dependency on tough v0.19 pulls in rustls and aws-lc-sys whether you want them or not #436
Description
Description
We're using sigstore-rs to perform verification of cosign signatures on the public good instance.
We noticed that in sigstore-rs v0.11 that compilation fails for us on s390x and ppc64le due to a dependency on aws-lc-sys.
It turns out that some changes in tough v0.19 brought in aws-lc-rs, aws-lc-sys and rustls as dependencies, whether you want them or not.
In our case, we most certainly do not want them as we're using the native-tls feature pretty much everywhere and would like to avoid rustls if possible. The fix for this is likely upstream in awslabs/tough, but I wanted to first open an issue as I'm not exactly sure what the correct fix would be.
Version
sigstore-rs v0.11