mirrors/arti.git/crates/tor-cert/src, branch arti-v2.1.0

tor-cert: Ability to create Rsa->Ed25519 crosscerts.

2026-02-19T17:15:03Z

Allow clippy::collapsible_if to trigger

2026-02-16T15:22:24Z

`clippy::collapsible_if` started triggering after bumping the MSRV to 1.88. Since this triggers from a lot of places, and since there even are a couple of instances where we explicitly allow `clippy::collapsible_ifs`, I've opened #2342 for deciding what to do about it.

cert: Extract x509 code into new tor-cert-x509 crate.

2026-02-02T15:02:22Z

maint/add_warning: Run script to add new warning

2026-01-27T18:05:36Z

This adds the lint to all our crates.

cert: Add cert_type() to RsaCrossert

2026-01-22T16:16:44Z

It is always the same type for this specific certificate. Signed-off-by: David Goulet

Remove unnecessary `doc(cfg(...))` attributes

2025-12-05T02:40:50Z

Fixes part of #2193. (Edits from nickm: I selected the cases here that I could verify were correct from immediate context.) Edited-by: Nick Mathewson

Rename TlsCertifiedKey to TlsKeyAndCert.

2025-11-12T15:07:36Z

x509: Correct single instance of misnamed cert

2025-11-12T15:07:36Z

x509: Support generating the keys and certs that relays need.

2025-11-12T15:07:34Z

Although we never need to actually check the signature on the other party's x509 certificate, A relay does need a certificate and a private key in order to be a proper TLS server. In this function, I've added support for making an ersatz P-256 certificate certifying a P-256 key. See the code for info about the rationale here. (Tor supports this, since it doesn't look at the key at all: only the TLS layer cares about that.) native_tls and rustls expect to get their keys and certs in different forms, so this code provides them. (Note that we don't expect to use native_tls with relays in the first place, but it might be useful for lower-level interop testing.) Closes #2205.

x509: Extract serial-number generation into its own function.

2025-11-12T15:06:26Z