Bump tiny_http from 0.9.0 to 0.11.0

[dependabot]

Bumps tiny_http from 0.9.0 to 0.11.0.

Release notes

Sourced from tiny_http's releases.

0.11.0

• Add support for Rustls

  Thanks to @​3xmblzj5 and @​travispaul for their help in implementing Rustls as a drop-in replacement for OpenSSL, you can now build tiny-http with TLS support without any external dependencies! OpenSSL will remain the default implementation if you just enable the ssl feature, but you are strongly encouraged to use ssl-rustls where possible!

• Fix incorrect certificate chain loading

  Fix a longstanding bug where we were only loading the first (i.e. the leaf) certificate from any PEM file supplied by the user.

0.10.0

• Replace chrono with time-rs

  chrono was only used to store and format DateTime into the slightly odd format required by RFC 7231, so to avoid the numerous RUSTSEC advisories generated by the localtime_r issue, we can just drop it entirely and switch to time-rs. Unfortunately this means we need to bump our minimum tested compiler version to 1.51, and as such this change requires a full minor release.

Changelog

Sourced from tiny_http's changelog.

0.11.0

• Add support for Rustls

  Thanks to @​3xmblzj5 and @​travispaul for their help in implementing Rustls as a drop-in replacement for OpenSSL, you can now build tiny-http with TLS support without any external dependencies! OpenSSL will remain the default implementation if you just enable the ssl feature, but you are strongly encouraged to use ssl-rustls where possible!

• Fix incorrect certificate chain loading

  Fix a longstanding bug where we were only loading the first (i.e. the leaf) certificate from any PEM file supplied by the user.

0.10.0

• Replace chrono with time-rs

  chrono was only used to store and format DateTime into the slightly odd format required by RFC 7231, so to avoid the numerous RUSTSEC advisories generated by the localtime_r issue, we can just drop it entirely and switch to time-rs. Unfortunately this means we need to bump our minimum tested compiler version to 1.51, and as such this change requires a full minor release.

Commits

• c5177b0 Release v0.11.0
• 876efd6 Correctly load certificate chains into OpenSSL
• a9823f2 Refactor SSL support into two modules
• 3e2ca09 Improve rustls certificate handling
• 2678655 Update GitHub Actions config to accomodate ssl-rustls
• 79316c8 Resolve error resulting from sync::{Arc, Mutex} being imported twice
• 30d1f9e Update self-signed cert and ssl.rs example for ssl-rustls feature.
• 7ffe7b4 sock does not need to be mutable.
• f1c935e Use rustls 0.20.
• fd2cced Prepare for v0.10.0 release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #16.