| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Rename TlsCertifiedKey to TlsKeyAndCert. | Nick Mathewson | 2025-11-12 | 1 | -4/+4 |
| | | |||||
| * | x509: Correct single instance of misnamed cert | Nick Mathewson | 2025-11-12 | 1 | -1/+1 |
| | | |||||
| * | x509: Support generating the keys and certs that relays need. | Nick Mathewson | 2025-11-12 | 1 | -8/+187 |
| | | | | | | | | | | | | | | | | | | | | | Although we never need to actually check the signature on the other party's x509 certificate, A relay does need a certificate and a private key in order to be a proper TLS server. In this function, I've added support for making an ersatz P-256 certificate certifying a P-256 key. See the code for info about the rationale here. (Tor supports this, since it doesn't look at the key at all: only the TLS layer cares about that.) native_tls and rustls expect to get their keys and certs in different forms, so this code provides them. (Note that we don't expect to use native_tls with relays in the first place, but it might be useful for lower-level interop testing.) Closes #2205. | ||||
| * | x509: Extract serial-number generation into its own function. | Nick Mathewson | 2025-11-12 | 1 | -6/+9 |
| | | |||||
| * | x509: Fix an unfinished comment. | Nick Mathewson | 2025-11-12 | 1 | -1/+1 |
| | | |||||
| * | x509: refactor lifetime calculation | Nick Mathewson | 2025-11-12 | 1 | -27/+23 |
| | | | | | | This doesn't give precisely the same results as before for leap years, but that should be okay. | ||||
| * | Fix name of clippy lint to unchecked_time_subtraction (2) | Ian Jackson | 2025-11-06 | 1 | -1/+1 |
| | | | | | Run maint/add_warning | ||||
| * | tor-cert: Generate x509 identity certificates for CERT cells | Nick Mathewson | 2025-10-07 | 1 | -0/+215 |
| Closes #2197. | |||||
 |
index : mirrors/arti.git | |
| mirror of https://gitlab.torproject.org/tpo/core/arti |
| summaryrefslogtreecommitdiff |