add: rustls native cert for roots

niclabs · Sep 4, 2024 · 1a7bde3 · 1a7bde3
1 parent ace99aa
commit 1a7bde3
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 1 deletion.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -27,5 +27,6 @@ openssl = "0.10.66"
 tokio-rustls = "0.26.0"
 webpki = "0.22.4"
 webpki-roots = "0.26.3"
+rustls-native-certs = "0.8.0"
 [lib]
 doctest = false
diff --git a/src/client/tls_connection.rs b/src/client/tls_connection.rs
@@ -54,7 +54,11 @@ impl ClientConnection for ClientTLSConnection {
     /// creates socket tcp, sends query and receive response
     async fn send(self, dns_query: DnsMessage) -> Result<Vec<u8>, ClientError> {
         // async fn send(self, dns_query: DnsMessage) -> Result<(Vec<u8>, IpAddr), ClientError> {
-
+            let root_store = RootCertStore::empty();
+            let mut roots = rustls::RootCertStore::empty();
+            for cert in rustls_native_certs::load_native_certs().expect("could not load platform certs") {
+                roots.add(cert).unwrap();
+            }
             let conn_timeout: Duration = self.get_timeout();
             let bytes: Vec<u8> = dns_query.to_bytes();
             let server_addr:SocketAddr = SocketAddr::new(self.get_server_addr(), 53);