kaidokert / krabitls-rs / 28150507707

85%

Build Type

push

github

Committed by web-flow

Commit Message

feat(verify)!: always-compile cert validity, opt in via a clock slot (#60)

* feat(verify)!: always-compile cert validity, opt in via a clock slot

Drop the `validity` cargo feature. Cert time-validity folds into the
strategy as a type-level clock slot on `SafeStrategy<T, C, K = NoClock>`:
the default `NoClock` has an empty `check_validity`, so a build that never
opts in dead-code-eliminates `verify_validity` and the `der` decode to
zero. Opt in with `ClientParams::self_signed(h).clocked(clock)`.

Validity rides on `cert-der` (the decode needs der's UTCTime/GeneralizedTime):
available in the default der-parser build, absent in the der-free TLV build,
which stays byte-identical to before. `der` remains optional.

Coverage Stats

13 of 43 new or added lines in 4 files covered. (30.23%)

8 existing lines in 3 files now uncovered.

2721 of 4357 relevant lines covered (62.45%)

59.44 hits per line