update rcgen and webpki (#13)

Author: tofay

Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "rustls-cng-crypto"
 authors = ["Tom Fay <tom@teamfay.co.uk>"]
-version = "0.1.1"
+version = "0.1.2"
 edition = "2021"
 license = "MIT"
 description = "Rustls crypto provider for CNG"
@@ -29,7 +29,7 @@ tls12 = ["rustls/tls12"]
 [dev-dependencies]
 aws-lc-rs = { version = "1.11.1", features = ["prebuilt-nasm"] }
 hex = "0.4.3"
-rcgen = { version = "0.13.1", default-features = false, features = [
+rcgen = { version = "0.14.1", default-features = false, features = [
     "crypto",
     "aws_lc_rs",
     "pem",
@@ -41,7 +41,7 @@ rustls = { version = "0.23.0", features = [
 ], default-features = false }
 rustls-pemfile = "2"
 rustls-webpki = { version = "0.103.0", default-features = false }
-webpki-roots = "0.26"
+webpki-roots = "1.0"
 wycheproof = { version = "0.6.0", default-features = false, features = [
     "aead",
     "ecdsa",

tests/server.rs

@@ -2,7 +2,7 @@
 use std::io::Write;
 use std::sync::Arc;
 
-use rcgen::SignatureAlgorithm;
+use rcgen::{Issuer, SignatureAlgorithm};
 use rustls::pki_types::{CertificateDer, PrivateKeyDer, PrivatePkcs8KeyDer};
 use rustls::server::Acceptor;
 use rustls::ServerConfig;
@@ -85,16 +85,15 @@ impl TestPki {
 
         let ca_key = rcgen::KeyPair::generate_for(alg).unwrap();
         let ca_cert = ca_params.self_signed(&ca_key).unwrap();
+        let issuer = Issuer::new(ca_params, ca_key);
 
         // Create a server end entity cert issued by the CA.
         let mut server_ee_params =
             rcgen::CertificateParams::new(vec!["localhost".to_string()]).unwrap();
         server_ee_params.is_ca = rcgen::IsCa::NoCa;
         server_ee_params.extended_key_usages = vec![rcgen::ExtendedKeyUsagePurpose::ServerAuth];
         let server_key = rcgen::KeyPair::generate_for(alg).unwrap();
-        let server_cert = server_ee_params
-            .signed_by(&server_key, &ca_cert, &ca_key)
-            .unwrap();
+        let server_cert = server_ee_params.signed_by(&server_key, &issuer).unwrap();
 
         Self {
             ca_cert: ca_cert.into(),