mirrors/arti.git/crates/arti/src/lib.rs, branch arti-v1.2.6

arti: Use Path::try_exists() instead of Path::exists().

2024-07-30T14:20:41Z

arti: Gate the hsc subcommand behind the keymgr feature (fmt).

2024-07-10T14:25:30Z

arti: Gate the hsc subcommand behind the keymgr feature.

2024-07-10T14:25:00Z

The `arti hsc` subcommand can't run without keymgr support. Previously, it relied on `tor-keymgr/keymgr` being enabled indirectly by its dependencies, via the `experimental` feature. We need to be able to enable this feature in `arti` without relying on `experimental` (because `arti hsc` will eventually be made non-experimental). Part of #1487

arti: Add an arti hsc subcommand.

2024-06-27T17:13:52Z

This adds an experimental `arti hsc` subcommand for managing client state and keys. Currently, it only supports the `prepare-service-discovery-keys` operation described in #1281 and `doc/dev/notes/client-auth.md`. A note on terminology: I am referring to services that encrypt the second layer of their descriptor as running in "restricted discovery" mode (because they can only be discovered, i.e. have their IPT points found out, by a set of authorized clients). The corresponding client "auth" keys, being the keys that enable the client to find out the list of intro points, pow-params etc. of the service, are referred to as service "discovery keys". Alternative names I considered: * extra descriptor encryption: accurate, but overly technical. IMO, the CLI should be accessible to users who aren't familiar with the nitty-gritty of the protocol * shielded mode: good, but slightly misleading. Calling it "shielded mode" makes it sound like a universally desirable "extra protection" that should almost always be enabled (which is not the case). Seeing `shielded_mode = off` in the config might be worry operators that don't fully understand what "extra descriptor encryption" or "shielded mode" means * restricted mode: slightly inaccurate. It implies this mechanism is a good substitute for conventional service-side authentication, which it isn't (because client authorization isn't instantaneous) Closes #1281

arti: wait a short while on startup if lockfiles are unavailable.

2024-06-24T12:41:09Z

arti: Add a TODO about a possible refactoring.

2024-06-17T18:15:04Z

I propose we move each subcommand implementation to a `subcommand` submodule.

arti: Move arti hss subcommand implementation to separate module.

2024-06-17T18:14:31Z

This addresses a TODO.

relay: Add relay cargo feature flag and subcommand

2024-06-11T19:42:50Z

Add the optional non default feature flag "relay" that will be used to enable relay support of arti. This commit also adds the "relay" subcommand to arti binary conditionnal on the feature flag in order to have a place holder starting point. Signed-off-by: David Goulet

Re-run maint/add_warning.

2024-05-06T13:31:35Z

This commit is automatically generated.

Upgrade to futures-rustls 0.26.0, rustls 0.23.5.

2024-04-22T15:25:45Z

The rustls upgrade will solve #1377 and CVE-2024-32650. Note that we've had to patch our RustlsProvider impl a bit in order to keep the tests passing. See comments. Closes #1377.