mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v0.2.0 2022-04-01T13:15:18Z 2022-04-01T13:15:18Z Nick Mathewson nickm@torproject.org 2022-04-01T13:15:18Z urn:sha1:5b2fc118df0524144e6b2c34fdcce3d0fb692d24 Not all of these strictly need to be bumped to 0.2.0; many could go to 0.1.1 instead. But since everything at the tor-rtcompat and higher layers has had breaking API changes, it seems not so useful to distinguish. (It seems unlikely that anybody at this stage is depending on e.g. tor-protover but not arti-client.) 2022-03-23T12:24:36Z Nick Mathewson nickm@torproject.org 2022-03-14T18:33:11Z urn:sha1:0b2cf533ee5771fdb16255652837af69c316642e We now check the handshake certificates unconditionally, and only report them as _expired_ as a last resort. (Rationale: if somebody is presenting the wrong identity from a year ago, it is more interesting that they are presenting the wrong ID than it is that they are doing so with an expired cert. We also now report a different error if the certificate is expired, but its expiration is within the range of reported clock skew. (Rationale: it's helpful to distinguish this case, so that we can blame the failure on possible clock skew rather than definitely attributing it to a misbehaving relay.) Part of #405. 2022-03-04T17:35:34Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-03-04T17:31:03Z urn:sha1:055b7399f2acba4dd71777ad7d08deaec9e2a271 2022-03-01T20:38:05Z Nick Mathewson nickm@torproject.org 2022-03-01T20:38:05Z urn:sha1:83c8b11c2c08a05928bdb0390922391d13261ef2 Disable clippy::clone_on_ref_ptr See merge request tpo/core/arti!352 2022-03-01T13:59:34Z Nick Mathewson nickm@torproject.org 2022-03-01T13:59:34Z urn:sha1:e8e9791a9757a32779657c5284b380ae91ca7979 2022-03-01T13:30:53Z Nick Mathewson nickm@torproject.org 2022-03-01T13:30:53Z urn:sha1:57352226910d69433873517f1f07cfbbfee7252f 2022-02-28T14:47:25Z Nick Mathewson nickm@torproject.org 2022-02-28T14:47:25Z urn:sha1:ec25f68b9bf002034886256b18e6247b13a0018b 2022-02-28T13:27:44Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-02-28T13:27:44Z urn:sha1:8898bbb4218b4858aabe80d5b049a8a025c1c7a9 As per https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/355#note_2781816 2022-02-28T13:07:44Z Ian Jackson ijackson@chiark.greenend.org.uk 2022-02-24T18:10:08Z urn:sha1:c08a3170937c64d8cf699584867e5fe3fcc51fb6 arti-hyper wants to be able to have a kind for TLS failure. Given that arti-hyper is above arti-client, this shows that callers above arti-client might need to invent kinds for their own errors. Possibly this means we need other Other errors for other locations. If we have pluggable components we might even want OtherTorError. 2022-02-25T16:09:24Z Nick Mathewson nickm@torproject.org 2022-02-25T16:07:28Z urn:sha1:326e77c66c90ad0eb157908b1dd129df6957dc15 This is needed to make the backtrace test pass on Rust 1.53 with minimum-version libraries.