With Rustls, is it possible to dynamically change root certs?

[unique warren]

Hi!
I have a reqwest client using rustls to make requests to a set of dynamically changing upstreams. Each upstream uses a self-signed certificate, so when initializing the reqwest client, I need to specify all the certificates so that certificate validation succeeds. That said, during the operation of the program, certain upstreams may come and go, and I'd like to update the set of known certificates to reflect the current set of active upstreams (i.e remove certs that are not needed anymore, and add new certs for new upstreams).

Would anyone know if it's possible to achieve this with rustls and how?

[echo veldt]

I don't know how much of this is exposed by reqwest, but for rustls, you can implement this trait to get the behavior you want: https://docs.rs/rustls/latest/rustls/client/trait.ServerCertVerifier.html