Add generation-bound TLS control face

Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
This commit is contained in:
ms2k 2026-07-15 17:54:46 +09:00
commit c3a76ec8c4

View file

@ -10,14 +10,22 @@ name = "lazaret-host-coordinator"
path = "src/main.rs"
[dependencies]
ed25519-dalek.workspace = true
getrandom.workspace = true
lazaret-core = { version = "=0.0.0", path = "../lazaret-core" }
lazaret-linux = { version = "=0.0.0", path = "../lazaret-linux" }
lazaret-state-anchor = { version = "=0.0.0", path = "../lazaret-state-anchor" }
lazaret-storage-catalog = { version = "=0.0.0", path = "../lazaret-storage-catalog" }
rcgen.workspace = true
redb.workspace = true
rustix.workspace = true
rustls.workspace = true
serde.workspace = true
sha2.workspace = true
time.workspace = true
[dev-dependencies]
serde.workspace = true
x509-parser.workspace = true
[lints]
workspace = true