update deps to fix sec-0052 https://rustsec.org/advisories/RUSTSEC-20…

…23-0052

previously relied upon outdated version of tokio-rustls which
relied upon old non-forked version of webpki which had a sec issue

bumping all dependencies to latest fixes the issue. also corrected
for usage of deprecated apis

Cargo.toml

@@ -17,11 +17,11 @@ edition = "2021"
 [dependencies]
 log = "0.4"
 
-rustls = "0.20"
-rustls-pemfile = "1.0.1"
-webpki-roots = "0.22"
+rustls = "0.21"
+rustls-pemfile = "1.0.3"
+webpki-roots = "0.25"
 
-tokio-rustls = "0.23"
+tokio-rustls = "0.24"
 tokio = { version = "1", features = ["net", "rt"] }
 
 hyper = { version = "0.14", features = ["client", "http2", "h2"] }

src/lib.rs

@@ -72,7 +72,7 @@ impl AlpnConnector {
         let config = self
             .config_builder
             .clone()
-            .with_single_cert(cert_chain, rustls::PrivateKey(key_der));
+            .with_client_auth_cert(cert_chain, rustls::PrivateKey(key_der));
         match config {
             Ok(mut c) => {
                 c.alpn_protocols.push("h2".as_bytes().to_vec());
@@ -196,8 +196,8 @@ impl AlpnConnector {
     fn with_client_config(config: ConfigBuilder<ClientConfig, WantsCipherSuites>) -> Self {
         let mut root_cert_store = rustls::RootCertStore::empty();
 
-        root_cert_store.add_server_trust_anchors(
-            webpki_roots::TLS_SERVER_ROOTS.0.iter().map(|ta| {
+        root_cert_store.add_trust_anchors(
+            webpki_roots::TLS_SERVER_ROOTS.iter().map(|ta| {
                 OwnedTrustAnchor::from_subject_spki_name_constraints(ta.subject, ta.spki, ta.name_constraints)
             }),
         );