Commit graph

24 commits

Author SHA1 Message Date
Vincent Ambo
025b143d88 Replace usage of chrono with time crate
The time crate is the underlying crate which chrono uses for its
various operations.

Unfortunately, chrono is unmaintained and older versions of the time
crate have security vulnerabilites[0] which are unfixed in chrono[1].

The medallion code does not use any chrono-specific features and all
uses of it could be trivially replaced with the underlying time
structs.

Note that this change adds calls to `expect`. Where these calls are
made, the previous chrono functions also panicked internally if
out-of-range values were passed.

We noticed this issue while doing a similar refactoring in a program
that also uses medallion[2].

[0]: https://rustsec.org/advisories/RUSTSEC-2020-0071.html
[1]: https://rustsec.org/advisories/RUSTSEC-2020-0159.html
[2]: https://cl.tvl.fyi/c/depot/+/5311
2022-02-19 08:29:40 -05:00
8e78ba94f8 Move repository 2021-12-03 14:09:49 -05:00
ab5710a2c7 Update base64 dep 2021-04-20 09:25:42 -04:00
4776132e51 Migrated to anyhow and chrono from failure and time crates. 2020-06-22 11:52:53 -04:00
661552d878 Bump version 2018-11-18 10:49:52 -05:00
b312bae4c7 Fix repo link 2018-11-18 10:49:08 -05:00
7fcae534f2
Switch to failure (#6)
* Switch to failure

* Bump version
2018-11-16 17:28:01 -05:00
1b594ff60e
Add defaults for generic parameters (#5) 2018-08-05 12:03:58 -04:00
35c0178572 Version bump. 2018-03-12 09:44:06 -04:00
ccc6657083 Update deps. 2018-03-12 09:38:01 -04:00
42824a133e Update to serde 1.0 (#4)
* Try updating service to 1.0

* Strip bounds from structs

* Clean bounds from Default impl

* Remove pem files, clean up some documentation

* Add badges, categories
2017-08-10 09:39:35 -04:00
a265a703d6 Merge branch 'master' of github.com:commandline/medallion 2017-08-10 09:33:23 -04:00
f1db24606b Upgrade to Serde 1.0 (#2)
* Bump openssl
* Fix naive code that was breaking serde 1.0
2017-05-01 13:38:04 -04:00
d70d814ae3 Bump openssl 2017-04-20 13:24:00 -04:00
0aa3aa6faa Verify not before and expiration claims, if present 2017-04-05 16:33:39 -04:00
52452923d2 Implement Error, Display for Error enum 2017-03-14 14:40:52 -04:00
053327f7dd Add a few more keywords. 2017-03-14 14:26:33 -04:00
3c9fd6b13b Refactor header claims (#1)
Simplify customization, bump to 2.0.0.
2017-03-07 14:03:24 -05:00
9df2ac741e Stop using padding 2017-02-20 13:05:06 -05:00
d124a812cb Update version 2017-02-17 12:55:07 -05:00
b33e543341 Fix home page link. 2017-02-15 15:50:33 -05:00
e24df1568d More info/config for Travis 2017-02-15 15:42:06 -05:00
91a1f88256 Release 1 2017-02-15 13:54:39 -05:00
29ad0d721d Initial re-factor 2017-02-13 18:40:07 -05:00