Skip to content

Allow CDLA-Permissive-2.0 for webpki-root-certs - #92

Merged
aandraca-amazon merged 1 commit into
mainfrom
deny-cdla-webpki
Oct 9, 2026
Merged

aandraca-amazon merged 1 commit into
mainfrom
deny-cdla-webpki

Conversation

@aandraca-amazon

Copy link
Copy Markdown
Contributor

kube-client now pulls in webpki-root-certs 1.0.9 via
rustls-platform-verifier. It ships the Mozilla CA bundle under
CDLA-Permissive-2.0, which is not on the allow list, so cargo deny fails on
main. The license is permissive and compatible with MIT-0; allow it for
this crate only.

Fixes #91

kube-client now pulls in webpki-root-certs 1.0.9 via
rustls-platform-verifier. It ships the Mozilla CA bundle under
CDLA-Permissive-2.0, which is not on the allow list, so cargo deny fails on
main. The license is permissive and compatible with MIT-0; allow it for
this crate only.
@aandraca-amazon
aandraca-amazon merged commit 35ac3cc into main Oct 9, 2026
8 checks passed
@aandraca-amazon
aandraca-amazon deleted the deny-cdla-webpki branch October 9, 2026 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

cargo deny fails: webpki-root-certs is CDLA-Permissive-2.0

1 participant