Skip to content

refactor: coalesce overlapping local key expiry warnings#108

Merged
ebisawa merged 1 commit into
mainfrom
refactor/coalesce-local-key-expiry-warnings
May 28, 2026
Merged

refactor: coalesce overlapping local key expiry warnings#108
ebisawa merged 1 commit into
mainfrom
refactor/coalesce-local-key-expiry-warnings

Conversation

@ebisawa
Copy link
Copy Markdown
Owner

@ebisawa ebisawa commented May 28, 2026

Summary

  • Introduce LocalKeyIdentity / LocalKeyPairExpiry to track the local PrivateKey and its sibling PublicKey together; the stricter of the two expiry timestamps now drives signing enforcement and warnings.
  • Suppress duplicate expiry warnings for the artifact signer key and recipient public key whenever they match the local key, so the operator sees a single "Local key expires" line instead of two or three overlapping notices.
  • Rename the "Private key" warning label to "Local key", collapse the two-line "Expires at" body to a single line, and reuse approved signer key decisions when reviewing write recipient trust to avoid re-prompting the operator for the same key.

Test plan

  • cargo test --workspace
  • cargo clippy --workspace --all-targets
  • cargo fmt -- --check

…Identity

Introduce LocalKeyIdentity and LocalKeyPairExpiry so the local PrivateKey,
its sibling PublicKey, signer identity, and recipient identity can be
matched in one place. Use the match to suppress the duplicate "signer key
expires" and "recipient key expires" warnings whenever they reference the
same local key as the existing "Local key expires" warning, and rename
"Private key" warnings to "Local key" to reflect that both PrivateKey and
PublicKey expirations are now considered (the stricter status wins).

Also collapse warning bodies from the previous two-line "expires in N
days.\nExpires at: ..." format to a single line, and reuse approved
signer key decisions when reviewing write recipient trust so the operator
is not re-prompted for the same key.
@ebisawa ebisawa merged commit d9db3d2 into main May 28, 2026
4 checks passed
@ebisawa ebisawa deleted the refactor/coalesce-local-key-expiry-warnings branch May 28, 2026 09:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant