x509-cert: use SCT OIDs from const-oid (#1288)

Also adds an entry for the `const-oid` v0.9.6 release to CHANGELOG.md

const-oid/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 0.9.6 (2023-12-15)
+### Added
+- RFC6962 (Certificate Transparency) OIDs ([#1134])
+
+[#1134]: https://github.com/RustCrypto/formats/pull/1134
+
 ## 0.9.5 (2023-08-02)
 ### Added
 - RFC8410 (curve25519) OIDs ([#867])

x509-cert/Cargo.toml

@@ -15,7 +15,7 @@ edition = "2021"
 rust-version = "1.65"
 
 [dependencies]
-const-oid = { version = "0.9.3", features = ["db"] }
+const-oid = { version = "0.9.6", features = ["db"] }
 der = { version = "0.7.6", features = ["alloc", "derive", "flagset", "oid"] }
 spki = { version = "0.7.3", features = ["alloc"] }
 

x509-cert/src/ext/pkix/sct.rs

@@ -6,7 +6,7 @@
 #![cfg(feature = "sct")]
 
 use alloc::{format, vec::Vec};
-use const_oid::{AssociatedOid, ObjectIdentifier};
+use const_oid::{db::rfc6962::CT_PRECERT_SCTS, AssociatedOid, ObjectIdentifier};
 use der::asn1::OctetString;
 use tls_codec::{
     DeserializeBytes, SerializeBytes, TlsByteVecU16, TlsDeserializeBytes, TlsSerializeBytes,
@@ -23,10 +23,6 @@ use tls_codec::{
 #[derive(Debug, PartialEq)]
 pub struct SignedCertificateTimestampList(OctetString);
 
-//TODO: Remove this and use const-oid's rfc6962::CT_PRECERT_SCTS once a const-oid version
-// containing it is published
-const CT_PRECERT_SCTS: ObjectIdentifier = ObjectIdentifier::new_unwrap("1.3.6.1.4.1.11129.2.4.2");
-
 impl AssociatedOid for SignedCertificateTimestampList {
     const OID: ObjectIdentifier = CT_PRECERT_SCTS;
 }