Use new CertifiedIssuer API from rcgen

Author: djc

Cargo.toml

@@ -33,7 +33,7 @@ http-body-util = "0.1.2"
 hyper = { version = "1.3.1", features = ["client", "http1", "http2"], optional = true }
 hyper-rustls = { version = "0.27.7", default-features = false, features = ["http1", "http2", "native-tokio", "tls12", "rustls-platform-verifier"], optional = true }
 hyper-util = { version = "0.1.5", features = ["client", "client-legacy", "http1", "http2", "tokio"], optional = true }
-rcgen = { version = "0.14", default-features = false, features = ["pem"], optional = true }
+rcgen = { version = "0.14.2", default-features = false, features = ["pem"], optional = true }
 ring = { version = "0.17", features = ["std"], optional = true }
 rustls = { version = "0.23", default-features = false, optional = true }
 rustls-pki-types = "1.1.0"

examples/certgen.rs

@@ -4,7 +4,7 @@
 
 use std::fs;
 
-use rcgen::{BasicConstraints, DistinguishedName, DnType, IsCa, Issuer, KeyPair};
+use rcgen::{BasicConstraints, CertifiedIssuer, DistinguishedName, DnType, IsCa, KeyPair};
 
 fn main() -> anyhow::Result<()> {
     let ca_key = KeyPair::generate()?;
@@ -14,9 +14,8 @@ fn main() -> anyhow::Result<()> {
     ca_params.distinguished_name = distinguished_name;
     ca_params.is_ca = IsCa::Ca(BasicConstraints::Unconstrained);
 
-    let ca_cert = ca_params.self_signed(&ca_key)?;
-    fs::write("tests/testdata/ca.pem", ca_cert.pem())?;
-    let issuer = Issuer::new(ca_params, ca_key);
+    let issuer = CertifiedIssuer::self_signed(ca_params, ca_key)?;
+    fs::write("tests/testdata/ca.pem", issuer.as_ref().pem())?;
 
     let ee_key = KeyPair::generate()?;
     fs::write("tests/testdata/server.key", ee_key.serialize_pem())?;