Citric acid may be easier to find, and safer to handle:
formatting link
These are weak acids that act by forming stable soluble complexes with the iron ions from the rust, in preference to dissolving fresh metal.
formatting link
formatting link