Skip to content

deps: Update rcgen, ring and thiserror in gl-client - #763

Merged
cdecker merged 1 commit into
mainfrom
2026m09-dependency-minimize
Nov 6, 2026
Merged

cdecker merged 1 commit into
mainfrom
2026m09-dependency-minimize

Conversation

@cdecker

@cdecker cdecker commented Nov 6, 2026

Copy link
Copy Markdown
Collaborator

Companion to the SDK-pointer work in greenlight MR git.\n\nThis branch now carries a single commit on top of main: the rcgen, ring and thiserror updates in gl-client, which the greenlight-side workspace needs so duplicate versions can be collapsed repo-wide. \n\nReplaces #744, whose consolidation work (cln-* 0.7 / tonic 0.14) landed via other merges; only this update remains. \n\nThe greenlight repo's public submodule pointer already references this branch's tip (d1dd4def), so this should merge before/with that MR.

 - rcgen 0.10 -> 0.13: self-signing moves from
   Certificate::from_params to params.self_signed(&keypair), and CSR
   generation to params.serialize_request(&keypair). Since the
   certificate no longer carries its key pair, the pieces are kept
   together in a new DeviceCert type that exposes the methods the
   registration and pairing flows already use. is_ca stays
   ExplicitNoCa for the certificate (CA:FALSE leaf, unchanged) but
   reverts to NoCa for the CSR, which rcgen 0.13 refuses to
   serialize with the flag set; leaf-ness is enforced by the signing
   profile on the scheduler side.
 - ring ~0.16 -> 0.17: EcdsaKeyPair::from_pkcs8 takes the
   SecureRandom argument it always needed for blinding.
 - thiserror 1 -> 2, matching the workspace.

This removes the last rcgen 0.10, x509-parser 0.14 and one of the
ring 0.16 chains from the shared dependency graph. Device keys stay
PKCS#8 P-256; the cert and CSR formats are unchanged.
@cdecker
cdecker merged commit d6fb51d into main Nov 6, 2026
16 checks passed
@cdecker
cdecker deleted the 2026m09-dependency-minimize branch November 6, 2026 13:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant