Skip to content

fix(correctness): address CNG provider blockers - #10

Merged
thieman merged 3 commits into
mainfrom
thieman/fix-cng-correctness-blockers
Jun 23, 2026
Merged

fix(correctness): address CNG provider blockers#10
thieman merged 3 commits into
mainfrom
thieman/fix-cng-correctness-blockers

Conversation

@thieman

@thieman thieman commented Jun 23, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Fix TLS 1.2 ECDHE-ECDSA AES-256-GCM wiring to use the AES-256 AEAD.
  • Remove the public ShutdownHandle lifecycle footgun and leave cached CNG algorithm providers process-lifetime.
  • Make X25519 CNG capability probing fallible/non-panicking and normalize AEAD/decrypt error mapping while removing dbg! output from library error paths.

Fixes #7

Validation

  • cargo fmt -- --check
  • cargo check --target x86_64-pc-windows-msvc
  • cargo check --target x86_64-pc-windows-msvc --no-default-features
  • cargo clippy --target x86_64-pc-windows-msvc -- -D warnings
  • cargo clippy --target x86_64-pc-windows-msvc --no-default-features -- -D warnings

Notes

  • Windows runtime tests (cargo test, cargo test --doc) were not runnable from this macOS worktree. Test compilation/running that pulls dev dependencies also failed locally because the Windows cross C toolchain/SDK is unavailable (windows.h/Windows target C headers missing for aws-lc-sys), so runtime coverage should be validated by Windows CI/workstation.

@datadog-datadog-prod-us1

datadog-datadog-prod-us1 Bot commented Jun 23, 2026

Copy link
Copy Markdown

Code Quality  Code Vulnerabilities

🎉 All green!

🛠️ No new code quality issues
🛡️ No new code vulnerabilities

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: fded99b | Docs | Datadog PR Page | Give us feedback!

@thieman thieman changed the title Fix issue #7 CNG correctness blockers fix(correctness): address CNG provider blockers Jun 23, 2026
@thieman
thieman marked this pull request as ready for review June 23, 2026 18:05
@thieman
thieman requested a review from a team as a code owner June 23, 2026 18:05
@thieman
thieman merged commit a087abd into main Jun 23, 2026
10 checks passed
@thieman
thieman deleted the thieman/fix-cng-correctness-blockers branch June 23, 2026 18:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix CNG provider correctness blockers

2 participants