This release improves support for corporate networks, fixes a regression in the ssldotcom-windows-sign feature, and lands some more groundwork for future improvements.

System Certificates

When doing network requests, cargo-dist and axoupdater can be configured to look at both the system certificate stores and builtin webpki-roots. Usually the latter is sufficient, but the former may be necessary to when running these tools in some corporate networks.

As of cargo-dist 0.19.0 and axoupdater 0.6.8, all prebuilt binaries of these two tools have both sources enabled, ensuring maximum interoperability and portability.

When building from source (with e.g. cargo install), or using axoupdater as library, we currently default to only using the webpki roots. If you need system certificates to be consulted, they can be enabled in either project with --features=tls_native_roots.

In the future we may just enable system certificates by default. We're being a bit cautious because we've heard some concerns about portability and performance but haven't yet seen them in the wild, at least for the systems we've tested on.

• @gankra + @mchernicoff feat: add experimental tls_native_roots feature
• docs

Fixes

• @gankra fix: update axoasset to fix regression in ssldotcom-windows-sign
• @mistydemeo fix: handle Invoke-Installer errors
• @mistydemeo fix: writeback default install-path to config to prepare for changing the default

Install cargo-dist 0.19.0-prerelease.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://axodotdev.artifacts.axodotdev.host/cargo-dist/v0.19.0-prerelease.1/cargo-dist-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -c "irm https://axodotdev.artifacts.axodotdev.host/cargo-dist/v0.19.0-prerelease.1/cargo-dist-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install axodotdev/tap/cargo-dist

Download cargo-dist 0.19.0-prerelease.1