jcoffey-dev
de3c4f0c75
A joined relay whose certificate is missing, for another name, or runs out within 30 days gets one for its public name, when the name is under a domain whose DNS and certificates are both Automatic here. The order uses that domain's ACME provider and DNS server, always by DNS-01, for the public name alone and with a key of its own: never the domain's wildcard key. A renewal keeps the relay's key. The link service checks at each scan. One node orders: it claims the order under `c` + relay id first. A failed order waits six hours, for the provider's rate limits, and its reason is the relay's new certificateError; certificateNotAfter reads the stored certificate. The certificate goes on the relay unless its public name changed meanwhile, and every link pushes it. Without such a domain, nothing is ordered and an administrator uploads one, as before. Tested against pebble in the automation tests.
110 lines
3.8 KiB
TOML
110 lines
3.8 KiB
TOML
[package]
|
|
name = "common"
|
|
version.workspace = true
|
|
edition = "2024"
|
|
build = "build.rs"
|
|
|
|
[dependencies]
|
|
utils = { path = "../utils" }
|
|
inbuxa-outbound-tls = { path = "../outbound-tls" }
|
|
nlp = { path = "../nlp" }
|
|
store = { path = "../store" }
|
|
trc = { path = "../trc" }
|
|
directory = { path = "../directory" }
|
|
coordinator = { path = "../coordinator" }
|
|
types = { path = "../types" }
|
|
registry = { path = "../registry" }
|
|
inbuxa-features = { path = "../features" }
|
|
jmap_proto = { path = "../jmap-proto" }
|
|
sieve-rs = { version = "0.7", features = ["rkyv", "serde"] }
|
|
mail-parser = { version = "0.11", features = ["full_encoding"] }
|
|
mail-builder = { version = "1.0" }
|
|
mail-auth = { version = "0.13", features = ["generate", "arc"] }
|
|
smtp-proto = { version = "0.2.3", features = ["rkyv"] }
|
|
dns-update = { version = "0.6" }
|
|
calcard = { version = "0.3", features = ["rkyv"] }
|
|
ahash = { version = "0.8.12", features = ["serde"] }
|
|
parking_lot = "0.12.5"
|
|
regex = "1.13.1"
|
|
proxy-header = { version = "0.1.2", features = ["tokio"] }
|
|
arc-swap = "1.9.2"
|
|
rustls = { version = "0.23.43", default-features = false, features = ["std", "aws_lc_rs", "tls12"] }
|
|
rustls-pemfile = "2.2"
|
|
rustls-pki-types = { version = "1" }
|
|
aws-lc-rs = { version = "1" }
|
|
tokio = { version = "1.53", features = ["net", "macros"] }
|
|
tokio-rustls = { version = "0.26", default-features = false, features = ["aws_lc_rs", "tls12"] }
|
|
futures = "0.3"
|
|
rcgen = { version = "0.14", default-features = false, features = ["crypto", "pem", "aws_lc_rs"] }
|
|
reqwest = { version = "0.13", default-features = false, features = ["rustls", "http2", "stream"]}
|
|
serde = { version = "1.0", features = ["derive"]}
|
|
serde_json = "1.0"
|
|
base64 = "0.23"
|
|
x509-parser = "0.18"
|
|
pem = "4.0"
|
|
chrono = { version = "0.4", features = ["serde"] }
|
|
hyper = { version = "1.11.1", features = ["server", "http1", "http2"] }
|
|
# inbuxa: the opentelemetry crates come from vendor/ (root [patch.crates-io])
|
|
opentelemetry = { version = "0.33" }
|
|
opentelemetry_sdk = { version = "0.33" }
|
|
opentelemetry-otlp = { version = "0.33", default-features = false, features = ["reqwest-client", "http-proto", "trace", "metrics", "logs", "internal-logs", "grpc-tonic", "tls-aws-lc", "tls-roots", "reqwest-rustls"] }
|
|
opentelemetry-semantic-conventions = { version = "0.33" }
|
|
prometheus = { version = "0.14", default-features = false }
|
|
imagesize = "0.15"
|
|
sha1 = "0.11"
|
|
sha2 = "0.11"
|
|
md5 = "0.8.1"
|
|
whatlang = "0.18"
|
|
idna = "1.1"
|
|
decancer = "4.0.0"
|
|
unicode-security = "0.1.2"
|
|
infer = "0.22"
|
|
bincode = { version = "2.0.1", features = ["serde"] }
|
|
hostname = "0.4.2"
|
|
zip = "8.6"
|
|
xxhash-rust = { version = "0.8.18", features = ["xxh3"] }
|
|
psl = "2"
|
|
aes-gcm-siv = "0.12.1"
|
|
jsonwebtoken = { version = "11.0.0", features = ["aws_lc_rs"] }
|
|
rsa = "0.9.10"
|
|
p256 = { version = "0.13", features = ["ecdh", "ecdsa", "pkcs8", "pem"] }
|
|
p384 = { version = "0.13", features = ["ecdh"] }
|
|
hashify = "0.2"
|
|
rkyv = { version = "0.8.18", features = ["little_endian"] }
|
|
tinyvec = { version = "1.12.0", features = ["alloc"] }
|
|
compact_str = { version = "0.10.0", features = ["rkyv", "serde"] }
|
|
lz4_flex = { version = "0.14", features = ["frame"], default-features = false }
|
|
hickory-proto = "0.26.3"
|
|
nohash-hasher = "0.2.0"
|
|
quick_cache = "0.7"
|
|
rasn = "0.28"
|
|
rasn-pkix = "0.28"
|
|
sequoia-openpgp = { version = "2.4", default-features = false, features = ["crypto-rust", "allow-experimental-crypto", "allow-variable-time-crypto"] }
|
|
zxcvbn = "3.1.1"
|
|
pkcs8 = { version = "0.10.2", features = ["alloc", "std"] }
|
|
quick-xml = "0.41"
|
|
|
|
[target.'cfg(unix)'.dependencies]
|
|
privdrop = "0.5.6"
|
|
libc = "0.2.189"
|
|
|
|
[target.'cfg(target_os = "linux")'.dependencies]
|
|
sd-notify = "0.5"
|
|
|
|
[target.'cfg(windows)'.dependencies]
|
|
socket2 = "0.6"
|
|
|
|
[features]
|
|
test_mode = []
|
|
dev_mode = []
|
|
enterprise = []
|
|
foundation = []
|
|
|
|
[dev-dependencies]
|
|
tokio = { version = "1.53", features = ["full"] }
|
|
# inbuxa: relay certificate tests (relay spec, RL-27)
|
|
time = "0.3"
|
|
|
|
[lints]
|
|
workspace = true
|