From 6f988e3b20b683b89c0c62ea979d3c84fe56b5a3 Mon Sep 17 00:00:00 2001 From: Jack Cutrara Date: Thu, 15 Oct 2026 17:13:23 -0400 Subject: [PATCH] fix: bump apify/rustls to verify ML-DSA signatures Picks up apify/rustls#26, which replaces the Ed25519 placeholder verifier for ML-DSA with rustls-webpki's real ones, and updates the outdated comment in types.rs. Co-Authored-By: Claude Opus 5.5 --- Cargo.lock | 2 +- Cargo.toml | 2 +- impit/src/fingerprint/types.rs | 4 +--- 3 files changed, 3 insertions(+), 5 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 2fa2cd72..259309a8 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2272,7 +2272,7 @@ dependencies = [ [[package]] name = "rustls" version = "0.23.45" -source = "git+https://github.com/apify/rustls?rev=b158c57cf02dcae81c11a73389c599269bb74621#b158c57cf02dcae81c11a73389c599269bb74621" +source = "git+https://github.com/apify/rustls?rev=5ce04170965aff5da23154e79f5ee25c37134da1#5ce04170965aff5da23154e79f5ee25c37134da1" dependencies = [ "aws-lc-rs", "brotli", diff --git a/Cargo.toml b/Cargo.toml index ee54db2d..b8baf04b 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -9,7 +9,7 @@ members = [ [patch.crates-io] h2 = { git = "https://github.com/apify/h2", rev = "7f393a728a8db07cabb1b78d2094772b33943b9a" } -rustls = { git = "https://github.com/apify/rustls", rev="b158c57cf02dcae81c11a73389c599269bb74621" } +rustls = { git = "https://github.com/apify/rustls", rev="5ce04170965aff5da23154e79f5ee25c37134da1" } tower-http = { git = "https://github.com/apify/tower-http", rev="4d96dbd81f86559c38cf76b8ce671089544a26e3" } hyper-util = { git = "https://github.com/apify/hyper-util", rev="401e6fb99bb6bd4956a0fafca39f4b7b37be8a0a" } reqwest = { git = "https://github.com/seanmonstar/reqwest", rev="2230ed3945fb2908692b88dad1dcd06db9fb2ca6" } diff --git a/impit/src/fingerprint/types.rs b/impit/src/fingerprint/types.rs index 1b815ae7..54afc29c 100644 --- a/impit/src/fingerprint/types.rs +++ b/impit/src/fingerprint/types.rs @@ -72,9 +72,7 @@ pub enum SignatureAlgorithm { // EdDSA algorithms Ed25519, Ed448, - // ML-DSA algorithms (draft-ietf-tls-mldsa). Advertised in the ClientHello - // for fingerprint accuracy only: no ML-DSA verifier is available, so a - // server that actually selects one fails the handshake. + // ML-DSA algorithms (draft-ietf-tls-mldsa) MlDsa44, MlDsa65, MlDsa87,