Skip to content
This repository was archived by the owner on Jan 16, 2026. It is now read-only.

fix(sources): migrate from rustls-pemfile to rustls-pki-types#3150

Merged
op-will merged 1 commit intoop-rs:mainfrom
Himess:fix/migrate-rustls-pki-types
Dec 5, 2025
Merged

fix(sources): migrate from rustls-pemfile to rustls-pki-types#3150
op-will merged 1 commit intoop-rs:mainfrom
Himess:fix/migrate-rustls-pki-types

Conversation

@Himess
Copy link
Contributor

@Himess Himess commented Dec 5, 2025

Changes

  • crates/node/sources/src/signer/remote/cert.rs: Use CertificateDer::pem_file_iter and PrivateKeyDer::from_pem_file instead of rustls_pemfile functions
  • crates/node/sources/Cargo.toml: Remove rustls-pemfile dependency
  • Cargo.toml: Remove rustls-pemfile from workspace dependencies

Closes #3149

Migrate PEM certificate parsing from the deprecated rustls-pemfile crate
to rustls-pki-types which includes the same functionality since v1.10.0.

This resolves RUSTSEC-2025-0134 advisory about rustls-pemfile being
unmaintained.

Closes op-rs#3149
@codecov
Copy link

codecov bot commented Dec 5, 2025

Codecov Report

❌ Patch coverage is 0% with 11 lines in your changes missing coverage. Please review.
✅ Project coverage is 84.3%. Comparing base (d7d4b5d) to head (d2b3d7f).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Files with missing lines Patch % Lines
crates/node/sources/src/signer/remote/cert.rs 0.0% 11 Missing ⚠️

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link
Collaborator

@op-will op-will left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great!

@op-will op-will added this pull request to the merge queue Dec 5, 2025
Merged via the queue into op-rs:main with commit e280836 Dec 5, 2025
43 of 50 checks passed
theochap pushed a commit to ethereum-optimism/optimism that referenced this pull request Dec 10, 2025
…kona#3150)

## Changes
- `crates/node/sources/src/signer/remote/cert.rs`: Use
`CertificateDer::pem_file_iter` and `PrivateKeyDer::from_pem_file`
instead of `rustls_pemfile` functions
- `crates/node/sources/Cargo.toml`: Remove `rustls-pemfile` dependency
- `Cargo.toml`: Remove `rustls-pemfile` from workspace dependencies

Closes op-rs/kona#3149
theochap pushed a commit to ethereum-optimism/optimism that referenced this pull request Jan 14, 2026
…kona#3150)

## Changes
- `crates/node/sources/src/signer/remote/cert.rs`: Use
`CertificateDer::pem_file_iter` and `PrivateKeyDer::from_pem_file`
instead of `rustls_pemfile` functions
- `crates/node/sources/Cargo.toml`: Remove `rustls-pemfile` dependency
- `Cargo.toml`: Remove `rustls-pemfile` from workspace dependencies

Closes #3149
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ci: cargo-deny failing due to RUSTSEC-2025-0134 (rustls-pemfile unmaintained)

2 participants