KKRainbow 6154b550c1 fix(tls): select ring explicitly across application entry points ...

Building easytier and easytier-web together enabled both ring and aws-lc
through reqwest 0.13. HTTPS endpoint discovery used rustls automatic
provider selection and could panic before sending a ClientHello.

Use reqwest rustls-no-provider to share ring, and explicitly install the
process default before starting CLI, GUI and web services. Initialize it
for standalone webhook construction too, retaining any provider already
selected by the host.

Pass ring directly to HTTPS discovery and WebSocket TLS builders so
library use is independent of application initialization order. Keep
existing certificate verification, SNI and protocol settings.

Add a duplex-stream regression that reproduces the original panic with
both backends enabled, and run it in CI. Explain provider selection and
feature-unification constraints next to the relevant code.

Validation: the new regression fails before the fix and passes after it.
Docker tests pass: 10 discovery, 13 webhook, 2 WebSocket, WSS three-node
AES-GCM relay, and WSS credential connectivity. Clippy with warnings
denied and fmt pass. GUI, browser, WASI, minimal native, endpoint-only
and WebSocket-only compile checks pass. Linux and Windows release
dependency trees contain only the ring runtime backend.

Fixes #2607

2026-10-08 23:14:40 +08:00

..

src

fix(tls): select ring explicitly across application entry points

2026-10-08 23:14:40 +08:00

testdata

refactor(core): separate portable core from native runtime (#2451)

2026-07-26 15:41:55 +08:00

tests

refactor(core): separate portable core from native runtime (#2451)

2026-07-26 15:41:55 +08:00

Cargo.toml

build(core): consolidate crypto dependencies and trim features

2026-10-08 23:00:21 +08:00