chore(deps): bump rcgen from 0.9.3 to 0.13.2

[dependabot]

Bumps rcgen from 0.9.3 to 0.13.2.

Release notes

Sourced from rcgen's releases.

0.13.2

Several improvements to the capabilities available when working with certificate signing requests.

What's Changed

• Clarify internal data dependencies for signing APIs by @​djc in rustls/rcgen#269
• error: feature-gate ExternalError by @​cpu in rustls/rcgen#271
• Pass extended key usage parameters when importing CertificateSigningRequestParams by @​uglyoldbob in rustls/rcgen#264
• ci: update cargo-check-external-types toolchain, fix build by @​cpu in rustls/rcgen#276
• Revert "ci: temp. pin nightly to avoid ICE" by @​cpu in rustls/rcgen#277
• Expose algorithm field on PublicKey by @​rickvanprim in rustls/rcgen#281
• Update semver-compatible dependencies by @​djc in rustls/rcgen#283
• crl: avoid markdown footnotes by @​cpu in rustls/rcgen#284
• Disable default features for aws-lc-rs by @​daxpedda in rustls/rcgen#286
• Add KeyUsage support to CSR generation by @​lvkv in rustls/rcgen#287
• Fix compilation issues of OpenSSL tests on 32-bit architectures by @​decathorpe in rustls/rcgen#290
• Enable signing without private key by @​djc in rustls/rcgen#291
• Clarify CSR signing docs by @​lvkv in rustls/rcgen#295
• ci: adjust nightly for cargo-check-external-types by @​cpu in rustls/rcgen#297
• Add PKCS#10 attributes to CSR serializer by @​lvkv in rustls/rcgen#296
• Bump codecov/codecov-action from 4 to 5 by @​dependabot in rustls/rcgen#299
• Update README.md example to match what's in lib.rs by @​ghenry in rustls/rcgen#298
• rcgen: 0.13.1 -> 0.13.2 by @​lvkv in rustls/rcgen#303

0.13.1

Fixed incorrect usage of the subject certificate's parameter's key identifier method when computing the key identifier of the issuer for the subject's authority key identifier (AKI) extension.

What's Changed

• Fix reference in changelog about RSA key generation by @​djc in rustls/rcgen#258
• Set library version for CLI crate by @​djc in rustls/rcgen#257
• cli: add more Cargo metadata by @​djc in rustls/rcgen#259
• examples: sign-leaf-with-ca uses ca key for signing end entity cert by @​markdingram in rustls/rcgen#263
• cert: use key_identifier_method of issuer for AKI by @​cpu in rustls/rcgen#262

0.13.0

Breaking changes

• The API used to create/issue key pairs, certificates, certificate signing requests (CSRs), and certificate revocation lists (CRLs) has been restructured to emphasize consistency and avoid common errors with serialization.

  For each concrete type (cert, CSR, CRL) the process is now the same:

  1. generate or load a key pair and any information about issuers required.
  2. create parameters, customizing as appropriate.
  3. call a generation fn on the parameters, providing subject key pair and issuer information and as appropriate.
  4. call serialization fns on the finalized type, obtaining DER or PEM.

  For more information, see [rcgen/docs/0.12-to-0.13.md].

• Throughout the API DER inputs are now represented using types from the Rustls rustls-pki-types crate, e.g. PrivateKeyDer, CertificateDer, CertificateSigningRequestDer. Contributed by Tudyx.

... (truncated)

Commits

• 447322c rcgen: 0.13.1 -> 0.13.2
• 12d6533 Remove extern crate example in docs.
• 72369d3 Update README.md example to match what's in lib.rs
• 1b4a355 Bump codecov/codecov-action from 4 to 5
• 331b8fd Add PKCS#10 attributes to CSR serializer
• 349ffe4 Add CertificateParams::write_extension_request_attribute for cleanup
• 57a8066 Fix: Write CSR attributes as an implicit set
• ad9b094 Fix: Don't forget to write EKUs in CSRs
• 5811e47 Fix: Don't write SANs in CSRs if none are present
• d3dea5e Add more CSR roundtrip unit tests
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign aryan9600 for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[shaneutt]

Breaking changed occured in v0.13.0, which will need manual intervention. I'll fix this as a separate PR.

/close

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[shaneutt]

#330 is the follow-up.