bunnie
b6e5e7f2c2
apply formatting patch
...
@nworbnhoj, i saw you had explicitly done a formatting pass.
However, I think maybe the +nightly flag was missing, it looks
like the formatting ignored our custom rule set, which requires
nightly?
2024-03-02 01:26:51 +08:00
nworbnhoj
ffac721c6b
rustfmt
...
deliberate check of automated rustfmt_check.yaml
confirmed - system works
2024-03-01 09:19:15 +10:00
nworbnhoj
01b13e0e32
replace vendored-in rustls::crypto: 💍 :SUPPORTED_SIG_ALGS with public access
2024-03-01 06:50:04 +10:00
nworbnhoj
7f19e660d9
add link to rustls issue
...
https://github.com/rustls/rustls/issues/1819
2024-02-29 09:53:02 +10:00
nworbnhoj
b217c1546e
tls tidy-up
2024-02-29 06:52:50 +10:00
nworbnhoj
6d24f1af41
refine tls probe() remove unnecessary Option
2024-02-29 06:18:43 +10:00
nworbnhoj
17c1fabc1e
refine shellchat net tls test for tls 1.3
...
https://docs.rs/rustls/latest/rustls/manual/_03_howto/index.html#unexpected-eof
2024-02-28 13:55:49 +10:00
nworbnhoj
332c2975ba
reinstate tls::ota add_der_header() and rm_der_header()
...
In keeping with webpki-roots - the TrustAnchors are managed without the Der Tag::Sequence header
This in turn requires that:
- the header is removed from x509 fields before saving in the pddb, and
- the der Tag::Sequence is added to ota.subject before it can be decoded () see ota.subject()
2024-02-28 12:40:05 +10:00
nworbnhoj
7760b02229
refine tls::ota.from(&TrustAnchor)
2024-02-28 06:59:38 +10:00
nworbnhoj
faece9783e
refine tls:rota.subject() -> Result<String, Error>
2024-02-28 05:24:57 +10:00
nworbnhoj
8ed22b8257
refine shellchat net tls mozilla
2024-02-27 08:48:10 +10:00
nworbnhoj
a3740df71a
refine shellchat net tls test
2024-02-27 07:23:09 +10:00
nworbnhoj
bb2b7f05e7
fix tls::ota.pddb_key()
2024-02-27 07:22:11 +10:00
nworbnhoj
2cc0052d7d
refine tls::ota.into() TrustAnchor
2024-02-27 07:21:36 +10:00
nworbnhoj
e608e7bb30
update shellchat net tls mozilla for rustls v22.2
2024-02-27 07:20:32 +10:00
nworbnhoj
1f6ec1fe69
refine danger:StifledCertificateVerifier
2024-02-25 15:50:47 +10:00
nworbnhoj
92d1b21caf
Add a single bogus TrustAnchor to danger::StifledCertificateVerification root_cert_store
...
rustls::ServerCertVerifierBuilder::build() returns a `CertVerifierBuilderError` if no trust anchors have been provided.
2024-02-25 15:49:36 +10:00
nworbnhoj
8d4494a005
implement tls::ota.subject()
2024-02-25 15:47:32 +10:00
nworbnhoj
04e2311920
simplify rustls::ClientConfig in tls.probe()
2024-02-25 07:42:45 +10:00
nworbnhoj
bda9bc94e2
tidy-up after update to rustls v22.2
2024-02-25 05:28:07 +10:00
nworbnhoj
2d744f1267
resolve tls ownership issues
2024-02-25 05:23:57 +10:00
nworbnhoj
39f3b782fa
update tls lib.rs for rustls v22.2
2024-02-25 05:20:48 +10:00
nworbnhoj
ad01b7de6c
rename RustlsOwnedTrustAnchor to OwnedTrustAnchor and update for rustls v22.2
2024-02-25 05:07:05 +10:00
nworbnhoj
fa24528226
update impl ServerCertVerifier for StifledCertificateVerification
2024-02-25 03:16:18 +10:00
nworbnhoj
8e7fd7d1a8
relocate ServerCertVerifier
2024-02-15 10:42:32 +10:00
nworbnhoj
84200b2cd2
replace Certificate with CertificateDer
2024-02-15 10:41:45 +10:00
nworbnhoj
60aa640f23
relocate ServerName
2024-02-15 10:33:55 +10:00
nworbnhoj
2b3d982d3f
relocate TrustAnchor
2024-02-15 10:30:08 +10:00
nworbnhoj
d0fba6fbd7
replace SystemTime with UnixTime
2024-02-15 10:28:17 +10:00
nworbnhoj
ba6d3fcdf6
rename WebPkiVerifier
2024-02-15 10:27:17 +10:00
nworbnhoj
f2204c5a25
relocate ServerCertVerified
2024-02-15 10:23:48 +10:00
bunnie
32a8a54ec4
upgrade sct so we're all using ring-0.17
2024-02-11 01:32:13 +08:00
bunnie
5fb368ae05
partial progress on porting to ring-0.17
2024-02-09 17:18:41 +08:00
David Kotval
8eb0a26d51
fix: don't break tls
...
Due to our patch of ring@0.16.0, we must be careful
that none of the transitive deps of the tls packages
try to use a newer ring.
2024-02-08 12:47:45 -06:00
bunnie
699004e7b0
bump xous pins
2024-02-06 14:49:10 +08:00
bunnie
bf15d7c803
Merge branch 'main' into refactor-sha2
2024-02-01 01:46:31 +08:00
bunnie
40423f9448
fix hosted and renode modes
2024-02-01 01:42:18 +08:00
bunnie
55d88587a9
upgrade all the subordinate Cargo.toml files to match the patch
...
looks like about 9 crates will be affected by this. Point them
all to the latest version of the API, and specify the
"precursor" feature (which activates our patch)
2024-01-30 01:43:09 +08:00
David Kotval
14da821164
fix: added English stubs to tls messages.
2024-01-24 16:42:36 +00:00
bunnie
0267a56989
format Cargo.tomls
...
because apparently cargo fmt doesn't format Cargo.toml files???
2024-01-15 00:14:39 +08:00
bunnie
c43fd370ee
format libs/tls
2024-01-14 19:13:54 +08:00
nworbnhoj
05c991e3a2
Merge branch 'main' into sigchat
2023-12-26 08:14:42 +11:00
bunnie
fda782663a
bump version pins for xous change
2023-12-26 00:13:10 +08:00
nworbnhoj
854b2198c4
tls doc & tidy-up
2023-12-24 06:03:26 +11:00
nworbnhoj
5703707cca
implement Tls.accessible()
2023-12-22 14:25:51 +11:00
nworbnhoj
7d72387cb9
simplify TLS.probe() modals
2023-12-22 14:24:08 +11:00
nworbnhoj
0ca24db2f0
implement Tls.is_trusted_cert() & Tls.is_trusted_x509()
2023-12-22 14:23:04 +11:00
nworbnhoj
6e1947d3b0
rename Tls.*_cert() to Tls.*_rota()
...
actually this is a correction of the names of these fn
these fn are actually handling trust_anchors rather than certificates
and in some cases we will need equivalent fn for certificates
2023-12-21 16:33:47 +11:00
nworbnhoj
12c74e724f
implement Tls.inspect(host)
...
Tls.probe() now returns a Vec<Certificate> and Tls.inspect(host) presents the trust_modal to the user
2023-12-21 07:48:09 +11:00
nworbnhoj
de1dcffd66
rename shellchat net tls inspect
...
rename shellchat `net tls probe` to `net tls inspect`
2023-12-20 18:44:52 +11:00