Consider replacing webpki-roots with rustls-platform-verifier

[maertsen]

I wonder if stopping to bundle webpki-roots, instead relying on the platform makes more sense for us. I would imagine this makes packaging easier for distributions that prefer to use their own truststores. Additionally, it takes us out of the loop of revocation for CA certificates.

[partim]

We are not using rustls directly for the RRDP client but rely in reqwest. There is a PR – seanmonstar/reqwest#2286 – to add support there, but it seems to have stalled a bit.

[maertsen]

Going by seanmonstar/reqwest#2286 (comment), it seems this may now be unblocked?