From e1790b5380d35cd9c7f8bb1df0b9f9a9ffb52c58 Mon Sep 17 00:00:00 2001
From: Brandon Freeman <24freemanb@gmail.com>
Date: Sun, 29 Mar 2026 12:15:02 -0400
Subject: [PATCH] fix: add explicit crypto provider

---
 Cargo.lock                           | 1 +
 Cargo.toml                           | 1 +
 crates/openfang-kernel/Cargo.toml    | 1 +
 crates/openfang-kernel/src/kernel.rs | 2 ++
 4 files changed, 5 insertions(+)

diff --git a/Cargo.lock b/Cargo.lock
index 96ef6f26..c060aa65 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4180,6 +4180,7 @@ dependencies = [
  "openfang-wire",
  "rand 0.8.5",
  "reqwest 0.12.28",
+ "rustls 0.23.37",
  "serde",
  "serde_json",
  "subtle",
diff --git a/Cargo.toml b/Cargo.toml
index 39f648df..4d955fbb 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -63,6 +63,7 @@ clap_complete = "4"
 
 # HTTP client (for LLM drivers)
 reqwest = { version = "0.12", default-features = false, features = ["json", "stream", "multipart", "rustls-tls", "gzip", "deflate", "brotli"] }
+rustls = { version = "0.23", default-features = false, features = ["ring"] }
 
 # Async trait
 async-trait = "0.1"
diff --git a/crates/openfang-kernel/Cargo.toml b/crates/openfang-kernel/Cargo.toml
index c9176ef2..24f1119f 100644
--- a/crates/openfang-kernel/Cargo.toml
+++ b/crates/openfang-kernel/Cargo.toml
@@ -33,6 +33,7 @@ subtle = { workspace = true }
 rand = { workspace = true }
 hex = { workspace = true }
 reqwest = { workspace = true }
+rustls = { workspace = true }
 cron = "0.15"
 zeroize = { workspace = true }
 
diff --git a/crates/openfang-kernel/src/kernel.rs b/crates/openfang-kernel/src/kernel.rs
index cc070a15..dbd2263f 100644
--- a/crates/openfang-kernel/src/kernel.rs
+++ b/crates/openfang-kernel/src/kernel.rs
@@ -511,6 +511,8 @@ impl OpenFangKernel {
 
     /// Boot the kernel with an explicit configuration.
     pub fn boot_with_config(mut config: KernelConfig) -> KernelResult<Self> {
+        let _ = rustls::crypto::ring::default_provider().install_default();
+
         use openfang_types::config::KernelMode;
 
         // Env var overrides — useful for Docker where config.toml is baked in.