From 59d00c76d2d6346feed1237c579643127d4c493d Mon Sep 17 00:00:00 2001
From: Fabien KOCIK <fabien@kocik.fr>
Date: Fri, 19 Jun 2026 16:57:02 +0200
Subject: [PATCH] fix: Allow the use of system certificates to trust OIDC
 provider

---
 Cargo.lock | 1 +
 Cargo.toml | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/Cargo.lock b/Cargo.lock
index 90b2d8e6..7d1ee158 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5705,6 +5705,7 @@ dependencies = [
  "pin-project-lite",
  "quinn",
  "rustls 0.23.40",
+ "rustls-native-certs",
  "rustls-pki-types",
  "serde",
  "serde_json",
diff --git a/Cargo.toml b/Cargo.toml
index 18b4e207..12c5ec90 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -49,7 +49,7 @@ blake3 = { version = "1.8.5", features = ["rayon", "mmap"] }
 hex = "0.4.3"
 http-body-util = "0.1.3"
 percent-encoding = "2.3.2"
-reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls-webpki-roots"] }
+reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls-webpki-roots","rustls-tls-native-roots"] }
 base64 = "0.22.1"
 fs2 = "0.4"
 rayon = "1.12.0"