-
Notifications
You must be signed in to change notification settings - Fork 726
Expose SingleCertAndKey server cert resolver #2337
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
81b5505
to
d52a6b6
Compare
Benchmark resultsInstruction countsSignificant differencesClick to expand
Other differencesClick to expand
Wall-timeSignificant differencesThere are no significant wall-time differences Other differencesClick to expand
Additional informationCheckout details:
|
d52a6b6
to
dad5cd3
Compare
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #2337 +/- ##
==========================================
- Coverage 94.88% 94.87% -0.01%
==========================================
Files 103 103
Lines 24201 24176 -25
==========================================
- Hits 22962 22938 -24
+ Misses 1239 1238 -1 ☔ View full report in Codecov by Sentry. |
dad5cd3
to
7648af9
Compare
rustls/src/server/handy.rs
Outdated
@@ -168,9 +168,9 @@ impl server::ProducesTickets for NeverProducesTickets { | |||
|
|||
/// Something which always resolves to the same cert chain. | |||
#[derive(Debug)] | |||
pub(super) struct AlwaysResolvesChain(Arc<sign::CertifiedKey>); | |||
pub(super) struct SingleCertAndKey(Arc<sign::CertifiedKey>); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not married to this name in particular, but AlwaysResolvesChain
seems pretty idiosyncratic to me.
cffa8f1
to
e3825aa
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thoughts about doing the matching change for client::handy::AlwaysResolvesClientCert
for symmetry?
(there's a copy of that in rustls/tests/api.rs
which could be eliminated in case we do)
efbb160
to
2f0ecf5
Compare
Fair -- reworked the PR to combine both in a single type (and eliminate the test duplicate). |
2f0ecf5
to
be94391
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice improvement 👏
(Should we start deprecating OCSP API?)
It feels a little bit premature to me 🤷♂️
be94391
to
a42df9a
Compare
|
Motivated by:
Arc<dyn ResolvesServerCert>
hickory-dns/hickory-dns#2764(Should we start deprecating OCSP API?)
Proposed release notes
SingleCertAndKey
implementation ofResolvesServerCert
(was already used internally).CertifiedKey::from_der()
to help createCertifiedKey
s with necessary checks.