chore: x509 refactor, part 11: The Valley Of Horrors#2116

Open

istankovic wants to merge 61 commits intomainfrom

ivan/x509-part-11

Commits on May 7, 2026

refactor: e2e-identity: remove PkiEnvironmentProvider
istankovic
committed
chore: e2e-identity: we don't need to check for the inner PKI environment anymore
istankovic
committed
chore: e2e-identity: move credential validation to PkiEnvironment
istankovic
committed
chore: e2e-identity: we don't need to check for the inner PKI environment anymore
istankovic
committed
chore: e2e-identity: drop {set,refresh}_time_of_interest
istankovic
committed
chore: e2e-identity: add a a now() helper to get the current time
istankovic
committed
chore: e2e-identity: refresh_time_of_interest is no more
istankovic
committed
chore: e2e-identity: validate_credential no longer needs a mutable self reference
istankovic
committed
chore: e2e-identity: remove the `toi` field from the inner PKI environment
istankovic
committed
chore: e2e-identity: use the now() helper to get time of interest
istankovic
committed
chore: e2e-identity: remove PkiEnvironmentParams.time_of_interest
istankovic
committed
chore: remove usages of PkiEnvironmentParams.time_of_interest
istankovic
committed
chore: e2e-identity: add PkiEnvironment::set_pki_environment_provider
istankovic
committed
chore: crypto-ffi: PkiEnvironment is no longer Clone
istankovic
committed
test: e2e-identity: PkiEnvironment is no longer Clone, wrap it inside an Arc
istankovic
committed
chore: crypto: add a new authentication service type
istankovic
committed
refactor: crypto: drop the RwLock and use the new AuthenticationService
istankovic
committed
chore: e2e-identity: add PkiEnvironment::validate_cert
istankovic
committed
chore: e2e-identity: allow adding intermediate certs to the PKI env
istankovic
committed
chore: e2e-identity: store trust anchors to the database
istankovic
committed
chore: crypto: remove init_certificates tests
istankovic
committed
chore: crypto: remove cert and CRL registration functions
istankovic
committed
chore: crypto-ffi: remove e2ei_is_pki_env_setup
istankovic
committed
chore: crypto: remove init_certificates module
istankovic
committed
chore: crypto: save CRLs via the PKI environment
istankovic
committed
test: crypto: remove X509TestChain::init_for_random_clients
istankovic
committed
test: crypto: remove can_generate_session test
istankovic
committed
test: crypto: remove X509TestChain::register_with_provider
istankovic
committed
chore: e2e-identity: remove set_pki_environment_provider, it is now unused
istankovic
committed
test: crypto: don't check for federated certs
istankovic
committed
test: crypto: remove the now unused `is_federated` field
istankovic
committed
test: crypto: remove sessions_with_pki_env
istankovic
committed
test: crypto: remove sessions_basic_with_pki_env
istankovic
committed
test: crypto: add certificates and CRLs to the session's PKI environment
istankovic
committed
chore: crypto: remove some more usages of mls_pki_env_provider
istankovic
committed
chore: crypto: provide outer PKI env in calls to extract_identity
istankovic
committed
chore: e2e-identity: make extract_identity accept the outer PKI env
istankovic
committed
chore: e2e-identity: call extract_identity with the outer PKI env
istankovic
committed
chore: e2e-identity: add a way to get all trust anchors from the PKI environment
istankovic
committed
chore: e2e-identity: use the outer PKI env to get trust anchors
istankovic
committed
chore: e2e-identity: remove mls_pki_env_provider
istankovic
committed
chore: e2e-identity: remove a call to update_pki_environment_provider
istankovic
committed
chore: e2e-identity: remove update_pki_environment_provider
istankovic
committed

Commits on May 8, 2026