mirrors/arti.git/crates/tor-keymgr/src, branch arti-v1.4.1

Upgrade to derive_more 2

2025-02-26T18:06:37Z

This took a little refactoring, since derive_more::Foo no longer re-exports std::ops::Foo.

tor-keymgr: Use @ to annotate internal macro branches.

2025-02-06T13:32:21Z

tor-keymgr: Define the test key constants using a macro.

2025-02-06T13:32:21Z

Closes #1396

tor-keymgr: Rename test constants to match file names.

2025-02-06T13:32:21Z

Part of #1396

tor-keymgr: Use ParsedEd25519Cert when decoding certs.

2025-01-13T19:29:19Z

This helps us get rid of our uses of `KeyUnknownCert`. Needed because `KeyUnknownCert` can't readily be converted back to `EncodedEd25519Cert` (while `ParsedEd25519Cert` *can* -- see the `certs` module from `tor-relay-crypto`).

tor-keymgr: Fix cert handling tests.

2025-01-13T19:26:51Z

This updates and reenables the cert management tests. Part of #1768

tor-keymgr: Use Ed25519Cert::decode to parse the certs.

2025-01-13T19:25:57Z

tor-keymgr: Add cert parse error variant.

2025-01-13T19:25:55Z

This will soon be used, when we modify the `ArtiNativeKeystore` cert lookup code to actually parse certificates before returning them. Part of #1768

tor-key-forge: Split out ItemType as a separate trait.

2025-01-13T19:22:36Z

This is necessary because `ParsedCert`s will not be `EncodableItem`s. This is because we cannot (and don't want to) write certificates that have not yet been validated to the keystore. They do need to be retrievable from the keystore though, so we also change `ErasedKey` to be `Box` instead.

tor-key-forge: Distinguish between parsed certs and encodable certs.

2025-01-13T19:21:45Z

We need two different types to represent * certs that have been parsed, but not yet validated (`KeyUnknownCert`) * newly generated encodable certs (`EncodedEd25519Cert`) Currently, we don't use `KeyUnknownCert` anywhere, and instead use `EncodedEd25519Cert` to represent "parsed" but not-yet-validated certs. This approach is wrong and relies on a broken (no-op) `EncodedEd25519Cert::from_bytes` implementation. A future commit will address this problem by replacing `EncodedEd25519Cert::from_bytes` with `Ed25519Cert::decode` to actually parse the cert upon retrieving it from the keystore.