From ae29f7f73f7d58c3f23f528c19d574707fa65eae Mon Sep 17 00:00:00 2001
From: Alex Auvolat <alex@adnab.me>
Date: Mon, 7 Sep 2026 19:16:10 +0200
Subject: [PATCH] k2v-client: use ring tls provider

---
 Cargo.lock                | 1 +
 src/k2v-client/Cargo.toml | 1 +
 src/k2v-client/lib.rs     | 2 +-
 3 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/Cargo.lock b/Cargo.lock
index 3eba5b8e..85138a85 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2837,6 +2837,7 @@ dependencies = [
  "hyper-util",
  "log",
  "percent-encoding",
+ "rustls 0.23.39",
  "serde",
  "serde_json",
  "sha2 0.10.9",
diff --git a/src/k2v-client/Cargo.toml b/src/k2v-client/Cargo.toml
index 00e7606e..423ed7eb 100644
--- a/src/k2v-client/Cargo.toml
+++ b/src/k2v-client/Cargo.toml
@@ -24,6 +24,7 @@ percent-encoding.workspace = true
 hyper = { workspace = true, default-features = false, features = ["http1", "http2"] }
 hyper-util.workspace = true
 hyper-rustls.workspace = true
+rustls.workspace = true
 serde = { workspace = true, default-features = false, features = ["derive", "std"] }
 serde_json.workspace = true
 thiserror.workspace = true
diff --git a/src/k2v-client/lib.rs b/src/k2v-client/lib.rs
index c4c2ef65..21b1e15b 100644
--- a/src/k2v-client/lib.rs
+++ b/src/k2v-client/lib.rs
@@ -72,7 +72,7 @@ impl K2vClient {
 	/// Create a new K2V client.
 	pub fn new(config: K2vClientConfig) -> Result<Self, Error> {
 		let connector = hyper_rustls::HttpsConnectorBuilder::new()
-			.with_native_roots()?
+			.with_provider_and_native_roots(rustls::crypto::ring::default_provider())?
 			.https_or_http()
 			.enable_http1()
 			.enable_http2()