mirrors/arti.git/crates/tor-cert, branch arti-v1.8.0

Bump all the unstable tor- and arti- crates to 0.37.0.

2025-12-02T11:07:59Z

Done using: ``` for crate in $(./maint/list_crates | rg '^(tor|arti-)'); do cargo set-version -p $crate 0.37.0 done

tor-cert: x509 requires tor-llcrypto/rng-compat.

2025-11-12T15:07:36Z

Rename TlsCertifiedKey to TlsKeyAndCert.

2025-11-12T15:07:36Z

x509: Correct single instance of misnamed cert

2025-11-12T15:07:36Z

x509: Support generating the keys and certs that relays need.

2025-11-12T15:07:34Z

Although we never need to actually check the signature on the other party's x509 certificate, A relay does need a certificate and a private key in order to be a proper TLS server. In this function, I've added support for making an ersatz P-256 certificate certifying a P-256 key. See the code for info about the rationale here. (Tor supports this, since it doesn't look at the key at all: only the TLS layer cares about that.) native_tls and rustls expect to get their keys and certs in different forms, so this code provides them. (Note that we don't expect to use native_tls with relays in the first place, but it might be useful for lower-level interop testing.) Closes #2205.

x509: Extract serial-number generation into its own function.

2025-11-12T15:06:26Z

x509: Fix an unfinished comment.

2025-11-12T15:06:26Z

x509: refactor lifetime calculation

2025-11-12T15:06:26Z

This doesn't give precisely the same results as before for leap years, but that should be okay.

Fix name of clippy lint to unchecked_time_subtraction (2)

2025-11-06T11:28:22Z

Run maint/add_warning

maint: bump minor versions of all published crates

2025-10-29T19:32:37Z

```bash readarray -t publish < <(cargo metadata --format-version 1 | jq -r '.packages[] | select((.id | startswith("path+file:///")) and (.rust_version != null) and (.publish == null or .publish == true or .publish != [])) | .name') for package in "${publish[@]}"; do echo "$package:"; cargo set-version --bump minor -p "$package"; done ```