Skip to content

feat(https): TLS 1.3 support under native-tls 🎉#2975

Open
AverageHelper wants to merge 4 commits intoseanmonstar:masterfrom
AverageHelper:master
Open

feat(https): TLS 1.3 support under native-tls 🎉#2975
AverageHelper wants to merge 4 commits intoseanmonstar:masterfrom
AverageHelper:master

Conversation

@AverageHelper
Copy link
Copy Markdown

@AverageHelper AverageHelper commented Feb 27, 2026

Updates native-tls backend to a version with TLS 1.3 support, and updates min/max TLS version logic and related docs to match.

Fixes #2974
Addresses #2931

@AverageHelper AverageHelper marked this pull request as ready for review February 27, 2026 20:54
@AverageHelper
Copy link
Copy Markdown
Author

Not sure if there are unit tests around this that need updating, but I tested this in a local crate and it seems to do the trick

seanmonstar
seanmonstar previously approved these changes Feb 27, 2026
@AverageHelper
Copy link
Copy Markdown
Author

hmm, looks like this might actually require an MSRV bump too :/

@seanmonstar
Copy link
Copy Markdown
Owner

Aw bummer. I wish there was a way for us to conditionally that we could use the newer version without restricting using the older compiler.

@AverageHelper
Copy link
Copy Markdown
Author

agreed, tho idk how it would work 😓 As far as I can tell, the requirement in this case is with several transient dependencies, including openssl-sys and others that might be Hard™ to work around.

not sure how you wanna handle Semver with this, or if bumping msrv is a deal-breaker for this fix.

@lms0806
Copy link
Copy Markdown
Contributor

lms0806 commented Mar 17, 2026

The minimum version of rust-native-tls that supports Tlsv13 is 0.2.16, and the rust-version for that version is 1.80.0.

To use Tlsv13 with rust-native-tls, it seems best to upgrade the rust-version to 1.80.0.

@AverageHelper
Copy link
Copy Markdown
Author

hmm, guess the CI needs approval or something to do a re-check against 1.80

@AverageHelper
Copy link
Copy Markdown
Author

Actually, cargo-msrv tells me that 1.83.0 is in fact the lowest supported, due to transient icu_* deps reporting that as their MSRV. But if someone with CI access wants to edit my PR to find the lowest version that'll pass the CI's own checks (since I can't re-approve CI every time I try a different one, and idk about installing a different version of the toolchain manually like the CI seems to) that'd be kinda awesome 😅

@seanmonstar seanmonstar dismissed their stale review March 17, 2026 14:36

A large MSRV is undesirable

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

TLS 1.3 support when using native-tls

3 participants