mirrors/arti.git/crates/tor-cert, branch arti-v1.9.0mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.9.02026-01-12T12:32:35Zcargo: Update `arti-*` and `tor-*` to `0.38.0`2026-01-12T12:32:35ZClara Englercve@cve.cx2026-01-12T12:32:35Zurn:sha1:230b0201ea730a633e55c2781611a52c5ec73c28
Done using the following:
```bash
for crate in $(./maint/list_crates | rg '^(tor|arti-)'); do
cargo set-version -p $crate 0.38.0
done
```
Remove unnecessary `doc(cfg(...))` attributes2025-12-05T02:40:50ZNeel Chauhanneel@neelc.org2025-11-01T23:25:20Zurn:sha1:26b40cb08b6b715ee80e2b9084810e07512a85c6
Fixes part of #2193.
(Edits from nickm: I selected the cases here that I could verify
were correct from immediate context.)
Edited-by: Nick Mathewson <nickm@torproject.org>
Bump all the unstable tor- and arti- crates to 0.37.0.2025-12-02T11:07:59ZGabriela Moldovangabi@torproject.org2025-12-02T10:58:54Zurn:sha1:e7d740eda02e05dd53574b6753cc4b45ab160b58
Done using:
```
for crate in $(./maint/list_crates | rg '^(tor|arti-)'); do
cargo set-version -p $crate 0.37.0
done
tor-cert: x509 requires tor-llcrypto/rng-compat.2025-11-12T15:07:36ZNick Mathewsonnickm@torproject.org2025-10-23T13:26:30Zurn:sha1:93bef89bda3f6dbe983ec05febcf5998e889bc09Rename TlsCertifiedKey to TlsKeyAndCert.2025-11-12T15:07:36ZNick Mathewsonnickm@torproject.org2025-10-23T12:09:41Zurn:sha1:8a28cfa4e5b8fc0631c8802a745ffe384e1290bfx509: Correct single instance of misnamed cert2025-11-12T15:07:36ZNick Mathewsonnickm@torproject.org2025-10-09T15:33:30Zurn:sha1:21428be45117c9cce59ea59eda57b48afde06c2ex509: Support generating the keys and certs that relays need.2025-11-12T15:07:34ZNick Mathewsonnickm@torproject.org2025-10-09T14:41:43Zurn:sha1:624f0c17eaae16ecfb8dd4c957a49a9bff627a14
Although we never need to actually check the signature on the other
party's x509 certificate, A relay does need a certificate and a
private key in order to be a proper TLS server.
In this function, I've added support for making an ersatz P-256
certificate certifying a P-256 key. See the code for info about the
rationale here. (Tor supports this, since it doesn't look at the
key at all: only the TLS layer cares about that.)
native_tls and rustls expect to get their keys and certs in
different forms, so this code provides them.
(Note that we don't expect to use native_tls with relays in the
first place, but it might be useful for lower-level interop
testing.)
Closes #2205.
x509: Extract serial-number generation into its own function.2025-11-12T15:06:26ZNick Mathewsonnickm@torproject.org2025-10-09T13:23:26Zurn:sha1:207471a0230598da190a59e54a16390e6231ac79x509: Fix an unfinished comment.2025-11-12T15:06:26ZNick Mathewsonnickm@torproject.org2025-10-09T13:15:50Zurn:sha1:7532349b28f2e1ef4857343842ee1eaaea7cfe14x509: refactor lifetime calculation2025-11-12T15:06:26ZNick Mathewsonnickm@torproject.org2025-10-09T13:13:58Zurn:sha1:f6122a5dd8f626866a0b18d38b81a4469caeb483
This doesn't give precisely the same results as before for leap
years, but that should be okay.