mirrors/arti.git/crates/tor-rtcompat/src/impls/rustls.rs, branch arti-v2.5.1

maint: Run maint/add_warning to deny string slices

2026-06-09T15:36:01Z

This commit executes maint/add_warning with the just added change to deny string slices except in tests. I recommend auditing this by checking out the previous commit followed by running the script yourself and then verifying that the diff is identical to this commit. This commit makes cargo clippy fail. We will add exceptions in the next commit.

rtcompat: document choice of aws_lc_rs provider

2026-04-08T20:10:34Z

rtcompat: Stop installing backup CryptoProvider.

2026-04-02T13:23:06Z

When using rustls, previously we'd check to see whether the application had installed a CryptoProvider (as it is required to do). If not, we'd log a warning and install a Ring provider. But now, we want to enable other kinds of providers, so this behavior isn't practical any more. (See #2448 for discussion.) Closes #2448.

rtcompat: Allocate the zeroed vector for export_keying_material()

2026-02-26T14:07:40Z

Reason is that Vec::with_capacity(len) doesn't actually allocate and the Rustls export_keying_material() does a .is_empty() check which is under ".len() == 0". Signed-off-by: David Goulet

tor-rtcompat: disable rustls session resumption

2026-02-24T15:31:34Z

rtcompat: Return certificates as Cow.

2026-02-02T21:13:15Z

rtcompat: Improved tls-server key/cert handling.

2026-02-02T15:02:22Z

Now that we can admit to knowing about tor-cert-x509, we can use TlsCertAndKeys to simplify everything.

rustls: add an error for unimplemented tls server support.

2026-01-29T17:56:18Z

rtcompat: Implement TLS server support for rustls.

2026-01-29T17:56:18Z

Closes #2316.

rtcompat: new server-related members on TlsProvider trait.

2026-01-29T17:56:18Z

These are as yet unimplemented; there's a stub type for the providers (nativetls) that won't actually have them.