Files
lighthouse/deny.toml
Mac L 286b67f048 Remove dependency on OpenSSL (#8768)
https://github.com/sigp/lighthouse/issues/8756


  Only the Web3Signer actually needs OpenSSL in order to parse PKCS12 certificates. This updates the function to instead manually parse the cert (using the `p12-keystore` crate) and converts it to a `PEM` certificate (using the `pem` crate) which can be directly converted to a `reqwest::tls::Identity` as this can be done directly in `rustls`.


Co-Authored-By: Mac L <mjladson@pm.me>
2026-02-10 02:10:48 +00:00

30 lines
1.5 KiB
TOML

# cargo-deny configuration for Lighthouse
# See https://embarkstudios.github.io/cargo-deny/
[bans]
# Allow multiple versions by default. Change this to "warn" to see all multiple versions.
multiple-versions = "allow"
deny = [
{ crate = "ethers", reason = "legacy Ethereum crate, use alloy instead" },
{ crate = "ethereum-types", reason = "legacy Ethereum crate, use alloy-primitives instead" },
{ crate = "protobuf", reason = "use quick-protobuf instead" },
{ crate = "derivative", reason = "use educe or derive_more instead" },
{ crate = "ark-ff", reason = "present in Cargo.lock but not needed by Lighthouse" },
{ crate = "openssl", reason = "non-Rust dependency, use rustls instead" },
{ crate = "strum", deny-multiple-versions = true, reason = "takes a long time to compile" },
{ crate = "reqwest", deny-multiple-versions = true, reason = "takes a long time to compile" },
{ crate = "aes", deny-multiple-versions = true, reason = "takes a long time to compile" },
{ crate = "sha2", deny-multiple-versions = true, reason = "takes a long time to compile" },
{ crate = "pbkdf2", deny-multiple-versions = true, reason = "takes a long time to compile" },
{ crate = "scrypt", deny-multiple-versions = true, reason = "takes a long time to compile" },
{ crate = "syn", deny-multiple-versions = true, reason = "takes a long time to compile" },
]
[sources]
unknown-registry = "deny"
unknown-git = "warn"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
[sources.allow-org]
github = ["sigp"]