Commit graph

124 commits

Author SHA1 Message Date
bunnie
b6e5e7f2c2 apply formatting patch
@nworbnhoj, i saw you had explicitly done a formatting pass.
However, I think maybe the +nightly flag was missing, it looks
like the formatting ignored our custom rule set, which requires
nightly?
2024-03-02 01:26:51 +08:00
nworbnhoj
ffac721c6b rustfmt
deliberate check of automated rustfmt_check.yaml

confirmed - system works
2024-03-01 09:19:15 +10:00
nworbnhoj
01b13e0e32 replace vendored-in rustls::crypto:💍:SUPPORTED_SIG_ALGS with public access 2024-03-01 06:50:04 +10:00
nworbnhoj
7f19e660d9 add link to rustls issue
https://github.com/rustls/rustls/issues/1819
2024-02-29 09:53:02 +10:00
nworbnhoj
b217c1546e tls tidy-up 2024-02-29 06:52:50 +10:00
nworbnhoj
6d24f1af41 refine tls probe() remove unnecessary Option 2024-02-29 06:18:43 +10:00
nworbnhoj
17c1fabc1e refine shellchat net tls test for tls 1.3
https://docs.rs/rustls/latest/rustls/manual/_03_howto/index.html#unexpected-eof
2024-02-28 13:55:49 +10:00
nworbnhoj
332c2975ba reinstate tls::ota add_der_header() and rm_der_header()
In keeping with webpki-roots - the TrustAnchors are managed without the Der Tag::Sequence header

This in turn requires that:
- the header is removed from x509 fields before saving in the pddb, and
- the der Tag::Sequence is added to ota.subject before it can be decoded  () see ota.subject()
2024-02-28 12:40:05 +10:00
nworbnhoj
7760b02229 refine tls::ota.from(&TrustAnchor) 2024-02-28 06:59:38 +10:00
nworbnhoj
faece9783e refine tls:rota.subject() -> Result<String, Error> 2024-02-28 05:24:57 +10:00
nworbnhoj
8ed22b8257 refine shellchat net tls mozilla 2024-02-27 08:48:10 +10:00
nworbnhoj
a3740df71a refine shellchat net tls test 2024-02-27 07:23:09 +10:00
nworbnhoj
bb2b7f05e7 fix tls::ota.pddb_key() 2024-02-27 07:22:11 +10:00
nworbnhoj
2cc0052d7d refine tls::ota.into() TrustAnchor 2024-02-27 07:21:36 +10:00
nworbnhoj
e608e7bb30 update shellchat net tls mozilla for rustls v22.2 2024-02-27 07:20:32 +10:00
nworbnhoj
1f6ec1fe69 refine danger:StifledCertificateVerifier 2024-02-25 15:50:47 +10:00
nworbnhoj
92d1b21caf Add a single bogus TrustAnchor to danger::StifledCertificateVerification root_cert_store
rustls::ServerCertVerifierBuilder::build() returns a `CertVerifierBuilderError` if no trust anchors have been provided.
2024-02-25 15:49:36 +10:00
nworbnhoj
8d4494a005 implement tls::ota.subject() 2024-02-25 15:47:32 +10:00
nworbnhoj
04e2311920 simplify rustls::ClientConfig in tls.probe() 2024-02-25 07:42:45 +10:00
nworbnhoj
bda9bc94e2 tidy-up after update to rustls v22.2 2024-02-25 05:28:07 +10:00
nworbnhoj
2d744f1267 resolve tls ownership issues 2024-02-25 05:23:57 +10:00
nworbnhoj
39f3b782fa update tls lib.rs for rustls v22.2 2024-02-25 05:20:48 +10:00
nworbnhoj
ad01b7de6c rename RustlsOwnedTrustAnchor to OwnedTrustAnchor and update for rustls v22.2 2024-02-25 05:07:05 +10:00
nworbnhoj
fa24528226 update impl ServerCertVerifier for StifledCertificateVerification 2024-02-25 03:16:18 +10:00
nworbnhoj
8e7fd7d1a8 relocate ServerCertVerifier 2024-02-15 10:42:32 +10:00
nworbnhoj
84200b2cd2 replace Certificate with CertificateDer 2024-02-15 10:41:45 +10:00
nworbnhoj
60aa640f23 relocate ServerName 2024-02-15 10:33:55 +10:00
nworbnhoj
2b3d982d3f relocate TrustAnchor 2024-02-15 10:30:08 +10:00
nworbnhoj
d0fba6fbd7 replace SystemTime with UnixTime 2024-02-15 10:28:17 +10:00
nworbnhoj
ba6d3fcdf6 rename WebPkiVerifier 2024-02-15 10:27:17 +10:00
nworbnhoj
f2204c5a25 relocate ServerCertVerified 2024-02-15 10:23:48 +10:00
bunnie
32a8a54ec4 upgrade sct so we're all using ring-0.17 2024-02-11 01:32:13 +08:00
bunnie
5fb368ae05 partial progress on porting to ring-0.17 2024-02-09 17:18:41 +08:00
David Kotval
8eb0a26d51 fix: don't break tls
Due to our patch of ring@0.16.0, we must be careful
that none of the transitive deps of the tls packages
try to use a newer ring.
2024-02-08 12:47:45 -06:00
bunnie
699004e7b0 bump xous pins 2024-02-06 14:49:10 +08:00
bunnie
bf15d7c803
Merge branch 'main' into refactor-sha2 2024-02-01 01:46:31 +08:00
bunnie
40423f9448 fix hosted and renode modes 2024-02-01 01:42:18 +08:00
bunnie
55d88587a9 upgrade all the subordinate Cargo.toml files to match the patch
looks like about 9 crates will be affected by this. Point them
all to the latest version of the API, and specify the
"precursor" feature (which activates our patch)
2024-01-30 01:43:09 +08:00
David Kotval
14da821164 fix: added English stubs to tls messages. 2024-01-24 16:42:36 +00:00
bunnie
0267a56989 format Cargo.tomls
because apparently cargo fmt doesn't format Cargo.toml files???
2024-01-15 00:14:39 +08:00
bunnie
c43fd370ee format libs/tls 2024-01-14 19:13:54 +08:00
nworbnhoj
05c991e3a2 Merge branch 'main' into sigchat 2023-12-26 08:14:42 +11:00
bunnie
fda782663a bump version pins for xous change 2023-12-26 00:13:10 +08:00
nworbnhoj
854b2198c4 tls doc & tidy-up 2023-12-24 06:03:26 +11:00
nworbnhoj
5703707cca implement Tls.accessible() 2023-12-22 14:25:51 +11:00
nworbnhoj
7d72387cb9 simplify TLS.probe() modals 2023-12-22 14:24:08 +11:00
nworbnhoj
0ca24db2f0 implement Tls.is_trusted_cert() & Tls.is_trusted_x509() 2023-12-22 14:23:04 +11:00
nworbnhoj
6e1947d3b0 rename Tls.*_cert() to Tls.*_rota()
actually this is a correction of the names of these fn
these fn are actually handling trust_anchors rather than certificates
and in some cases we will need equivalent fn for certificates
2023-12-21 16:33:47 +11:00
nworbnhoj
12c74e724f implement Tls.inspect(host)
Tls.probe() now returns a Vec<Certificate> and Tls.inspect(host) presents the trust_modal to the user
2023-12-21 07:48:09 +11:00
nworbnhoj
de1dcffd66 rename shellchat net tls inspect
rename shellchat `net tls probe` to `net tls inspect`
2023-12-20 18:44:52 +11:00