v0.24.9_hotfix2

src/acme.rs

@@ -916,7 +916,7 @@ impl Manager {
             .await
             .map_err(|_| ApiError(StatusCode::CONFLICT, "acme.secret_missing".into()))?;
             request["credential_ini_b64"] = Value::String(
-                base64::engine::general_purpose::STANDARD.encode(credential.as_ref())
+                base64::engine::general_purpose::STANDARD.encode(credential.as_slice())
             );
         }
         let raw = Zeroizing::new(request.to_string());

src/backup.rs

@@ -367,7 +367,7 @@ fn seal_master_key(master: &[u8], backup_key: &[u8]) -> Result<Vec<u8>> {
         .seal_in_place_append_tag(
             Nonce::assume_unique_for_key(nonce_bytes),
             Aad::from(KEY_AAD),
-            encrypted.as_mut(),
+            &mut *encrypted,
         )
         .map_err(|_| anyhow::anyhow!("could not wrap secret store key"))?;
     let mut output = Vec::with_capacity(4 + 12 + encrypted.len());

src/secret_store.rs

@@ -1,6 +1,6 @@
 //! Central encrypted secret storage for provider/ACME credentials.
 //! Plaintext exists only for the duration of an explicit read/write operation.
-use anyhow::{bail, ensure, Context, Result};
+use anyhow::{ensure, Context, Result};
 use rand::{rngs::OsRng, RngCore};
 use ring::aead::{Aad, LessSafeKey, Nonce, UnboundKey, AES_256_GCM};
 use serde::Serialize;
@@ -170,7 +170,7 @@ pub async fn put(
         .seal_in_place_append_tag(
             Nonce::assume_unique_for_key(nonce),
             Aad::from(aad(secret_id, provider)),
-            ciphertext.as_mut(),
+            &mut *ciphertext,
         )
         .map_err(|_| anyhow::anyhow!("secret encryption failed"))?;
     let now = crate::auth::now();