openssl-sys is pulled down by reqwest even when using rustls about thirtyfour

[stevepryde]

Hmm, I think all this needs is to set default-features = false for reqwest. I'll update it.

[opensourcegeek]

Great, thanks

[stevepryde]

@opensourcegeek I've updated this in v0.23.2. Let me know if this works for you.

[opensourcegeek]

@stevepryde thanks. I did update the dependency but still seeing openssl being pulled down. Is there any thing else I need to set at my end?

├── thirtyfour v0.23.2
│   ├── async-trait v0.1.50 (proc-macro) (*)
│   ├── base64 v0.13.0
│   ├── chrono v0.4.19 (*)
│   ├── displaydoc v0.1.7 (proc-macro)
│   │   ├── proc-macro2 v1.0.26 (*)
│   │   ├── quote v1.0.9 (*)
│   │   └── syn v1.0.69 (*)
│   ├── futures v0.3.14 (*)
│   ├── log v0.4.14 (*)
│   ├── reqwest v0.11.3
│   │   ├── base64 v0.13.0
│   │   ├── bytes v1.0.1
│   │   ├── encoding_rs v0.8.28 (*)
│   │   ├── futures-core v0.3.14
│   │   ├── futures-util v0.3.14 (*)
│   │   ├── http v0.2.4 (*)
│   │   ├── http-body v0.4.1 (*)
│   │   ├── hyper v0.14.5 (*)
│   │   ├── hyper-rustls v0.22.1
│   │   │   ├── futures-util v0.3.14 (*)
│   │   │   ├── hyper v0.14.5 (*)
│   │   │   ├── log v0.4.14 (*)
│   │   │   ├── rustls v0.19.1 (*)
│   │   │   ├── tokio v1.5.0 (*)
│   │   │   ├── tokio-rustls v0.22.0
│   │   │   │   ├── rustls v0.19.1 (*)
│   │   │   │   ├── tokio v1.5.0 (*)
│   │   │   │   └── webpki v0.21.4 (*)
│   │   │   └── webpki v0.21.4 (*)
│   │   ├── hyper-tls v0.5.0
│   │   │   ├── bytes v1.0.1
│   │   │   ├── hyper v0.14.5 (*)
│   │   │   ├── native-tls v0.2.7
│   │   │   │   ├── log v0.4.14 (*)
│   │   │   │   ├── openssl v0.10.33
│   │   │   │   │   ├── bitflags v1.2.1
│   │   │   │   │   ├── cfg-if v1.0.0
│   │   │   │   │   ├── foreign-types v0.3.2
│   │   │   │   │   │   └── foreign-types-shared v0.1.1
│   │   │   │   │   ├── libc v0.2.93
│   │   │   │   │   ├── once_cell v1.7.2
│   │   │   │   │   └── openssl-sys v0.9.61
│   │   │   │   │       └── libc v0.2.93
│   │   │   │   │       [build-dependencies]
│   │   │   │   │       ├── autocfg v1.0.1
│   │   │   │   │       ├── cc v1.0.67
│   │   │   │   │       └── pkg-config v0.3.19
│   │   │   │   ├── openssl-probe v0.1.2
│   │   │   │   └── openssl-sys v0.9.61 (*)

[stevepryde]

Hmm, the default feature might be enabling that implicitly. You probably want default-features = false on thirtyfour in your project.

The default feature looks like this default = ["tokio-runtime", "reqwest-default-tls"].
You want to disable reqwest-default-tls but retain tokio-runtime - so you'd need something like this:

thirtyfour = { version = "0.23.2", default-features = false, features = ["tokio-runtime", "reqwest-rustls-tls"] }

[stevepryde]

Note that this is all assuming that reqwest itself will not include the openssl dependency if we supply these feature flags.

[opensourcegeek]

@stevepryde - Switching off the default features did the trick. Thanks again!

[stevepryde]

Nice 😊