chore(k8s-intf): Move rustls to aws-lc-rs

mvachhar · mvachhar · commit f5e2ac77c304 · 2025-12-15T13:02:41.000-07:00
ring is fine for rustls but aws-lc-rs has better formal
verification and is now preferred.

This commit also adds the OpenSSL license to permitted licenses
since aws-lc-rs uses code with this license.

This commit also adds the OpenSSL and SSLeay statement to NOTICE.

Signed-off-by: Manish Vachharajani &lt;manish@githedgehog.com&gt;
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/NOTICE b/NOTICE
@@ -0,0 +1,3 @@
+This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. (http://www.openssl.org/)
+
+This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)
diff --git a/deny.toml b/deny.toml
@@ -67,6 +67,7 @@ allow = [
   "NCSA",
   "Nokia",
   "OFL-1.1",
+  "OpenSSL",
   "OSL-1.0",
   "OSL-2.0",
   "OSL-2.1",
diff --git a/k8s-intf/Cargo.toml b/k8s-intf/Cargo.toml
@@ -22,7 +22,7 @@ futures = { workspace = true }
 kube = { workspace = true, features = ["client", "derive", "runtime", "rustls-tls"] }
 k8s-openapi = { workspace = true, features = ["latest", "schemars", "std"] }
 linkme = { workspace = true }
-rustls = { workspace = true, features = ["ring"] }
+rustls = { workspace = true, features = ["aws-lc-rs"] }
 schemars = { workspace = true, features = ["derive", "std"] }
 serde = { workspace = true }
 serde-duration-ext = { workspace = true }

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. (http://www.openssl.org/)`
	`2`	`+`
	`3`	`+This product includes cryptographic software written by Eric Young ([email protected])`