.0" quinn-proto = { version = "0.9.0", default-features = false, features = ["tls-rustls"] } rand = "0.8.5" -rustls = { version = "0.20.2", default-features = false } +rustls = { version = "0.21.0", default-features = false } thiserror = "1.0.26" tokio = { version = "1.21.1", default-features = false, features = ["net", "rt"], optional = true } diff --git a/transports/tls/Cargo.toml b/transports/tls/Cargo.toml index ffff5e73347..e0e232f7246 100644 --- a/transports/tls/Cargo.toml +++ b/transports/tls/Cargo.toml @@ -21,7 +21,7 @@ yasna = "0.5.0" # Exposed dependencies. Breaking changes to these are breaking changes to us. [dependencies.rustls] -version = "0.20.7" +version = "0.21.0" default-features = false features = ["dangerous_configuration"] # Must enable this to allow for custom verification code.