Repository navigation
[RFC] Add a feature to use Rustls instead of open-ssl #3839
Description
Activity
I like to do. I think the only reason we now use openssl is the ssl interface in python is designed as an openssl wrapper
maybe this crate will be helpful https://github.com/stepancheg/rust-tls-api
I want to take on this issue.
I want to take on this issue.
I wish you luck.
Reacted by Remy Choi and Theo Paris
Summary
Because Open-SSL is a C library that is hard to build especially on Windows
Detailed Explanation
Building Rustpython with SSL enabled is a pain at least on windows which requires you to manually set up stuff beforehand, VCPKG is apparently the easiest way to get Open-SSL. Rustls, on the other hand, is written entirely in native Rust as far as I know and will compile just fine without you having to do anything. It's also statically linked and apparently might be faster than Open-SSL anyway.
Drawbacks, Rationale, and Alternatives
A possible alternative is the native_tls crate, which abstracts over platform-specific TLS implementations. I believe it works automatically on Windows, but falls back to Open-SSL on some other platforms.
Unresolved Questions