Signed-off-by: renovate <renovate@archlinux.org>

Signed-off-by: renovate <renovate@archlinux.org>

Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Fixes: #161


Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Fixes: #118


Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Signed-off-by: renovate <renovate@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Add `containerized-integration-test` recipe to run each test made
available through the `_containerized-integration-test` feature in a
separate Arch Linux container.

Signed-off-by: David Runge <dvzrv@archlinux.org>

In some situations it is useful/ needed to be able to clone
`Credentials` when using them in consumers.

Signed-off-by: David Runge <dvzrv@archlinux.org>

The `Passphrase` type redacts its contents from debug prints, so it is
safe to implement `Debug` for `Credentials`.

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

- Adds all public data required for the `signstar-configure-build`
  crate, as it will be shared by other crates.
- Adds NetHSM specific defaults.
- Adds basic configuration file retrieval and directory handling for
  Signstar hosts.
- Adds administrative credentials file retrieval and directory handling
  for Signstar hosts.

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: renovate <renovate@archlinux.org>

See: https://github.com/aws/aws-lc-rs/issues/722#issuecomment-2715433122


Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Signed-off-by: renovate <renovate@archlinux.org>

renovate authored 2 weeks ago and Wiktor Kwapisiewicz committed 2 weeks ago

Signed-off-by: renovate <renovate@archlinux.org>

Signed-off-by: renovate <renovate@archlinux.org>

See: https://github.com/briansmith/ring/commit/0d80ad56a24bdcc3daeed338551379d8adbed976


Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

This issue is being worked on by the only dependency which uses it
(`aws-lc-rs`) so temporarily allow it to make other jobs pass.

Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

See: https://rustsec.org/advisories/RUSTSEC-2025-0009
See: https://github.com/briansmith/ring/blob/main/RELEASES.md#version-01712-2025-03-05
Fixes: #165


Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Enable returning a specific `ExtendedUserMapping` by searching for the
name of a system user in all mappings.

Signed-off-by: David Runge <dvzrv@archlinux.org>

Add the wrapper type `ExtendedUserMapping` which is aware of the
administrative and non-administrative secret handling, as well as the
available backend connections while tracking a single `UserMapping`.
This establishes a user mapping centric view of a host.

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Add a function to easily evaluate whether a `UserMapping` has a system
user and at least one NetHSM user.

Signed-off-by: David Runge <dvzrv@archlinux.org>

Derive `strum::Display` and `strum::EnumString` for
`AdministrativeSecretHandling` as those are useful when e.g. using the
type in errors.

Signed-off-by: David Runge <dvzrv@archlinux.org>

The ring crate is now maintained by the maintainers of rustls.

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: renovate <renovate@archlinux.org>