mirrors/arti.git/crates/tor-cert/src, branch arti-v1.9.0

Remove unnecessary `doc(cfg(...))` attributes

2025-12-05T02:40:50Z

Fixes part of #2193. (Edits from nickm: I selected the cases here that I could verify were correct from immediate context.) Edited-by: Nick Mathewson

Rename TlsCertifiedKey to TlsKeyAndCert.

2025-11-12T15:07:36Z

x509: Correct single instance of misnamed cert

2025-11-12T15:07:36Z

x509: Support generating the keys and certs that relays need.

2025-11-12T15:07:34Z

Although we never need to actually check the signature on the other party's x509 certificate, A relay does need a certificate and a private key in order to be a proper TLS server. In this function, I've added support for making an ersatz P-256 certificate certifying a P-256 key. See the code for info about the rationale here. (Tor supports this, since it doesn't look at the key at all: only the TLS layer cares about that.) native_tls and rustls expect to get their keys and certs in different forms, so this code provides them. (Note that we don't expect to use native_tls with relays in the first place, but it might be useful for lower-level interop testing.) Closes #2205.

x509: Extract serial-number generation into its own function.

2025-11-12T15:06:26Z

x509: Fix an unfinished comment.

2025-11-12T15:06:26Z

x509: refactor lifetime calculation

2025-11-12T15:06:26Z

This doesn't give precisely the same results as before for leap years, but that should be okay.

Fix name of clippy lint to unchecked_time_subtraction (2)

2025-11-06T11:28:22Z

Run maint/add_warning

proto: Remove relay ChannelAuthenticationData builder

2025-10-23T17:47:06Z

Signed-off-by: David Goulet

tor-cert: Generate x509 identity certificates for CERT cells

2025-10-07T13:34:14Z

Closes #2197.