diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index 5e56cf4..393ca0d 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -10,29 +10,29 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - run: rustup update stable && rustup default stable
-      - run: cargo build
+      - run: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable
+      - run: . $HOME/.cargo/env && cargo build
 
   test:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - run: rustup update stable && rustup default stable
-      - run: cargo test
-      - run: cargo test --features webpki
-      - run: cargo test --features native-pki
-      - run: cargo test --features native-pki,rsa
+      - run: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable
+      - run: . $HOME/.cargo/env && cargo test
+      - run: . $HOME/.cargo/env && cargo test --features webpki
+      - run: . $HOME/.cargo/env && cargo test --features native-pki
+      - run: . $HOME/.cargo/env && cargo test --features native-pki,rsa
 
   clippy:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - run: rustup update stable && rustup default stable && rustup component add clippy
-      - run: cargo clippy -- -D warnings
+      - run: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable --component clippy
+      - run: . $HOME/.cargo/env && cargo clippy -- -D warnings
 
   no-std:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - run: rustup update stable && rustup default stable && rustup target add thumbv7em-none-eabi
-      - run: cargo build --target thumbv7em-none-eabi --no-default-features
+      - run: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable --target thumbv7em-none-eabi
+      - run: . $HOME/.cargo/env && cargo build --target thumbv7em-none-eabi --no-default-features