mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=tor-dirmgr-v0.5.1 2022-07-14T16:00:42Z 2022-07-14T16:00:42Z Nick Mathewson nickm@torproject.org 2022-07-14T16:00:42Z urn:sha1:9d3beb34a3b82010eac2515ab5057a5f98a8f656 This does not require a change in any other crate, since the change here does not affect tor-dirmgr's APIs. 2022-07-08T13:25:29Z Nick Mathewson nickm@torproject.org 2022-07-08T13:25:29Z urn:sha1:033a05a9afd7a3408d117fb651a79cf5efab8b6b Implement functionality to construct signed Ed25519 certs. Closes #511 See merge request tpo/core/arti!611 2022-07-06T17:20:43Z eta tor@eta.st 2022-07-06T17:20:43Z urn:sha1:0537e88d805893a82f231e90149015876bd5c57e tor-persist: Big refactoring on Error type. See merge request tpo/core/arti!614 2022-07-06T15:47:17Z Nick Mathewson nickm@torproject.org 2022-07-05T14:28:18Z urn:sha1:853aed685983a83e97c273f2135d23f09ff2bef0 Every error now has an action (what we were trying to do), a resource (what we were trying to do it to), and a source (what problem we encountered). Initially I tried to add "action" and "resource" fields to error variants individually, but that led to a combinatorial explosion. Part of #323. 2022-07-06T15:11:04Z Nick Mathewson nickm@torproject.org 2022-06-29T16:48:22Z urn:sha1:48e44b0140f80991896a37f28d67d52419fa3af6 This is behind a feature flag, since it isn't needed for pure clients: only onion services and relays need this. I've named the object that constructs these certs `Ed25519CertConstructor` because it doesn't follow the builder pattern exactly: mainly because you can't get an Ed25519Cert out of it. _That_ part is necessary because we require that an Ed25519Cert should only exist if the certificate was found to be well-signed with the right public key. Closes #511. 2022-07-06T14:42:26Z Ian Jackson iwj@torproject.org 2022-07-06T14:42:26Z urn:sha1:6878e3a2d4aaf6bf4cbc1493116becad29e0e5a2 Update `rsa` dependency (and use `x25519-dalek` prerelease) Closes #448 See merge request tpo/core/arti!612 2022-07-06T13:57:45Z eta tor@eta.st 2022-07-05T10:57:10Z urn:sha1:c2e2da5dc35b2e0aa4cc17865ec4d14c725558c7 - arti#448 and arti!607 highlight an issue with upgrading `rsa`: namely, the `x25519-dalek` version previously used has a hard dependency on `zeroize` 1.3, which creates a dependency conflict. - However, `x25519-dalek` version `2.0.0-pre.1` relaxes this dependency. Reviewing the changelogs, it doesn't look like that version is substantially different from the current one at all, so it should be safe to use despite the "prerelease" tag. - The new `x25519-dalek` version also bumps `rand_core`, which means we don't have to use the RNG compat wrapper in `tor-llcrypto` as much. closes arti#448 2022-07-06T11:04:23Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-07-05T14:45:03Z urn:sha1:8f63c07b5fd7df41533c99d46231404840aa715b 2022-07-05T16:52:28Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-07-05T16:52:28Z urn:sha1:a032137cad94f8ec30b9e907a9f1a410100111ff This fixes a complaint from cargo audit about https://rustsec.org/advisories/RUSTSEC-2022-0032 in openssl. 2022-06-28T04:10:58Z Arturo Marquez arturomf94@gmail.com 2022-06-28T04:10:58Z urn:sha1:af4970ec1f32c43c9170f400e40678e1ce8e24bf This new release checks for invalid symbols in non-padded inputs for decoding. Therefore, we can get rid of the logic implemented in `https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/600`