mirrors/arti.git/crates/tor-cert/src/lib.rs, branch arti-v2.2.0mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v2.2.02026-03-26T19:20:16Ztor-cert: Port to web-time-compat2026-03-26T19:20:16ZNick Mathewsonnickm@torproject.org2026-03-26T13:46:52Zurn:sha1:ef910cf3dad3957b3e7560e8f4f53559e9ef27c7cell, proto, cert: Simplify CERTS cell building.2026-03-19T15:43:38ZNick Mathewsonnickm@torproject.org2026-03-19T15:43:38Zurn:sha1:8a4cbe020879ae011c9e02197d824cbe20e2f736
Formerly we required the caller for push_cert_body to specify the
type of the cert that they were pushing. But in nearly every case,
the certificate object that the caller is holding knows what its
own type is! This makes the tor_proto build_certs_cell function
a bit less error-prone, since we don't have to worry about mismatch.
cert: Fix minor but annoying bug in cert expiry calculation2026-03-17T14:06:20ZNick Mathewsonnickm@torproject.org2026-03-17T14:06:20Zurn:sha1:9bbd7c3fee4177b327e4fb0d0dc3c9644de52c57
We documented our SystemTime-to-expiry conversion as always rounding
_up_, but we did not account for fractional seconds when doing so.
Therefore, if the requested expiration was set partway through the
first second of an hour, the conversion would round down.
This patch fixes that, and adds a regression test. I've confirmed
that the test fails without this patch.
Closes #2407
cert: Deduplicate expiry-in-hours logic2026-03-17T13:54:16ZNick Mathewsonnickm@torproject.org2026-03-17T13:54:16Zurn:sha1:d337afeb1023ea51ce85c0c21fe4ec830c096f49
These certificates use a weird expiration format: counting hours
since the unix epoch. Previously we had it implemented in two
different places. This patch centralizes it, since we are about to
become slightly more complicated.
Allow clippy::collapsible_if to trigger2026-02-16T15:22:24ZGabriela Moldovangabi@torproject.org2026-02-09T11:49:02Zurn:sha1:ade1d59e8e44c93b6ee447b72a2948a9652ec44e
`clippy::collapsible_if` started triggering after bumping the MSRV to
1.88.
Since this triggers from a lot of places, and since there even are a
couple of instances where we explicitly allow `clippy::collapsible_ifs`,
I've opened #2342 for deciding what to do about it.
cert: Extract x509 code into new tor-cert-x509 crate.2026-02-02T15:02:22ZNick Mathewsonnickm@torproject.org2026-01-29T15:30:38Zurn:sha1:44e57f9709cbdb2bbd6e2b7de3a08725feb27917maint/add_warning: Run script to add new warning2026-01-27T18:05:36ZGabriela Moldovangabi@torproject.org2026-01-27T18:05:36Zurn:sha1:a98faf72eb06b47700faeeac5a8a0dd0fc29b584
This adds the lint to all our crates.
Fix name of clippy lint to unchecked_time_subtraction (2)2025-11-06T11:28:22ZIan Jacksonijackson@chiark.greenend.org.uk2025-11-06T11:23:25Zurn:sha1:a5fd5c48ea059a80cc1f6c50e248654b5ff3aaff
Run maint/add_warning
tor-cert: Generate x509 identity certificates for CERT cells2025-10-07T13:34:14ZNick Mathewsonnickm@torproject.org2025-10-02T22:50:17Zurn:sha1:4135a9b722273cc22e4418457b62538d1ec9c705
Closes #2197.
Remove "doc_auto_cfg" incantation from all crates.2025-09-29T19:30:03ZNick Mathewsonnickm@torproject.org2025-09-29T18:30:14Zurn:sha1:808b0ec2e3735a6dbbebeb857a3d6040ae02c697
This feature has been removed from nightly, in favor of doc_cfg.