Prepare 0.7.0 release

.github/workflows/rust.yml

@@ -21,17 +21,27 @@ jobs:
 
     runs-on: ${{ matrix.os }}
 
-    env:
-      AWS_LC_SYS_NO_ASM: 1
-
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: ${{ matrix.rust }}
-      - run: cargo check
+      - name: Install NASM for aws-lc-rs on Windows
+        if: runner.os == 'Windows'
+        uses: ilammy/setup-nasm@v1
+      - run: cargo check --no-default-features --features aws-lc-rs
+      - run: cargo check --no-default-features --features ring
+      - run: cargo check # hyper-rustls, ring
       - run: cargo test
-      - run: cargo test --no-default-features --features hyper-rustls,aws-lc-rs
+
+  fips:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: 1.67.0
+      - run: cargo check --lib --features fips
 
   msrv:
     runs-on: ubuntu-latest

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "instant-acme"
-version = "0.6.1"
+version = "0.7.0"
 edition = "2021"
 rust-version = "1.67"
 license = "Apache-2.0"
@@ -13,17 +13,22 @@ categories = ["web-programming", "api-bindings"]
 
 [features]
 default = ["hyper-rustls", "ring"]
-ring = ["dep:ring", "hyper-rustls?/ring", "rcgen/ring"]
 aws-lc-rs = ["dep:aws-lc-rs", "hyper-rustls?/aws-lc-rs", "rcgen/aws_lc_rs"]
 fips = ["aws-lc-rs", "aws-lc-rs?/fips"]
+hyper-rustls = ["dep:hyper", "dep:hyper-rustls", "dep:hyper-util"]
+ring = ["dep:ring", "hyper-rustls?/ring", "rcgen/ring"]
 
 [dependencies]
+async-trait = "0.1"
 aws-lc-rs = { version = "1.8.0", optional = true }
 base64 = "0.21.0"
-hyper = { version = "1.3.1", features = ["client", "http1", "http2"] }
-hyper-rustls = { version = "0.27", default-features = false, features = ["http1", "http2", "native-tokio", "tls12", "rustls-native-certs"], optional = true }
-hyper-util = { version = "0.1.5", features = ["client", "client-legacy", "http1", "http2", "tokio"] }
+bytes = "1"
+http = "1"
+http-body = "1"
 http-body-util = "0.1.2"
+hyper = { version = "1.3.1", features = ["client", "http1", "http2"], optional = true }
+hyper-rustls = { version = "0.27", default-features = false, features = ["http1", "http2", "native-tokio", "tls12", "rustls-native-certs"], optional = true }
+hyper-util = { version = "0.1.5", features = ["client", "client-legacy", "http1", "http2", "tokio"], optional = true }
 ring = { version = "0.17", features = ["std"], optional = true }
 rustls-pki-types = "1.1.0"
 serde = { version = "1.0.104", features = ["derive"] }

README.md

@@ -20,9 +20,19 @@ specification.
 * Support for external account binding
 * Support for certificate revocation
 * Uses hyper with rustls and Tokio for HTTP requests
-* Uses *ring* for ECDSA signing
+* Uses *ring* or aws-lc-rs for ECDSA signing
 * Minimum supported Rust version: 1.63
 
+## Cargo features
+
+* `hyper-rustls` (default): use a hyper client with rustls
+* `ring` (default): use the *ring* crate as the crypto backend
+* `aws-lc-rs`: use the aws-lc-rs crate as the crypto backend
+* `fips`: enable the aws-lc-rs crate's FIPS-compliant mode
+
+If both `ring` and `aws-lc-rs` are enabled, which backend is used depends on the `fips` feature.
+If `fips` is enabled, `aws-lc-rs` is used; otherwise, `ring` is used.
+
 ## Limitations
 
 * Only tested with DNS challenges against Let's Encrypt (staging and production) and ZeroSSL (production) so far