Fix the native-certs (and therefore docker) build

crates/cli/Cargo.toml

@@ -56,8 +56,8 @@ mas-config.workspace = true
 mas-data-model.workspace = true
 mas-email.workspace = true
 mas-graphql.workspace = true
-mas-handlers = { workspace = true, default-features = false }
-mas-http = { workspace = true, default-features = false, features = ["axum", "client"] }
+mas-handlers = { workspace = true }
+mas-http = { workspace = true, features = ["axum", "client"] }
 mas-i18n.workspace = true
 mas-iana.workspace = true
 mas-keystore.workspace = true

crates/handlers/Cargo.toml

@@ -68,10 +68,10 @@ rand_chacha = "0.3.1"
 headers = "0.3.9"
 ulid.workspace = true
 
-mas-axum-utils = { workspace = true, default-features = false }
+mas-axum-utils.workspace = true
 mas-data-model.workspace = true
 mas-graphql.workspace = true
-mas-http = { workspace = true, default-features = false }
+mas-http.workspace = true
 mas-i18n.workspace = true
 mas-iana.workspace = true
 mas-jose.workspace = true
@@ -92,8 +92,6 @@ tracing-subscriber.workspace = true
 cookie_store = "0.20.0"
 
 [features]
-default = ["webpki-roots"]
-
 # Use the native root certificates
 native-roots = ["mas-axum-utils/native-roots", "mas-http/native-roots"]
 # Use the webpki root certificates

crates/http/src/client.rs

@@ -43,8 +43,7 @@ fn load_tls_roots_blocking() -> Result<rustls::RootCertStore, NativeRootsLoadErr
     let mut roots = rustls::RootCertStore::empty();
     let certs = rustls_native_certs::load_native_certs()?;
     for cert in certs {
-        let cert = rustls::Certificate(cert.0);
-        roots.add(&cert)?;
+        roots.add(cert)?;
     }
 
     if roots.is_empty() {