Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make the CLI compile on Windows and MacOS (without openssl installed) #209

Merged
merged 18 commits into from
Mar 21, 2024

Conversation

bgrieder
Copy link
Contributor

@bgrieder bgrieder commented Mar 18, 2024

  • reqwest is switched to native-tls so it should not be using openssl on Windows and Macos but will on Linux (so that it can be FIPS compliant server-side)
  • josekit depends on openssl. Using the vendored openssl version in the client so that the ckms cli can build and run on Windows and MacOS without having to install openssl. After discussion, JWE is nor used and its support was removed, removing the need for josekit
  • CLI now depends on the KMS client only, which re-exposes KMIP

Closes #105

@bgrieder bgrieder self-assigned this Mar 18, 2024
@bgrieder bgrieder linked an issue Mar 18, 2024 that may be closed by this pull request
@bgrieder bgrieder requested a review from Manuthor March 18, 2024 05:26
@bgrieder bgrieder changed the title Make the CLI compile on Windows and MacOS (without openssl installed) Draft: Make the CLI compile on Windows and MacOS (without openssl installed) Mar 18, 2024
@ThibsG ThibsG force-pushed the 105-removal-of-openssl-in-the-cli branch from eef75fe to 2cd0f6e Compare March 18, 2024 16:15
@Manuthor Manuthor changed the title Draft: Make the CLI compile on Windows and MacOS (without openssl installed) Make the CLI compile on Windows and MacOS (without openssl installed) Mar 18, 2024
@Manuthor Manuthor marked this pull request as draft March 18, 2024 19:10
@bgrieder bgrieder marked this pull request as ready for review March 19, 2024 04:32
Manuthor and others added 5 commits March 19, 2024 11:23
* ci: run binaries in clean env. also in debug mode

* ci: increase size of tmp files

* ci: test ckms without openssl

* ci: test ckms without openssl

* ci: fix windows build

* ci: only build server just after openssl build

* fix(ckms): remove println on CreateKeyPairAction
…res (#218)

* fix: make sure to build with features specified in sub-crates Cargo.toml

* fix: check if openssl is in ckms-binary-symbols

* fix: bump env_logger version

* ci: check that ckms does not depend on openssl
@Manuthor Manuthor merged commit 9ae8a51 into develop Mar 21, 2024
33 checks passed
@Manuthor Manuthor deleted the 105-removal-of-openssl-in-the-cli branch March 21, 2024 15:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Removal of openssl in the CLI
3 participants