[Pkg-rust-maintainers] Bug#1096190: Missing https support with rustls-tls

[Peter Michael Green]

I've prepared a version of reqwest with a vendored copy
of hyper-rustls to get the package fixed while we wait for
a suitable version to be packaged seperately.

It's in debcargo-conf, can you test it before I upload it to
sid?

On 08/03/2025 18:05, Peter Green wrote:
>> Unfortunately we can't remove this patch yet (along with 
>> downgrade-rustls.patch) until the following packages become available:
>>
>> - librust-hyper-rustls-0.27+http1-dev
>> - librust-rustls-pemfile-2+default-dev
>>
>> Opening this bug so it's documented.
>
> I've just updated rustls-pemfile in sid.
>
> The question is, with the looming freeze what should we do about
> hyper-rustls, I see a few options.
>
> 1. Convince Jonas to update it (crickets so-far, and it would also 
> break stuff that was still on the old rustls unless he semver-suffixes 
> it)
> 2. Introduce a rust-rustls-pemfile-2 package, it wouldn't technically 
> be a hijack,
>    but it would still seem to be treading on his toes.
> 3. Embed the required code from hyper-rustls in rustls-pemfile, until 
> the standalone crate is available at a suitable version.
>
> I'm inclined towards option 3 for the time being.