mirrors/arti.git/crates/tor-relay-crypto/src/pk.rs, branch arti-v2.5.1

relay: Modify RelayNtorKeys to use a constructor

2026-04-21T18:01:27Z

Because of the sorting requirement and the fact that a `KeyMgr` can have multiple Ntor keys, the caller now explicitly extract the two Ntor keys it wants from the `KeyMgr` and then creates a `RelayNtorKeys` object with them. Future changes (#2495) will move this into a view and warn if there are more than 2 keys. Signed-off-by: David Goulet

relay-crypto: Add RelayNtorKeys struct holding both Ntor keys

2026-04-21T18:01:27Z

Signed-off-by: David Goulet

relay-crypto: Add new RelayNtor key wrapper

2026-04-09T17:34:01Z

arti-relay: Move all key specifiers to a new keys module

2026-04-01T11:17:50Z

This extracts the key specifier types out of `tor-relay-crypto`, which * makes the code layout consistent with the hidden service crates (the key specifiers are defined in a `keys` module in `tor-hsservice`, while the key wrapper types live in `tor-hscrypto::pk`) * helps reduce the API surface: the key specifiers are only used in `arti-relay`, so we can move them there and make them `pub(crate)` instead of `pub`

proto: Add key specifier types for the ntor keys

2026-04-01T11:06:40Z

Part of #2451

tor-relay-crypto: port to web-time-compat

2026-03-26T19:20:16Z

relay: Rewrite the rotation key logic in the crypto task

2026-03-17T19:07:06Z

This is almost a full rewrite of the crypto task which was needed in order to support our relay signing certificate to be put in the keystore which will be needed for the offline key feature. Instead of having rotate_key() do all the things, we now instead do two pass: 1. Remove all expired keys and certs. 2. Generate any missing keys. This still results in using the minimum valid_until of all our keys for the task sleep time. We can know cleanup the local trait used for this gymnastic and trade it for some more KeyMgr gymnastic. Fixes #2404 Signed-off-by: David Goulet

relay-crypto: Add test for cert specifier patterns

2026-03-12T14:56:39Z

For relays these are pretty basic (they have no globbing components), because relay certs don't have specifiers (their `ArtiPath`s are identical to the `ArtiPath` of the subject key).

relay-crypto: Use the new CertSpecifier macro

2026-03-12T14:56:39Z

This enables the `experimental-api` feature in `tor-keymgr` because `CertSpecifier` is experimental.

keymgr: Abolish KeyCertificateSpecifier::signing_key_specifier()

2026-03-12T14:56:35Z

We need to be able to parse KeyPaths into KeyCertificateSpecifier, and we can't do that if the signing key is part of the cert specifier (because the signing key doesn't get encoded in the key path, unlike the subject key, which does)