-
Notifications
You must be signed in to change notification settings - Fork 38
Move AlgorithmIdentifier
values to here from rustls-webpki
#67
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Any downstream crate defining a custom `rustls::CryptoProvider` currently needs to take a dependency on `rustls-webpki` to reuse these values (alternatively they can redefine these values, but meh.) Moving them here removes that need.
> 'go get' is no longer supported outside a module. > To build and install a command, use 'go install' with a version, > like 'go install example.com/cmd@latest'
The intention here is to make it easy to cross-reference these values with other sources of information, and to "lift the veil" on what these things actually are and are not. Some of these are trivial (ed25519) while others reveal their true horror (RSA-PSS). For the latter, include a reference to their defining RFC, and decorate the context-specific fields with their name in comments.
How about we move AlgorithmIdentifier into the new module, with a top-level re-export for compatibility? |
@ctz Any thoughts on Djc's last feedback? Should we hold merge on that? |
0193439
to
fec0ec9
Compare
Added a commit for this. I could take it or leave it to be honest, but see what you think. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I kinda like it, though IMO AlgorithmIdentifier
should go below the const
s.
Any downstream crate defining a custom
rustls::CryptoProvider
currently needs to take a dependency onrustls-webpki
to reuse these values (alternatively they can redefine these values, but meh.)Moving them here removes that need, and eliminates another reason for people to depend on
rustls-webpki
directly.fixes #27