I've prepared a version of reqwest with a vendored copy
of hyper-rustls to get the package fixed while we wait for
a suitable version to be packaged seperately.
It's in debcargo-conf, can you test it before I upload it to
sid?
On 08/03/2025 18:05, Peter Green wrote:
Unfortunately we can't remove this patch yet (along with
downgrade-rustls.patch) until the following packages become available:
- librust-hyper-rustls-0.27+http1-dev
- librust-rustls-pemfile-2+default-dev
Opening this bug so it's documented.
I've just updated rustls-pemfile in sid.
The question is, with the looming freeze what should we do about
hyper-rustls, I see a few options.
1. Convince Jonas to update it (crickets so-far, and it would also
break stuff that was still on the old rustls unless he semver-suffixes
it)
2. Introduce a rust-rustls-pemfile-2 package, it wouldn't technically
be a hijack,
but it would still seem to be treading on his toes.
3. Embed the required code from hyper-rustls in rustls-pemfile, until
the standalone crate is available at a suitable version.
I'm inclined towards option 3 for the time being.
