mirrors/arti.git/crates/tor-rtcompat/src/impls/rustls.rs, branch arti-v1.7.0mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.7.02025-09-24T19:23:32Zopentelemetry: Add some instrument macros.2025-09-24T19:23:32ZWesley Aptekar-Casselsme@wesleyac.com2025-09-16T13:25:15Zurn:sha1:e21ebd3793d497429ba7c8c437b346a9a2833407
I've added these in places that are useful for the debugging that I've
been doing.
Merge branch 'smol-add-impl-in-tor-rtcompat' into 'main'2025-08-21T03:47:47Zoparaopara@torproject.org2025-08-21T03:47:47Zurn:sha1:56476e50e66f4f9bdfcdb17d5213aaf0f09b68eb
smol: Implement smol in tor-rtcompat
See merge request tpo/core/arti!2986smol: Implement smol in tor-rtcompat2025-08-21T03:47:47ZNiel Duysterscontact@ndvibes.com2025-08-21T03:47:47Zurn:sha1:3a650f261fecb8c42fa2a208dd029fd4cda98d18Document why we are using ring with rustls2025-08-19T18:17:27ZNick Mathewsonnickm@torproject.org2025-08-19T18:17:27Zurn:sha1:7c58faa10a155d69791a61b224d5b011d4a70a35
See #1977, #2122.
Switch Cargo.toml files to edition 2024.2025-08-07T15:28:36ZNick Mathewsonnickm@torproject.org2025-08-06T01:19:58Zurn:sha1:77b0de43b8c67cdb81befe0680a3df43b6ad37bc
First, run
```
git grep -l "^edition =" |
xargs perl -i -pe 's/^edition *=.*/edition = "2024"/;'
```
Second, manually verify that all Cargo.toml files have changed,
and nothing else has changed.
Third, run cargo fmt again.
Fix errors from rustdoc nightly.2025-08-05T13:34:23ZNick Mathewsonnickm@torproject.org2025-08-05T13:34:23Zurn:sha1:30a36b17593c10255ddd37eb7579c895c6629b67tor-rtcompat: Remove rustls dependency in favor of futures-rustls2025-06-05T23:30:29Zparazydparazyd@dyne.org2025-04-16T12:20:44Zurn:sha1:0be3897e83e3beca92cb3441b063e163c9c8019c
futures-rustls provides and re-exports rustls and thus the rustls
dependency is redundant.
Additionally, this removes `aws-lc-rs` and its inherent dependencies
from `Cargo.lock` and the entire project since they've been included
because the rustls dependency did not use `default-features = false`
and rustls by default now depends on `aws-lc-rs` as its crypto engine.
rtcompat: remove Letsencrypt/Rustls kludge2025-05-20T14:08:27Zretort-dev3917-retort-dev@gitlab.torproject.org2025-05-20T13:42:00Zurn:sha1:f688da849ac9002812581c6b9f346e29d5c42ab1rustls: move provider-installer to its own function.2025-03-04T19:45:18ZNick Mathewsonnickm@torproject.org2025-03-03T15:17:33Zurn:sha1:d206e9b70ddfce0083546d4f1836129985b9abfc
We do this so that we can make sure there's a provider installed
when we run the tests.
rustls.rs: Replace x509-signature with rustls-webpki2025-03-04T19:45:18ZNick Mathewsonnickm@torproject.org2025-02-26T22:02:48Zurn:sha1:ede6d75567c1ee81812478e6137032dd568ddb91
The x509-signature crate is archived, and won't see any more
releases. Using it is tying us to ring 0.16 internally,
which means we depend on two ring versions.
Fortunately, rustls-webpki relaxes some of the earlier restrictions
from the vanilla webpki crate, which means that its certificate parser
now accepts C tor's oddball x509 certificates as valid.
With this change, we can delegate to rustls's built-in
signature-checking code, and we only have to override its
certificate validation. (We still override it with a pile of
comments about how we don't validate link certificates much.)
I've had to include a few certificates: two are for tests,
but one is needed as a placeholder, since we can't construct
a rustls certificate validator without a root cert,
even if we'll never use it.
Closes #1824.
Closes #1854.