mirrors/arti.git/crates/tor-hsservice/src/publish/descriptor.rs, branch arti-v1.4.4

tor-hsservice: Refactor PoW error handling.

2025-05-27T18:05:01Z

This adds a error type for internal errors, and in error cases where we previously panicked, returns a Result instead. The publisher then simply doesn't publish the pow_params line and warns the user.

tor-hsservice: Initial parts of PowManager.

2025-05-27T17:51:27Z

This adds PowManager, as described in doc/dev/notes/service-side-pow.md, hooks it into IptManager and Publisher, and adds code to publish and rotate seeds, and to keep a updated list of Verifier instances for currently active seeds.

Use an EntropicRng trait to enforce key generation rules.

2025-03-24T19:11:48Z

We want to require that whenever we generate a key that's persistent (stored in KeyMgr), it's going to be made from a stronger-than-usual Rng. This trait helps us enforce that. We also add a FakeEntropicRng struct to use for testing. Note that this turned up a case that we'd missed, which required an internal change in tor-hsservice.

tor-hsservice: Remove the anonymity setting from the config.

2024-09-12T10:42:36Z

As mentioned in #727, this is not supported yet.

Merge branch 'publisher-svc-status' into 'main'

2024-09-10T13:29:21Z

tor-hsservice: Improve descriptor publisher status reporting Closes #1216 and #1572 See merge request tpo/core/arti!2397

tor-hsservice: Validate the authorized clients before publishing.

2024-09-09T17:26:37Z

This enables us to report a "broken" service status if restricted discovery is enabled but the authorized_clients list is empty.

tor-hsservice: Store the authorized_clients in the mutable state of the reactor.

2024-09-09T17:26:37Z

Previously, these were stored in the immutable state behind a mutex, but since they're not really immutable (we update them if the config changes), it makes more sense to put them in `State`.

tor_hsservice use get:: rather than get::

2024-09-09T16:08:11Z

There are three places where we query the KeyMgr for an `HsIdKeypair` but all we really need is the public part. This commit changes those three callsites to instead use `get::`. This relies on the previous commit, which makes sure that a request for an `HsIdKey` will always succeed if the keystore has a `HsIdKeypair` with the same service nickname.

tor-hsservice: Use OnionServiceConfigPublisherView in the publisher.

2024-08-21T18:54:53Z

Resolves the TODO prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/1603#note_2944902

tor-hsservice: Log the client nicknames the descriptor is encrypted for.

2024-08-21T18:54:53Z

Knowing the nicknames can be useful when debugging.