refactor: add cert validation to the acquisition, remove old enrollment#2012

Open

istankovic wants to merge 34 commits intomainfrom

ivan/x509-part-10

Commits on Apr 10, 2026

chore: crypto: remove old x509 impl from TransactionContext
istankovic
committed
chore: crypto: remove unused import
istankovic
committed
chore: crypto: silence clippy
istankovic
committed
chore: e2e-identity: move acme/identity to under acquisition
istankovic
committed
chore: e2e-identity: move CertificateError to the acquisition module
istankovic
committed
chore: e2e-identity: adjust imports after the move
istankovic
committed
chore: e2e-identity: add CertificateError::X509Check variant
istankovic
committed
chore: e2e-identity: use correct error types
istankovic
committed
chore: e2e-identity: PKI environment is not optional when validating certs
istankovic
committed
chore: e2e-identity: PKI environment is not optional when extracting identity
istankovic
committed
chore: e2e-identity: extend CertificateError with more variants
istankovic
committed
chore: e2e-identity: identity: use CertificateError instead of RustyAcmeError
istankovic
committed
chore: e2e-identity: thumbprint: use CertificateError instead of RustyAcmeError
istankovic
committed
chore: e2e-identity: extend X509CredentialConfiguration with a domain field
istankovic
committed
chore: e2e-identity: move certificate checks out of the acme module
istankovic
committed
chore: e2e-identity: hook the new verification code into the acquisition
istankovic
committed
chore: keystore-dump: the old enrollment is going away
istankovic
committed
chore: e2e-identity: remove the old enrollment type
istankovic
committed
chore: e2e-identity: remove RustyE2eIdentity and related code
istankovic
committed
chore: e2e-identity: expose WireIdentityReader
istankovic
committed
chore: e2e-identity: expose compute_raw_key_thumbprint
istankovic
committed
test: e2e-identity: make rand_client_id take a domain parameter
istankovic
committed
test: e2e-identity: specify the domain centrally
istankovic
committed
test: e2e-identity: add PKI environment to identity tests
istankovic
committed
test: e2e-identity: we can't get a valid status because we don't have a trust anchor
istankovic
committed
chore: crypto: add MissingPKIEnvironment variant to the credential error type
istankovic
committed
chore: crypto: provide PKI environment to extract_identity
istankovic
committed
chore: crypto: remove get_new_crl_distribution_points
istankovic
committed
chore: Cargo.lock: update to newer rust-pki
istankovic
committed
chore: e2e-identity: acquisition: adjust for the change in get_trust_anchors signature
istankovic
committed
chore: e2e-identity: make restore_pki_env always return some inner PKI env
istankovic
committed
fear: e2e-identity: allow adding additional trust anchors
istankovic
committed
test: e2e-identity: use a more general pem::Pem type for the root CA cert
istankovic
committed
test: e2e-identity: add the root CA cert to the PKI environment
istankovic
committed