chore: default disable trust_cert

.github/workflows/build-release.yml

@@ -93,12 +93,6 @@ jobs:
           default: true
           override: true
 
-      # https://github.com/actions/virtual-environments/issues/2557#issuecomment-769611326
-      - if: ${{ matrix.target }} == 'aarch64-apple-darwin'
-        run: |
-          sudo xcode-select -s /Applications/Xcode_12.4.app &&
-          sudo rm -Rf /Library/Developer/CommandLineTools/SDKs/*
-
       - name: Build release
         shell: bash
         run: |

Cargo.toml

@@ -19,7 +19,7 @@ codegen-units = 1
 
 [dependencies]
 mitm-core = { path = "crates/core", package = "good-mitm-core" }
-rule = { path = "crates/rule", package = "good-mitm-rule" }
+rule = { path = "crates/rule", package = "good-mitm-rule", features = ["js"] }
 
 anyhow = "1.0"
 clap = { version = "4", features = ["derive"] }
@@ -30,10 +30,13 @@ serde = { version = "1.0", features = ["derive"] }
 serde_yaml = "0.9"
 hyper-proxy = { version = "0.9", default-features = false }
 rustls-pemfile = "1.0"
-tokio = { version = "1", features = ["rt", "signal"] }
+tokio = { version = "1", features = ["rt-multi-thread", "signal"] }
 rustls = "0.20"
-trust_cert = { path = "crates/trust_cert" }
+trust_cert = { path = "crates/trust_cert", optional = true }
 
+[features]
+default = []
+trust-cert = ["dep:trust_cert"]
 
 [workspace]
 members = [

crates/rule/Cargo.toml

@@ -13,7 +13,7 @@ mitm-core = { path = "../core", package = "good-mitm-core" }
 
 anyhow = "1.0"
 async-trait = "0.1"
-cached = "0.39"
+cached = "0.40"
 cookie = "0.16"
 fancy-regex = "0.10"
 http = "0.2"

crates/trust_cert/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "trust_cert"
-version = "0.0.4"
+version = "0.0.5"
 edition = "2021"
 description = "Install certificate to your system trust zone."
 homepage = "https://github.com/zu1k/good-mitm"
@@ -14,4 +14,4 @@ rcgen = { version = "0.10", features = ["x509-parser"] }
 nix = { version = "0.25", default-features = false, features = ["user"] }
 
 [target.'cfg(windows)'.dependencies]
-windows = { version = "0.42", features = ["Win32_Security_Cryptography", "Win32_Foundation"] }
+windows = { version = "0.43", features = ["Win32_Security_Cryptography", "Win32_Foundation"] }

src/file/mod.rs

@@ -1,12 +1,12 @@
 use anyhow::Result;
-use std::{fs, io::BufReader, path::Path};
-
+use log::error;
 use single_multi::SingleOrMulti;
+use std::{fs, io::BufReader, path::Path};
 
 pub mod frule;
 mod single_multi;
 
-pub fn load_rules_amd_mitm_filters<P: AsRef<Path>>(
+pub fn load_rules_amd_mitm_filters<P: AsRef<Path> + Clone>(
     path: P,
 ) -> Result<(Vec<rule::Rule>, Vec<String>)> {
     let m = fs::metadata(&path).expect("Not a valid path");
@@ -17,12 +17,21 @@ pub fn load_rules_amd_mitm_filters<P: AsRef<Path>>(
     }
 }
 
-fn load_rules_amd_mitm_filters_from_file<P: AsRef<Path>>(
+fn load_rules_amd_mitm_filters_from_file<P: AsRef<Path> + Clone>(
     path: P,
 ) -> Result<(Vec<rule::Rule>, Vec<String>)> {
-    let file = fs::File::open(path)?;
+    let file = fs::File::open(path.clone())?;
     let reader = BufReader::new(file);
-    let rules: Vec<frule::Rule> = serde_yaml::from_reader(reader)?;
+    let rules: Vec<frule::Rule> = match serde_yaml::from_reader(reader) {
+        Ok(rules) => rules,
+        Err(err) => {
+            error!(
+                "load rule ({}) failed: {err}",
+                path.as_ref().to_str().unwrap()
+            );
+            return Err(err.into());
+        }
+    };
 
     let (rules, filters) = rules
         .into_iter()

src/lib.rs

@@ -4,6 +4,7 @@ pub mod file;
 
 pub use hyper_proxy;
 pub use mitm_core;
+#[cfg(feature = "trust-cert")]
 pub use trust_cert;
 
 pub async fn shutdown_signal() {

src/main.rs

@@ -60,8 +60,10 @@ fn main() {
             run(&opts).unwrap();
         }
         SubCommand::Genca(opts) => {
+            #[allow(unused_variables)]
             let cert = ca::gen_ca();
             if opts.trust {
+                #[cfg(feature = "trust-cert")]
                 trust_cert::trust_cert(cert);
             }
         }