mirrors/arti.git/crates/tor-hsservice/src/req.rs, branch arti-v1.1.13 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.1.13 2024-02-01T20:02:24Z tor-hsservice: Read the keypair when deriving the subcredentials. 2024-02-01T20:02:24Z Gabriela Moldovan gabi@torproject.org 2024-02-01T11:09:28Z urn:sha1:bf12bf82545c021d93492a0f7ffd221ff86de73b We're about to stop storing `KP_hs_id` in the keystore, so in preparation, let's update the callsites that attempt to retrieve it. tor-keymgr: Remove the Slug tests (fmt). 2024-01-31T10:43:06Z Gabriela Moldovan gabi@torproject.org 2024-01-25T20:36:33Z urn:sha1:82edcffbe50fad5ad6b73c4827d6b11f30489904 tor-keymgr: Abolish ArtiPathComponent. 2024-01-31T10:43:06Z Gabriela Moldovan gabi@torproject.org 2024-01-25T17:12:39Z urn:sha1:de4115126da6156d53482a370b8e12742c0114ec `ArtiPathComponent`s are really just `Slugs`. Part of #1193, #1092 tor-hsservice: Move compute_subcredentials to RendRequestContext. 2024-01-22T11:11:27Z Gabriela Moldovan gabi@torproject.org 2024-01-22T11:08:40Z urn:sha1:5f9d5cad21ab4955d50f97d692d78f521027468a Part of #1242 tor-hsservice: Do not store the subcredentials in RendRequestContext. 2024-01-22T11:11:27Z Gabriela Moldovan gabi@torproject.org 2024-01-19T16:59:48Z urn:sha1:a57cda1143e77840e381bcd0511ba295671945d6 Previously, the subcredentials were computed in `IptEstablisher::launch` and stored in `RendRequestContext`. This caused long-running services to report errors like: ``` WARN tor_hsservice::helpers: Problem while accepting rendezvous request: error: Could not process INTRODUCE request: Introduction handshake was invalid: Circuit-extension handshake authentication failed ``` for clients using newer subcredentials than the ones the service had at the time the IPT was established. Fixes #1242 hsservice: Document circ lifetime in OpenSession. 2024-01-17T16:44:44Z Nick Mathewson nickm@torproject.org 2024-01-17T16:29:51Z urn:sha1:fb50aa5df50372ba37984ef9f9a84e08d9d158ff Closes #1224, by making it more clear that we aren't keeping a circuit alive indefinitely. hsservice: Downgrade TODO HSS comments about adding accessors. 2024-01-12T14:44:08Z Nick Mathewson nickm@torproject.org 2024-01-12T14:44:08Z urn:sha1:91c680023ade95f03e934c86fa18926fe7dffce7 We can add these accessors as needed. hsservice: Remove unused proof-of-work enum 2024-01-12T14:42:17Z Nick Mathewson nickm@torproject.org 2024-01-12T14:42:17Z urn:sha1:90ffb2d42fba557ee25b37e2152d570b62eae26c When we implement this, we'll use APIs from the equix crate. Merge remote-tracking branch 'public/hs_begin' 2023-11-16T15:46:49Z Nick Mathewson nickm@torproject.org 2023-11-16T15:46:49Z urn:sha1:e54893693021ab443fcf462365d3ba8e9b8644c6 hsserive::req: Yes, leave these functions as async and fallible. 2023-10-24T16:51:23Z Nick Mathewson nickm@torproject.org 2023-10-24T16:51:23Z urn:sha1:87c95dde0025a9d0aa7d7e81aa9d27ac1505403c Enough of them have turned out to need to be async so far that I don't think it's a great idea to commit to making any of them not-async forever. Additionally, we've written the code that uses these, and having them be async didn't seem to cause any major trouble. By the same "we may want to make these more complicated underneath" argument, we should IMO leave them as fallible.