glm-5.3-flash
0cd565fc28
generation 3: port server + client — the two big ports
...
port-server (src/server.rs, 614 lines):
- TlsServerConfig with ADR-004 accessors: for_noq(&self) (borrow +
inner-clone + NoqWrap via #[from]), for_tcp_tls(&self) adopted
(infallible TlsAcceptor), rustls_config(&self) adopted
- acme_handle renamed per ADR-006; the defensive Acme arm returns
TlsError::AcmeConfig (unreachable! eliminated)
- error sites remapped to typed variants (Rustls/SelfSigned/AcmeConfig)
- ACME path verbatim: DirCache + directory + contacts + resolver +
acme-tls/1 + spawned event loop (tracing lines ported), returns
immediately, detached handle
- 14 tests incl. the nine-scheme exact-list pin, ACME
spawn/return/ALPN assertion (blackhole URL — no network I/O),
no-feature AcmeConfig, for_tcp_tls/rustls_config round-trips
port-client (src/credentials.rs + src/client.rs):
- ConnectionCredentials/RemoteIdentity wholesale with load-bearing
Option-semantics docs (None = public-X.509 state, Some = pin)
- verifier selection matrix + client-auth presentation matrix
test-pinned at unit level; enable_early_data=true pinned;
root-store fallback asserted non-empty
- FingerprintPinVerifier: pin match/mismatch + raw-key signature
routing (verify_tls13_signature_with_raw_key) asserted
- resolvers/verifier made pub for the re-export block
Cargo.toml (two required deltas):
- noq feature gains aws-lc-rs: lockfile resolves noq-proto 1.3.0
where ServerConfig::with_crypto is #[cfg(any(aws-lc-rs, ring))];
ADR-003's TOML block was written against the 1.2 API. Amendment
note recorded in tasks/port-server.md for the review-impl sync
- acme = [dep:rustls-acme, dep:futures] — ADR-006 already gates
the futures dep on acme; the scaffold omitted it
lib.rs: re-export block complete (all eight modules)
Verification: cargo test 68, --all-features 75, --features noq 72,
clippy -D warnings, fmt --check, doc --no-deps (0 warnings) — green
2026-09-10 14:51:44 +00:00
glm-5.3-flash
05b3832c88
phase 2: task decomposition — 8-task port graph
...
- crate-init: skeleton, feature gates (ADR-003), TlsError (ADR-002)
- three parallel foundation ports: identity types, fingerprint, pem+signing
- port-server / port-client in parallel (each consumes the foundation;
client also carries credentials.rs per ADR-005 co-location)
- integration-suite: invariant pins + feature-matrix + seam round-trips
- review-impl: spec-conformance gate — the API-freeze point before the
alknet rewrite consumes the crate
- validated: taskgraph topo (5 generations), no cycles, critical path
len 5, risk-path 1.45; medium risk concentrated on the two broad
ports + the suite (each a diff against a fixed extraction source,
not open-ended work)
2026-09-10 06:32:44 +00:00
glm-5.3-flash