mirrors/arti.git/crates/arti/src, branch arti-v1.2.6

arti: Use Path::try_exists() instead of Path::exists().

2024-07-30T14:20:41Z

arti: Gate the hsc subcommand behind the keymgr feature (fmt).

2024-07-10T14:25:30Z

arti: Gate the hsc subcommand behind the keymgr feature.

2024-07-10T14:25:00Z

The `arti hsc` subcommand can't run without keymgr support. Previously, it relied on `tor-keymgr/keymgr` being enabled indirectly by its dependencies, via the `experimental` feature. We need to be able to enable this feature in `arti` without relying on `experimental` (because `arti hsc` will eventually be made non-experimental). Part of #1487

tor-hscrypto: Remove unnecessary Display wrapper.

2024-07-08T17:25:59Z

I don't think we need a separate wrapper type for displaying `HsClientDescEncKey` keys in the "C Tor format" (`::`). I think this should be the canonical string representation of `HsClientDescEncKey`, so I'm removing the `display_authorized_client` function and corresponding `DisplayAuthorizedHsClientDescEncKey` wrapper type.

Merge branch 'warnings' into 'main'

2024-07-08T15:52:00Z

Fix or allow warnings that show up in beta See merge request tpo/core/arti!2244

Work around clippy::doc_lazy_continuation false positives

2024-07-08T10:36:25Z

See https://github.com/rust-lang/rust-clippy/issues/13001 I think it's OK to change this in our tree, nevertheless.

Fix markdown quoting.

2024-07-08T09:37:07Z

Fixes: warning: unclosed HTML tag `FILE` --> crates/arti/src/subcommands/hsc.rs:56:33 | 56 | /// Write the public key to . Use - to write to stdout | ^^^^^^ | = note: `#[warn(rustdoc::invalid_html_tags)]` on by default

arti: Rewrite the hsc prepare-service-discovery-key command (fmt).

2024-06-27T17:13:52Z

arti: Rewrite the hsc prepare-service-discovery-key command.

2024-06-27T17:13:52Z

The `arti hsc prepare-service-discovery-key` command is now `arti hsc get-key [--key-type=service-discovery]`. Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2212#note_3042903

arti: Add an arti hsc subcommand.

2024-06-27T17:13:52Z

This adds an experimental `arti hsc` subcommand for managing client state and keys. Currently, it only supports the `prepare-service-discovery-keys` operation described in #1281 and `doc/dev/notes/client-auth.md`. A note on terminology: I am referring to services that encrypt the second layer of their descriptor as running in "restricted discovery" mode (because they can only be discovered, i.e. have their IPT points found out, by a set of authorized clients). The corresponding client "auth" keys, being the keys that enable the client to find out the list of intro points, pow-params etc. of the service, are referred to as service "discovery keys". Alternative names I considered: * extra descriptor encryption: accurate, but overly technical. IMO, the CLI should be accessible to users who aren't familiar with the nitty-gritty of the protocol * shielded mode: good, but slightly misleading. Calling it "shielded mode" makes it sound like a universally desirable "extra protection" that should almost always be enabled (which is not the case). Seeing `shielded_mode = off` in the config might be worry operators that don't fully understand what "extra descriptor encryption" or "shielded mode" means * restricted mode: slightly inaccurate. It implies this mechanism is a good substitute for conventional service-side authentication, which it isn't (because client authorization isn't instantaneous) Closes #1281