Reapply "Migrate away from our http-client fork, use upstream. (#3736)…

…" (#3799)

This reverts commit 6028148.

services/galley/src/Galley/External/LegalHoldService/Internal.hs

@@ -80,3 +80,16 @@ makeVerifiedRequest fpr url reqBuilder = do
   mkMgr <- view extGetManager
   mgr <- liftIO $ mkMgr [fpr]
   makeVerifiedRequestWithManager mgr url reqBuilder
+
+-- | NOTE: Use this function wisely - this creates a new manager _every_ time it is called.
+--   We should really _only_ use it in `checkLegalHoldServiceStatus` for the time being because
+--   this is where we check for signatures, etc. If we reuse the manager, we are likely to reuse
+--   an existing connection which will _not_ cause the new public key to be verified.
+makeVerifiedRequestFreshManager ::
+  Fingerprint Rsa ->
+  HttpsUrl ->
+  (Http.Request -> Http.Request) ->
+  App (Http.Response LC8.ByteString)
+makeVerifiedRequestFreshManager fpr url reqBuilder = do
+  mgr <- liftIO $ initExtEnv [fpr]
+  makeVerifiedRequestWithManager mgr url reqBuilder