feat: add optional native-tls support as alternative to rustls (#8037)

Signed-off-by: Rodolfo Olivieri <rolivier@redhat.com>
Co-authored-by: Claude <noreply@anthropic.com>
This commit is contained in:
Rodolfo Olivieri
2026-03-25 17:46:50 -03:00
committed by GitHub
parent 3a9805e255
commit caef9f6466
17 changed files with 786 additions and 100 deletions
-28
View File
@@ -1,28 +0,0 @@
#!/bin/bash
# Prevent native-tls/OpenSSL from being added to the dependency tree.
# These cause Linux compatibility issues with OpenSSL version mismatches.
# See: https://github.com/block/goose/issues/6034
set -e
BANNED_CRATES=("native-tls" "openssl-sys" "openssl")
FOUND_BANNED=0
for crate in "${BANNED_CRATES[@]}"; do
if cargo tree -i "$crate" 2>/dev/null | grep -q "$crate"; then
echo "ERROR: Found banned crate '$crate' in dependency tree"
echo "This causes Linux compatibility issues with OpenSSL versions."
echo "Use rustls-based alternatives instead (e.g., rustls-tls-native-roots)."
echo ""
echo "Dependency chain:"
cargo tree -i "$crate"
echo ""
FOUND_BANNED=1
fi
done
if [ $FOUND_BANNED -eq 1 ]; then
exit 1
fi
echo "✓ No banned TLS crates found (native-tls, openssl, openssl-sys)"