mirrors/arti.git/crates/tor-keymgr/src, branch arti-v2.3.0

tor-cert: Ed25519CertBuilder: do builder fn rename

2026-04-29T16:49:21Z

Change all call sites. This completes the rename.

keymgr: Remove outdated references to derive-adhoc

2026-04-16T09:58:51Z

This updates some outdated references from back when `derive-deftly` was called `derive-adhoc`.

keymgr: Use CAPS for metasyntactic variables in macro

2026-04-16T09:22:54Z

Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/3891#note_3395849

keymgr: Don't require ctor_path attr to be quoted

2026-04-16T09:22:54Z

This updates a doc and the corresponding test.

keymgr: Use unquoted keypair_specifier in tests

2026-04-16T09:22:54Z

keymgr: Make KeySpecifier take an unquoted keypair_specifier

2026-04-16T09:22:54Z

This also makes the macro `beta_deftly`.

keymgr: Require keypair_specifier to be a type

2026-04-16T09:22:54Z

I want to make all uses of `keypair_specifier` unquoted, so this can't be a `token_stream` (and in fact, `keypair_specifier` was always meant to be a type).

keymgr: Update outdated KeySpecifier doc

2026-04-16T09:22:54Z

This attribute is called `keypair_specifier`, not `key_specifier`.

keymgr: Fix ephemeral keystore cert encoding bug (fmt)

2026-04-08T09:35:02Z

keymgr: Fix ephemeral keystore cert encoding bug

2026-04-08T09:19:38Z

This fixes a bug that was causing the ephemeral keystore to retrieve certs in a format that couldn't be handled by the `KeyMgr`. This caused all certificate retrievals from `EphemeralKeystore` done via the `KeyMgr` to fail with an internal error. For context, the only supported cert type is `TorEd25519Cert`, which is a pre-encoded certificate (i.e. a type wrapper over a `Vec`). These certificates are stored as-is by the Arti native keystore (the bytes are written to a file on disk). When retrieving a `TorEd25519Cert`, the Arti keystore uses `parse_certificate_erased()` to parse the cert into a `ParsedEd25519Cert` before returning it as a type-erased `ErasedKey`. This works as intended with the `KeyMgr` retrieval and downcasting logic, which expects the certificate to be returned in the `ParsedCert` format specified in the `ToEncodableCert` implementation. Before this change, the ephemeral keystore, on the other hand, did not play well with the `KeyMgr` when it came to cert retrieval: it would incorrectly store the `KeystoreItem` as-is, and retrieve it as an `ErasedKey` using the `ErasedKey::into_erased()` implementation. This would then cause the `KeyMgr` to fail to downcast the `ErasedKey` to the correct type (because the returned erased item was of a different type than `ParsedCert`). This commit also removes `KeystoreItem::into_erased()`, which was a footgun (because certificates are not actually supposed to be retrieved in the format returned by `CertData::into_erased()`).