build(deps): update ring requirement from 0.16.20 to 0.17.7 (#721)

* build(deps): update ring requirement from 0.16.20 to 0.17.7

Updates the requirements on [ring](https://github.com/briansmith/ring) to permit the latest version.
- [Commits](https://github.com/briansmith/ring/commits)

---
updated-dependencies:
- dependency-name: ring
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* fix

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hzlinyiyu <[email protected]>

poem/Cargo.toml

@@ -149,7 +149,7 @@ fluent-langneg = { version = "0.13.0", optional = true }
 fluent-syntax = { version = "0.11.0", optional = true }
 unic-langid = { version = "0.9.0", optional = true, features = ["macros"] }
 intl-memoizer = { version = "0.5.1", optional = true }
-ring = { version = "0.16.20", optional = true }
+ring = { version = "0.17.7", optional = true }
 reqwest = { workspace = true, features = ["json"], optional = true }
 rcgen = { version = "0.12.0", optional = true }
 x509-parser = { version = "0.15.0", optional = true }

poem/src/listener/acme/keypair.rs

@@ -9,7 +9,8 @@ pub(crate) struct KeyPair(EcdsaKeyPair);
 
 impl KeyPair {
     pub(crate) fn from_pkcs8(pkcs8: impl AsRef<[u8]>) -> IoResult<Self> {
-        EcdsaKeyPair::from_pkcs8(&ECDSA_P256_SHA256_FIXED_SIGNING, pkcs8.as_ref())
+        let rng = SystemRandom::new();
+        EcdsaKeyPair::from_pkcs8(&ECDSA_P256_SHA256_FIXED_SIGNING, pkcs8.as_ref(), &rng)
             .map(KeyPair)
             .map_err(|_| IoError::new(ErrorKind::Other, "failed to load key pair"))
     }