chore: remove certificate validator (#1730)

* chore: remove signature validation using pub key from certificate

code

* docs

* e2e test

* integration test

Author: gsanchezgavier

Cargo.lock

@@ -2558,12 +2558,6 @@ Distributed under the following license(s):
 * MIT
 * Apache-2.0
 
-## webpki <https://crates.io/crates/webpki>
-
-Distributed under the following license(s):
-
-* ISC
-
 ## webpki-roots <https://crates.io/crates/webpki-roots>
 
 Distributed under the following license(s):

THIRD_PARTY_NOTICES.md

@@ -62,7 +62,6 @@ opentelemetry-semantic-conventions = { version = "0.31.0", features = [
 http-serde = "2.1.1"
 config = { version = "0.15.18", features = ["yaml"] }
 rustls = { version = "0.23.32", features = ["ring"] }
-webpki = { version = "0.22.4", features = ["alloc"] }
 x509-parser = "0.18.0"
 ring = "0.17.14"
 bytes = "1.10.1"
@@ -97,7 +96,6 @@ httpmock = { version = "0.8.0", features = ["proxy"] }
 serial_test = "3.2.0"
 futures = "0.3.31"
 rcgen = { version = "0.14.5", features = ["crypto"] }
-rustls-pemfile = { version = "2.2.0" }
 rstest = "0.26.1"
 tokio-stream = { version = "0.1.17", features = ["net"] }
 

agent-control/Cargo.toml

@@ -181,7 +181,7 @@ impl<'de> Deserialize<'de> for OpAMPClientConfig {
             #[serde(default)]
             fleet_id: String,
             #[serde(default)]
-            pub signature_validation: SignatureValidatorConfig,
+            signature_validation: SignatureValidatorConfig,
         }
 
         let mut intermediate_spec = IntermediateOpAMPClientConfig::deserialize(deserializer)?;

agent-control/src/agent_control/config.rs

@@ -15,9 +15,7 @@ use crate::http::config::ProxyConfig;
 use crate::opamp::auth::token_retriever::TokenRetrieverImpl;
 use crate::opamp::client_builder::PollInterval;
 use crate::opamp::http::builder::OpAMPHttpClientBuilder;
-use crate::opamp::remote_config::validators::signature::validator::{
-    SignatureValidator, build_signature_validator,
-};
+use crate::opamp::remote_config::validators::signature::validator::SignatureValidator;
 use std::error::Error;
 use std::fmt::{self, Display, Formatter};
 use std::path::PathBuf;
@@ -160,10 +158,10 @@ impl AgentControlRunner {
         let signature_validator = config
             .opamp
             .map(|fleet_config| {
-                build_signature_validator(fleet_config.signature_validation, config.proxy)
+                SignatureValidator::new(fleet_config.signature_validation, config.proxy)
             })
             .transpose()?
-            .unwrap_or(SignatureValidator::Noop);
+            .unwrap_or(SignatureValidator::new_noop());
 
         Ok(AgentControlRunner {
             http_server_runner,