mirrors/arti.git/crates/tor-hsservice/src/publish/descriptor.rs, branch arti-v1.6.0mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.6.02025-08-13T18:30:37Ztor-hsservice: Pass Rng into PoW code where possible.2025-08-13T18:30:37ZWesley Aptekar-Casselsme@wesleyac.com2025-08-04T19:26:47Zurn:sha1:9795358e42b1de9e1f0bd54195da279ba14a29dftor-hsservice: Implement enable_pow option.2025-08-13T18:30:34ZWesley Aptekar-Casselsme@wesleyac.com2025-07-29T15:33:30Zurn:sha1:ba0c417801d1f50e51f9f1198776ea79f852b20f
This does not currently allow this option to be changed at runtime,
although the code is structured so that allowing it to be changed at
runtime won't be too hard. This is tracked by #2082.
netdoc, hsservice: Respect maximum descriptor sizes2025-07-10T13:41:48ZNick Mathewsonnickm@torproject.org2025-06-24T15:44:57Zurn:sha1:1df1014e9d52ae1c848f97daadfac4d7e1c61d36
It would be better to take a more sophisticated approach;
see #2048.
tor-hsservice: Refactor PoW error handling.2025-05-27T18:05:01ZWesley Aptekar-Casselsme@wesleyac.com2025-05-06T20:45:20Zurn:sha1:f957b396065e5d77bfd942fb2e9fd88e0f646680
This adds a error type for internal errors, and in error cases where we
previously panicked, returns a Result instead. The publisher then simply
doesn't publish the pow_params line and warns the user.
tor-hsservice: Initial parts of PowManager.2025-05-27T17:51:27ZWesley Aptekar-Casselsme@wesleyac.com2025-01-08T18:07:33Zurn:sha1:c1402316fa8771e027fa2743664f3f137c764c13
This adds PowManager, as described in doc/dev/notes/service-side-pow.md,
hooks it into IptManager and Publisher, and adds code to publish and
rotate seeds, and to keep a updated list of Verifier instances for
currently active seeds.
Use an EntropicRng trait to enforce key generation rules.2025-03-24T19:11:48ZNick Mathewsonnickm@torproject.org2025-03-20T15:09:08Zurn:sha1:8a33afe155e9bd29d9302b4b44dd5843d00866db
We want to require that whenever we generate a key that's persistent
(stored in KeyMgr), it's going to be made from a stronger-than-usual
Rng. This trait helps us enforce that.
We also add a FakeEntropicRng struct to use for testing.
Note that this turned up a case that we'd missed, which required
an internal change in tor-hsservice.
tor-hsservice: Remove the anonymity setting from the config.2024-09-12T10:42:36ZGabriela Moldovangabi@torproject.org2024-09-12T10:39:18Zurn:sha1:742dc71f53d164398d7cf2c3e13a9822f4f7071b
As mentioned in #727, this is not supported yet.
Merge branch 'publisher-svc-status' into 'main'2024-09-10T13:29:21ZDavid Gouletdgoulet@torproject.org2024-09-10T13:29:21Zurn:sha1:3f2872c18165e139fccf45a1e48855dfc5a52569
tor-hsservice: Improve descriptor publisher status reporting
Closes #1216 and #1572
See merge request tpo/core/arti!2397tor-hsservice: Validate the authorized clients before publishing.2024-09-09T17:26:37ZGabriela Moldovangabi@torproject.org2024-08-29T18:05:57Zurn:sha1:f3f6fde0defcdc2bf6e5907d488b70dc91e87325
This enables us to report a "broken" service status if restricted
discovery is enabled but the authorized_clients list is empty.
tor-hsservice: Store the authorized_clients in the mutable state of the reactor.2024-09-09T17:26:37ZGabriela Moldovangabi@torproject.org2024-08-29T17:40:21Zurn:sha1:fc9a58209bfe5574410893bc7caaafa4b797cc29
Previously, these were stored in the immutable state behind a mutex, but
since they're not really immutable (we update them if the config
changes), it makes more sense to put them in `State`.