myna-gui/Cargo.toml at main · sdy623/myna-gui · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
[workspace]
resolver = "3"
members = ["src-tauri"]

[workspace.package]
version = "0.9.0"
edition = "2024"
rust-version = "1.92"
license = "MIT"
repository = "https://github.com/sdy623/myna-gui"
homepage = "https://github.com/sdy623/myna-gui"
authors = ["sdy623"]

[package]
name = "myna-sign"
description = "JPKI card inspection and signing tools with a lightweight bilingual desktop GUI."
version.workspace = true
edition.workspace = true
rust-version.workspace = true
license.workspace = true
repository.workspace = true
homepage.workspace = true
authors.workspace = true
readme = "README.md"
default-run = "myna-sign"

[[bin]]
name = "myna-sign"
path = "src/bin/cli.rs"

[dependencies]
# Certificate parsing and J-LIS trust anchors are used by verification; PC/SC is used only by
# `card`, but keeping both in this package gives the CLI and desktop app one shared card layer.
myna-card = { version = "3.3", default-features = false, features = ["pcsc", "verify"] }
pcsc = "2.9"

thiserror = "2"
sha2 = "0.10"
rsa = "0.9"
p256 = "0.13"
p384 = "0.13"
p521 = "0.13"
signature = "2"
zeroize = { version = "1.9", features = ["zeroize_derive"] }
serde = { version = "1", features = ["derive"] }
serde_json = "1"
hex = "0.4"
rand = "0.8"
webpki-roots = "1.0"
cmpv2 = "0.2"
anyhow = "1"
ureq = { version = "3.4", default-features = false, features = ["rustls"], optional = true }
base64 = "0.23"
clap = { version = "4", features = ["derive"] }
rpassword = "7"

# CMS and x509-tsp still use the `der` 0.7 / `x509-cert` 0.2 generation. myna-card uses
# x509-cert 0.3; only encoded DER crosses that boundary.
der = { version = "0.7", features = ["derive", "oid"] }
spki = "0.7"
x509-cert = "0.2"
cms = { version = "0.2", features = ["builder"] }
x509-tsp = "0.1"
lopdf = { version = "0.44", default-features = false }
image = { version = "0.25", default-features = false, features = ["png", "jpeg"] }
hayro-jpeg2000 = { version = "0.4", default-features = false, features = ["image"] }
ab_glyph = "0.2"

sequoia-openpgp = { version = "2.4", default-features = false, features = [
    "crypto-rust",
    "allow-experimental-crypto",
    "allow-variable-time-crypto",
] }

[features]
# The CLI exposes `--soft-key`, so its software signer is part of the root package's normal build.
# The desktop member disables root defaults and enables only the timestamp transport it uses.
default = ["soft-signer", "tsa-http"]
soft-signer = ["x509-cert/builder"]
tsa-http = ["dep:ureq"]

[profile.release]
strip = true