solana_tls_utils/
crypto_provider.rs

1use rustls::{crypto::CryptoProvider, NamedGroup};
2
3pub fn crypto_provider() -> CryptoProvider {
4    let mut provider = rustls::crypto::ring::default_provider();
5    // Disable all key exchange algorithms except X25519
6    provider
7        .kx_groups
8        .retain(|kx| kx.name() == NamedGroup::X25519);
9    provider
10}