feat(runner): disable certificate caching

This commit is contained in:
2026-02-25 16:26:28 +02:00
parent ea2a07d5aa
commit a5e166e0b0

View File

@@ -19,6 +19,7 @@ use runner::{
use rustls::{ use rustls::{
ClientConfig, DigitallySignedStruct, SignatureScheme, ClientConfig, DigitallySignedStruct, SignatureScheme,
client::danger::{HandshakeSignatureValid, ServerCertVerified, ServerCertVerifier}, client::danger::{HandshakeSignatureValid, ServerCertVerified, ServerCertVerifier},
compress::CompressionCache,
crypto::aws_lc_rs::{ crypto::aws_lc_rs::{
self, self,
kx_group::{X25519, X25519MLKEM768}, kx_group::{X25519, X25519MLKEM768},
@@ -104,7 +105,7 @@ fn build_tls_config(mode: KeyExchangeMode) -> miette::Result<ClientConfig> {
KeyExchangeMode::X25519Mlkem768 => vec![X25519MLKEM768], KeyExchangeMode::X25519Mlkem768 => vec![X25519MLKEM768],
}; };
let config = ClientConfig::builder_with_provider(Arc::new(provider)) let mut config = ClientConfig::builder_with_provider(Arc::new(provider))
.with_protocol_versions(&[&TLS13]) .with_protocol_versions(&[&TLS13])
.into_diagnostic() .into_diagnostic()
.context("failed to set TLS versions")? .context("failed to set TLS versions")?
@@ -112,6 +113,8 @@ fn build_tls_config(mode: KeyExchangeMode) -> miette::Result<ClientConfig> {
.with_custom_certificate_verifier(Arc::new(NoVerifier)) .with_custom_certificate_verifier(Arc::new(NoVerifier))
.with_no_client_auth(); .with_no_client_auth();
config.cert_compression_cache = Arc::new(CompressionCache::Disabled);
Ok(config) Ok(config)
} }