0.27.7

• Seal the ConfigBuilderExt trait. This is an extension trait used to offer a more convenient server verifier configuration API. This is technically a breaking change, but we think it is unlikely that anyone has actually implemented this trait.
• Upgrade to rustls-platform-verifier 0.6. Because the platform verifier is now initializing its root certificate store on some platforms eagerly (on initialization rather than on first use), infallible API for setting up the platform verifier has been deprecated in favor of newly added fallible API.

What's Changed

• Upgrade to rustls-platform-verifier 0.6 by @djc in #303

0.27.6

Avoid duplicate dependencies in downstream projects by upgrading to webpki-roots 1.

What's Changed

• build: drop unused dependency on futures-util by @paolobarbolini in #299
• Upgrade to webpki-roots 1 by @djc in #300

0.27.5

Refactoring in #245 (first released in 0.25.0) broke the optional enforcement of HTTPS only connections (that is, only HTTPS connections can be made through the connector) on the hyper-rustls HttpsConnector; this was found and fixed in #295.

What's Changed

• Fix https_only/enforce_https enforcement by @saleemrashid in #295
• Prepare 0.27.5 release by @djc in #296

0.27.4

What's Changed

• perf: forward write-vectored calls by @seanmonstar in #289
• Update rustls-platform-verifier requirement from 0.3 to 0.4 by @dependabot in #290
• Bump MSRV to 1.71 to match other crates by @djc in #291
• tests: fix clippy::zombie_processes findings by @cpu in #292
• Actually use configured crypto provider for the platform verifier by @Gelbpunkt in #293
• Upgrade to rustls-platform-verifier 0.5 by @djc in #294

v/0.27.3

What's Changed

• fix: add rustls-platform-verifier flag for importing ConfigBuilderExt by @junkurihara in #276
• docs: add a feature rustls-platform-verifier in the list of README.md by @junkurihara in #277
• Bump seanmiddleditch/gha-setup-ninja from 4 to 5 by @dependabot in #278
• Bump MSRV to 1.70 (for tokio 1.39) by @djc in #281
• Builder fixes by @Gelbpunkt in #283
• enable rustls-platform-verifier for docs.rs by @flisky in #279
• Upgrade to rustls-native-certs 0.8 by @djc in #285

0.27.2

What's Changed

• ci: use ubuntu-latest instead of ubuntu-20.04 by @djc in #271
• Avoid aws-lc-rs feature flag when building docs. by @tobz in #273
• Bump version to 0.27.2 by @djc in #275

0.27.1

Added

• New ConnectorBuilder::with_server_name_resolver() fn for specifying an implementation of the ResolveServerName trait to dynamically resolve the subject name used when verifying a server's certificate.
• New fips feature flag for enabling the aws-lc-rs Rustls crypto provider in FIPS mode.

Changed

• ConnectorBuilder::with_server_name() is now deprecated. Existing usages should be replaced with ConnectorBuilder::with_server_name_resolver() and a FixedServerNameResolver.

What's Changed

• Add feature flag for enabling FIPS. by @tobz in #268
• Support custom server name resolution by @sfackler in #269
• Cargo: v0.27.0 -> v0.27.1 by @cpu in #270

New Contributors

• @tobz made their first contribution in #268
• @sfackler made their first contribution in #269

Full Changelog: v/0.27.0...v/0.27.1

0.27.0

Changed

• Rustls updated to 0.23
• Default cryptography provider changed to aws-lc-rs to match upstream Rustls project. Note that this has some implications on platform support and build-time tool requirements such as cmake on all platforms and nasm on Windows.
  Support for ring continues to be available: set the ring crate feature.

Added

• New with_platform_verifier connector builder fns for using rustls-platform-verifier for certificate verification. Requires the optional rustls-platform-verifier feature be enabled.
• New HttpsConnector::builder fn for conveniently constructing a ConnectorBuilder.

Changelog

• Add built-in support for rustls-platform-verifier by @djc in #253
• Cargo.toml: add aws-lc-rs feature as crypto backend by @BiagioFesta in #255
• feat: add a builder() method to HttpsConnector by @Fishrock123 in #259
• 0.27.0 preparation, Rustls 0.23 update by @cpu in #266

New Contributors

• @BiagioFesta made their first contribution in #255
• @Fishrock123 made their first contribution in #259

Full Changelog: v/0.26.0...v/0.27.0

0.26.0

• The hyper crate dependency has been updated to 1.0. hyper-rustls now uses the new hyper-util crate to replace functionality removed from hyper.
• The Acceptor API has been removed and relevant examples updated. Hyper 1.0 has library consumers handle binding sockets and accepting connections themselves, removing the need for the Acceptor API. See examples/server.rs for an up to date example for accepting connections.
• The tokio-runtime feature has been removed - hyper-rustls depends on hyper-util, and the tokio feature in hyper-util is required for the necessary IO adapter traits. Tokio was already a hard dependency of this crate.

What's Changed

• Update hyper to 1.x and integrate with hyper-util by @Gelbpunkt in #232

New Contributors

• @Gelbpunkt made their first contribution in #232

Full Changelog: v/0.25.0...v/0.26.0

0.25.0

• The Rustls dependency has been updated to 0.22
• The acceptor module is now public.
• The TlsStream type now has io and connection accessor methods for getting a reference to the underlying I/O stream and rustls::ServerConnection.
• A new AcceptorBuilder::with_connector method is added for taking a generic acceptor implementing Accept.
• ConnectorBuilder::enable_all_versions has been fixed to advertise the correct ALPN values based on enabled crate features.
• ConnectorBuilder::with_native_roots has been updated to be fallible, allowing a failure to load native roots to be handled by the caller instead of producing a panic.

What's Changed

• Update webpki-roots requirement from 0.23 to 0.24 by @dependabot in #212
• Disable unnecessary default features from futures-util by @djc in #213
• deps: update webpki-roots v0.24 -> 0.25 by @cpu in #215
• Acceptor improvements by @djc in #219
• Bump actions/checkout from 3 to 4 by @dependabot in #220
• add TlsAcceptor::with_acceptor method by @MarinPostma in #221
• Connector: enable_all_versions with matching alpn vs features by @TimLuq in #224
• Prepare 0.24.2 release by @djc in #225
• ci: check semver compat by @cpu in #226
• Fix build status badge and update Readme by @atouchet in #227
• Remove undocumented panic in with_native_roots by @kayabaNerve in #228
• Update to rustls alpha releases by @djc in #233
• Update to rustls 0.22.0 alpha.6 by @tottoto in #235
• hyper-rustls 0.25 prep, rustls 0.22 update by @cpu in #242
• Style tweaks by @djc in #245

New Contributors

• @MarinPostma made their first contribution in #221
• @TimLuq made their first contribution in #224
• @kayabaNerve made their first contribution in #228
• @tottoto made their first contribution in #235

Full Changelog: v/0.24.1...v/0.25.0