Use ring instead of aws-lc-rs

[Dig-Doug]

Describe the feature

Is there a way to configure the sdk to use ring for rustls?

I see a feature flag here in the http-client, but it's unclear to me how to configure it from aws-config (here).

aws-lc-rs v1.12.6
├── rustls v0.23.25
│   ├── aws-smithy-http-client v1.0.0
│   │   ├── aws-smithy-http-client feature "default"
│   │   │   └── aws-smithy-runtime v1.8.0
│   │   │       ├── aws-smithy-runtime feature "client"
│   │   │       │   ├── aws-config v1.6.0
│   │   │       │   │   ├── aws-config feature "credentials-process"

Use Case

Allow switching between crypto providers.

Proposed Solution

No response

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

A note for the community

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue, please leave a comment

[aajtodd]

This is documented in the developer guide.

Also here is example of creating an HTTP client with rustls+ring that you would pass into your aws-config / SDK client.

[Dig-Doug]

Is it possible to remove it from the dependency tree completely?

[Dig-Doug]

Ah I think I see, in aws-config, disable the default features to remove default-https-client, depend on aws-smithy-http-client directly and create a client, then pass to the config.

[aajtodd]

Yeah if you want to disable the default HTTPS client from being compiled at all you would have to customize the features enabled. Due to feature unification you'd have to do this for all SDK clients as well.

I'm going to go ahead and close this as answered.

[github-actions]

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.

[rukai]

@Dig-Doug any chance your solution to this is open source and shareable?