OXYGENHUB

Make the TLS client configuration public, so tools calling hub APIs trust exactly what oxy trusts 11c958021e1a

Author
Andy McCall @andymccall <[email protected]>
When
· 2026-09-28 11:37 UTC
Signature
✔ signed by Andy McCall
Hash
11c958021e1ac07456b98ec07bdcba77fca6d8e957276082c97b73257c9b834d
Depends on
2b5ee371060e 5b9c6ad45f6e 750251b21a96
Depended on by
nothing yet
In bookmarks
agents-in-readme bare-hashes carried-not-removed carry-identical doctor-trust identical-sides keyless-tags main merge-remote-bookmark only-help-103 paths-for-resolutions-and-amend push-notes show-stat subrepo-pin-state switch-says
In tags
v0.1.0 v0.10.0 v0.11.0 v0.2.0 v0.3.0 v0.3.1 v0.4.0 v0.4.1 v0.4.2 v0.4.3 v0.4.4 v0.4.5 v0.4.6 v0.5.0 v0.5.1 v0.6.0 v0.7.0 v0.8.0 v0.9.0
Edits
2 atoms, 0 tree operations, 1 file

Browse the tree at this change

hide whitespace changes
modified crates/oxy-core/src/protocol.rs +3 −2
… 
126 unchanged lines
127 127 
    agent: ureq::Agent,
128 128 
}
129 129 

    

  
    

      130
      
      -
      
/// A TLS client configuration trusting the web roots plus `ca`, if given.

    

  
    

      131
      
      -
      
fn tls_client_config(ca: Option<&Path>) -> Result<Arc<rustls::ClientConfig>> {

    

  
    

      
      130
      +
      
/// A TLS client configuration trusting the web roots plus `ca`, if given:

    

  
    

      
      131
      +
      
/// the trust every oxy connection uses, shared with tools that call hub APIs.

    

  
    

      
      132
      +
      
pub fn tls_client_config(ca: Option<&Path>) -> Result<Arc<rustls::ClientConfig>> {

    

  
    

      132
      133
       
      
    let mut roots = rustls::RootCertStore::empty();

    

  
    

      133
      134
       
      
    roots.extend(webpki_roots::TLS_SERVER_ROOTS.iter().cloned());

    

  
    

      134
      135
       
      
    if let Some(path) = ca {

    

  
    

      
      
      …
      
364 unchanged lines