Skip to content

Start cleaning up DNSSEC API#2534

Merged
djc merged 7 commits intomainfrom
signer
Oct 30, 2024
Merged

Start cleaning up DNSSEC API#2534
djc merged 7 commits intomainfrom
signer

Conversation

@djc
Copy link
Copy Markdown
Member

@djc djc commented Oct 29, 2024

As part of integrating support for aws-lc-rs (as a ring alternative) and untangling the dependency on OpenSSL in ring signing tests, I've started cleaning up the KeyPair API. As a starting point, I've moved all the API that was actually only dependent on the public key to the PublicKey trait, which seems like a more obvious way to expose the API.

It seems like the abstraction originally tried to leverage openssl traits like HasPublic and Private, but (a) it makes very little sense to have a KeyPair type that does not have access to the private key and (b) we would definitely prefer for the high-level API not to depend on OpenSSL.

Copy link
Copy Markdown
Collaborator

@marcus0x62 marcus0x62 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!

@djc djc added this pull request to the merge queue Oct 30, 2024
@djc djc removed this pull request from the merge queue due to a manual request Oct 30, 2024
@djc djc added this pull request to the merge queue Oct 30, 2024
Merged via the queue into main with commit 1fa3a5c Oct 30, 2024
@djc djc deleted the signer branch October 30, 2024 21:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants