feat(download/rustls): use aws-lc instead of ring

Author: rami3l

Cargo.lock

@@ -18,11 +18,19 @@ reqwest-rustls-tls = [
 
 [dependencies]
 anyhow.workspace = true
+aws-lc-rs = { version = "1.7", default-features = false, features = [
+  "aws-lc-sys",
+  "alloc",
+  "ring-io",
+  "ring-sig-verify",
+  "bindgen",
+  "non-fips",
+] }
 curl = { version = "0.4.44", optional = true }
 env_proxy = { version = "0.4.1", optional = true }
 once_cell = { workspace = true, optional = true }
 reqwest = { version = "0.12", default-features = false, features = ["blocking", "gzip", "socks", "stream"], optional = true }
-rustls = { version = "0.23", optional = true, default-features = false, features = ["logging", "ring", "tls12"] }
+rustls = { version = "0.23", optional = true, default-features = false, features = ["logging", "aws_lc_rs", "tls12"] }
 rustls-platform-verifier = { version = "0.3", optional = true }
 thiserror.workspace = true
 tokio = { workspace = true, default-features = false, features = ["sync"] }

download/Cargo.toml

@@ -303,7 +303,7 @@ pub mod reqwest_be {
     use once_cell::sync::Lazy;
     use reqwest::{header, Client, ClientBuilder, Proxy, Response};
     #[cfg(feature = "reqwest-rustls-tls")]
-    use rustls::crypto::ring;
+    use rustls::crypto::aws_lc_rs;
     use tokio_stream::StreamExt;
     use url::Url;
 
@@ -359,7 +359,7 @@ pub mod reqwest_be {
             client_generic()
                 .use_preconfigured_tls(
                     rustls_platform_verifier::tls_config_with_provider(Arc::new(
-                        ring::default_provider(),
+                        aws_lc_rs::default_provider(),
                     ))
                     .expect("failed to initialize pre-configured rustls backend"),
                 )