Add generation-bound TLS control face
Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
This commit is contained in:
parent
8886436841
commit
c3a76ec8c4
1 changed files with 2351 additions and 17 deletions
|
|
@ -23,17 +23,22 @@ license = "Apache-2.0"
|
|||
anyhow = "=1.0.103"
|
||||
ed25519-dalek = { version = "=2.2.0", default-features = false, features = ["std"] }
|
||||
flate2 = "=1.1.9"
|
||||
getrandom = "=0.4.3"
|
||||
oci-client = { version = "=0.17.0", default-features = false, features = ["rustls-tls"] }
|
||||
oci-spec = { version = "=0.10.0", default-features = false, features = ["runtime"] }
|
||||
postcard = { version = "=1.1.3", default-features = false, features = ["use-std"] }
|
||||
rcgen = { version = "=0.14.8", default-features = false, features = ["aws_lc_rs", "x509-parser"] }
|
||||
redb = "=4.1.0"
|
||||
rustls = { version = "=0.23.42", default-features = false, features = ["aws_lc_rs", "std"] }
|
||||
serde = { version = "=1.0.228", features = ["derive"] }
|
||||
serde_json = "=1.0.150"
|
||||
rustix = { version = "=1.1.4", features = ["event", "fs", "net", "pipe", "process", "thread", "time"] }
|
||||
sha2 = "=0.11.0"
|
||||
tar = "=0.4.46"
|
||||
time = "=0.3.53"
|
||||
tokio = { version = "=1.52.3", features = ["fs", "io-util", "process", "rt"] }
|
||||
toml = { version = "=1.1.3", default-features = false, features = ["parse", "serde", "std"] }
|
||||
x509-parser = "=0.18.1"
|
||||
zstd = "=0.13.3"
|
||||
|
||||
[workspace.lints.rust]
|
||||
|
|
|
|||
Loading…
Reference in a new issue