Skip to content

Commit c39c519

Browse files
committed
oci-client: allow using native cert store with rustls
The feature oci-client/rustls-tls-native-roots allows the client to read platform's native certificate store when using rustls suites. This useful when self-signed registry is used and the certs are loaded in the platform's trusted CA by commands like update-ca-certificates. Signed-off-by: Xynnn007 <[email protected]>
1 parent 6130c10 commit c39c519

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

Cargo.toml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,10 @@ sigstore-trust-root = [
5959
sigstore-trust-root-native-tls = ["reqwest/native-tls", "sigstore-trust-root"]
6060
sigstore-trust-root-rustls-tls = ["reqwest/rustls-tls", "sigstore-trust-root"]
6161

62+
# This feature flag is used to allow using the platform's native certificate store
63+
# when using rustls suites
64+
rustls-tls-native-roots = ["oci-client/rustls-tls-native-roots"]
65+
6266
cosign-native-tls = [
6367
"oci-client/native-tls",
6468
"cert",

0 commit comments

Comments
 (0)