fix(quic): correct usage of native-certs

Cargo.toml

@@ -54,6 +54,7 @@ os_pipe = "1.1.4"
 paste = "1.0.14"
 rand = "0.8.5"
 rustls = { version = "0.23.1", default-features = false }
+rustls-native-certs = "0.8.0"
 slab = "0.4.9"
 socket2 = "0.5.6"
 tempfile = "3.8.1"

compio-quic/Cargo.toml

@@ -25,7 +25,7 @@ compio-runtime = { workspace = true, features = ["time"] }
 quinn-proto = "0.11.3"
 rustls = { workspace = true }
 rustls-platform-verifier = { version = "0.3.3", optional = true }
-rustls-native-certs = { version = "0.8.0", optional = true }
+rustls-native-certs = { workspace = true, optional = true }
 webpki-roots = { version = "0.26.3", optional = true }
 h3 = { version = "0.0.6", optional = true }
 

compio-quic/src/builder.rs

@@ -26,7 +26,16 @@ impl ClientBuilder<rustls::RootCertStore> {
     #[cfg(feature = "native-certs")]
     pub fn new_with_native_certs() -> io::Result<Self> {
         let mut roots = rustls::RootCertStore::empty();
-        roots.add_parsable_certificates(rustls_native_certs::load_native_certs()?);
+        let mut certs = rustls_native_certs::load_native_certs();
+        if certs.certs.is_empty() {
+            return Err(io::Error::other(
+                certs
+                    .errors
+                    .pop()
+                    .expect("certs and errors should not be both empty"),
+            ));
+        }
+        roots.add_parsable_certificates(certs.certs);
         Ok(ClientBuilder(roots))
     }
 

compio-tls/Cargo.toml

@@ -31,7 +31,7 @@ compio-runtime = { workspace = true }
 compio-macros = { workspace = true }
 
 rustls = { workspace = true, default-features = false, features = ["ring"] }
-rustls-native-certs = "0.8.0"
+rustls-native-certs = { workspace = true }
 
 [features]
 default = ["native-tls"]