Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Series of changes from wire.com #62

Merged
merged 23 commits into from
Sep 12, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
23 commits
Select commit Hold shift + click to select a range
dc989ab
feat: Tighten Send+Sync requirements to allow PkiEnvironment to be Se…
OtaK Dec 20, 2023
130cfee
fix: Serde stuff
OtaK Dec 20, 2023
2944b8a
Added support for retrieving TAs and Inter CAs
OtaK Dec 21, 2023
949a0bf
fix: Misc fixes for Inter CA source
OtaK Jan 22, 2024
ceef983
Added support for id-Ed25519
OtaK Jan 18, 2024
6ff1da8
feat: Added support for forbidding self-signed EE certs
OtaK Feb 6, 2024
563870a
fix: Improve performance + additional self-emission check
OtaK Feb 6, 2024
062dbce
added test
OtaK Feb 6, 2024
1e26f01
feat: Add support for retrieving intermediates
OtaK Feb 7, 2024
dfbaf5b
Added test to assert that the Wire environment actually works
OtaK Feb 8, 2024
2fd9f12
fix: Validation works without the std feature
OtaK Feb 8, 2024
cfa8531
fix: Return expired cert error when computing paths instead of nothing
OtaK Feb 14, 2024
04c5568
feat: Added accessor for intermediates by SKI
OtaK Feb 19, 2024
3966c2f
fix: Set validation status as Valid upon revocation check
OtaK Feb 19, 2024
7ca6851
fix: Don't fail on missing BasicConstraints in EE certs
OtaK Feb 20, 2024
a5ef377
fix: Use more robust CRL serial comparison
OtaK Mar 6, 2024
6c26072
chore: Misc fixes
OtaK Mar 11, 2024
6eac197
feat: Added ability to list all CRLs in-store
OtaK Mar 13, 2024
0540b8e
fix: Use revocation cached state on not std too
OtaK Mar 13, 2024
f1a2d46
feat: Added support for P521
OtaK Mar 26, 2024
4c54941
fix: Correctly handle EcDSA OIDs
OtaK Apr 9, 2024
7584d33
feat: add feature to exclude RSA crate
beltram Apr 16, 2024
e07dfa1
test: test should run only when rsa is enabled. fmt
augustocdias Aug 28, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
143 changes: 142 additions & 1 deletion Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 2 additions & 0 deletions Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,8 @@ debug = true
cms = { git = "https://github.com/RustCrypto/formats.git" }
x509-ocsp = { git = "https://github.com/RustCrypto/formats.git" }
x509-cert = { git = "https://github.com/RustCrypto/formats.git" }
# FIXME: https://github.com/dalek-cryptography/curve25519-dalek/pull/676
ed25519-dalek = { git = "https://github.com/dalek-cryptography/curve25519-dalek.git", branch = "rustcrypto-new-releases" }

[patch.'https://github.com/carl-wallace/pqckeys']
pqckeys = { git = "https://github.com/baloo/pqckeys.git", branch = "baloo/pre-releases" }
15 changes: 10 additions & 5 deletions certval/Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -30,9 +30,11 @@ pem-rfc7468 = { version="1.0.0-pre.0", features = ["alloc"]}
pkiprocmacros = { path = "../pkiprocmacros"}

ecdsa = {version = "0.17.0-pre.7", default-features = false, features = ["der"]}
p256 = {version = "0.14.0-pre.1", default-features = false, features = ["ecdsa", "ecdsa-core"]}
p256 = {version = "0.14.0-pre.1", default-features = false, features = ["ecdsa"]}
p384 = {version = "0.14.0-pre.1", default-features = false, features = ["ecdsa"]}
rsa = {version = "0.10.0-pre.2", default-features = false}
p521 = {version = "0.14.0-pre.1", default-features = false, features = ["ecdsa"]}
ed25519-dalek = { version = "2.2.0-pre", default-features = false, features = ["fast", "zeroize", "pkcs8"] }
rsa = {version = "0.10.0-pre.2", default-features = false, optional=true}
sha1 = {version = "0.11.0-pre.4", default-features = false}
sha2 = {version = "0.11.0-pre.4", default-features = false, features = ["oid"] }

Expand All @@ -51,7 +53,6 @@ log = {version = "0.4.20", default-features = false}
ndarray = {version = "0.15.6", optional = true, default-features = false}
reqwest = { version = "0.11.22", features = ["blocking"], optional = true}
serde_json = {version = "1.0.108", optional = true, default-features = false, features = ["alloc"] }
tokio = { version = "1.33.0", features = ["full", "time", "rt-multi-thread"], optional = true }
url = {version = "2.4.1", optional = true}
walkdir = { version = "2.4.0", optional = true}

Expand All @@ -72,6 +73,9 @@ webpki-roots = {version = "0.25.1", optional = true}
tempfile = "3.8.1"
hex-literal = "0.4.1"
tokio-test = "0.4.2"
pretty_env_logger = "0.5"
tokio = { version = "1.33.0", features = ["full", "macros", "time", "rt-multi-thread"] }


# There are five feature gates:
# - no-default-features (i.e., no-std) provides full path validation without file system support, network or thread safety (and no revocation support)
Expand All @@ -83,11 +87,12 @@ tokio-test = "0.4.2"
# webpki can be paired with any other feature and simply adds a means of initializing a TaSource from the webpki-roots crate
[features]
default = ["remote", "webpki"]
revocation = ["ndarray"]
std = ["ndarray", "tokio", "base64ct", "walkdir", "url", "serde_json", "serde/rc", "flagset/serde", "regex", "lazy_static/spin", "bitvec", "cidr", "der/std"]
revocation = ["dep:ndarray", "serde/std", "serde/rc", "dep:url", "dep:regex"]
std = ["dep:ndarray", "dep:base64ct", "dep:walkdir", "ed25519-dalek/std", "dep:url", "dep:serde_json", "serde/rc", "flagset/serde", "dep:regex", "lazy_static/spin", "dep:bitvec", "dep:cidr", "der/std"]
remote = ["revocation", "std", "reqwest", "lazy_static/spin"]
pqc = ["pqcrypto-internals", "pqcrypto-dilithium", "pqcrypto-falcon", "pqcrypto-sphincsplus", "pqcrypto", "pqcrypto-traits", "pqckeys"]
webpki = ["webpki-roots"]
rsa = ["dep:rsa"]

[package.metadata.docs.rs]
all-features = true
Expand Down
Loading
Loading