mirrors/arti.git/crates/tor-cert/src/encode.rs, branch arti-v2.2.0

tor-cert: Port to web-time-compat

2026-03-26T19:20:16Z

cell, proto, cert: Simplify CERTS cell building.

2026-03-19T15:43:38Z

Formerly we required the caller for push_cert_body to specify the type of the cert that they were pushing. But in nearly every case, the certificate object that the caller is holding knows what its own type is! This makes the tor_proto build_certs_cell function a bit less error-prone, since we don't have to worry about mismatch.

cert: Deduplicate expiry-in-hours logic

2026-03-17T13:54:16Z

These certificates use a weird expiration format: counting hours since the unix epoch. Previously we had it implemented in two different places. This patch centralizes it, since we are about to become slightly more complicated.

Remove unnecessary `doc(cfg(...))` attributes

2025-12-05T02:40:50Z

Fixes part of #2193. (Edits from nickm: I selected the cases here that I could verify were correct from immediate context.) Edited-by: Nick Mathewson

Fix name of clippy lint to unchecked_time_subtraction (2)

2025-11-06T11:28:22Z

Run maint/add_warning

clippy: fix `clippy::duplicated_attributes` warnings

2025-08-11T15:22:24Z

```text warning: duplicated attribute --> crates/tor-hsservice/src/timeout_track.rs:630:14 | 630 | #![allow(clippy::needless_pass_by_value)] // TODO hoist into standard lint block | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ```

squash! Upgrade rand dependency to 0.9.

2025-03-18T16:09:44Z

- `rand::thread_rng()` has been deprecated and renamed to `rand::rng()`

Wrap ed25519-dalek types.

2025-03-18T12:45:28Z

With this change, we'll no longer need to expose the types from dalek-cryptography as part of our API, and we'll have more freedom to switch ed25519 implementations, or to upgrade to a newer `rand` ahead of their schedule. Unlike with x25519-dalek, I had to tweak the API a bit: There's no way to get a &PublicKey out of a Keypair now, and implementing the old ed25519-dalek traits seemed unnecessary.

tor-cert: Add experimental API for building EncodedEd25519Certs.

2025-01-13T19:28:01Z

This will enable us to deserialize byte slices as `EncodedEd25519Certs`. Needed because this type will be used to representing a parsed + validated cert retrieved from the keystore. Technically, we *could* do without this function by defining a separate newtype wrapper over `Vec` to represent the validated cert data, but IMO adding a second encoded ed25519 cert type in another crate might be confusing later down the line (because the two types will be nearly identical, and are bound to eventually diverge in terms of API and implementation). Part of #1137

tor-cert: Remove no-longer-needed experimental API.

2025-01-13T19:25:57Z

Part of #1768