diff --git a/Cargo.toml b/Cargo.toml
index 69f5a3107f..738ca2f1af 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -117,9 +117,9 @@ native-tls-crate = { version = "0.2.10", optional = true, package = "native-tls"
 tokio-native-tls = { version = "0.3.0", optional = true }
 
 # rustls-tls
-hyper-rustls = { version = "0.23", default-features = false, optional = true }
-rustls = { version = "0.20", features = ["dangerous_configuration"], optional = true }
-tokio-rustls = { version = "0.23", optional = true }
+hyper-rustls = { version = "0.23.2", default-features = false, optional = true }
+rustls = { version = "0.21.0", features = ["dangerous_configuration"], optional = true }
+tokio-rustls = { version = "0.24", optional = true }
 webpki-roots = { version = "0.22", optional = true }
 rustls-native-certs = { version = "0.6", optional = true }
 rustls-pemfile = { version = "1.0", optional = true }
@@ -141,7 +141,7 @@ trust-dns-resolver = { version = "0.22", optional = true }
 # HTTP/3 experimental support
 h3 = { version="0.0.1", optional = true }
 h3-quinn = { version="0.0.1", optional = true }
-quinn = { version = "0.8", default-features = false, features = ["tls-rustls", "ring"], optional = true  }
+quinn = { version = "0.10", default-features = false, features = ["tls-rustls", "ring"], optional = true  }
 futures-channel = { version="0.3", optional = true}
 
 
@@ -247,3 +247,8 @@ required-features = ["deflate"]
 name = "multipart"
 path = "tests/multipart.rs"
 required-features = ["multipart"]
+
+[patch.crates-io]
+tokio-rustls = { git = 'https://github.com/cpu/tokio-tls', branch = 'cpu-rustls-0.21.0-prep' }
+hyper-rustls = { git = 'https://github.com/cpu/hyper-rustls', branch = 'cpu-rustls-0.21.0-prep' }
+quinn = { git = 'https://github.com/cpu/quinn', branch = 'cpu-smoke-test-rustls-quic-conns' }
diff --git a/src/tls.rs b/src/tls.rs
index b54ffa19e0..60d702d778 100644
--- a/src/tls.rs
+++ b/src/tls.rs
@@ -14,7 +14,7 @@
 #[cfg(feature = "__rustls")]
 use rustls::{
     client::HandshakeSignatureValid, client::ServerCertVerified, client::ServerCertVerifier,
-    internal::msgs::handshake::DigitallySignedStruct, Error as TLSError, ServerName,
+    DigitallySignedStruct, Error as TLSError, ServerName,
 };
 use std::fmt;