mirrors/arti.git/crates/tor-hsservice/src/svc/rend_handshake.rs, branch arti-v1.1.13mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.1.132024-02-01T20:51:18Ztor-hsservice: Fix typo in error message.2024-02-01T20:51:18ZGabriela Moldovangabi@torproject.org2024-02-01T11:04:48Zurn:sha1:00b1d34b6108adf9248c38999c617445c5ffa0fahss: Return summarized errorkind for RendCirc error.2024-01-23T14:49:29ZNick Mathewsonnickm@torproject.org2024-01-23T14:15:21Zurn:sha1:4553cdb89b8e94ade629ed5f7fcafebefeec5ba1tor-hsservice: Move compute_subcredentials to RendRequestContext.2024-01-22T11:11:27ZGabriela Moldovangabi@torproject.org2024-01-22T11:08:40Zurn:sha1:5f9d5cad21ab4955d50f97d692d78f521027468a
Part of #1242
tor-hsservice: Do not store the subcredentials in RendRequestContext.2024-01-22T11:11:27ZGabriela Moldovangabi@torproject.org2024-01-19T16:59:48Zurn:sha1:a57cda1143e77840e381bcd0511ba295671945d6
Previously, the subcredentials were computed in `IptEstablisher::launch`
and stored in `RendRequestContext`. This caused long-running services to
report errors like:
```
WARN tor_hsservice::helpers: Problem while accepting rendezvous request: error: Could not process INTRODUCE request: Introduction handshake was invalid: Circuit-extension handshake authentication failed
```
for clients using newer subcredentials than the ones the service had at
the time the IPT was established.
Fixes #1242
tor-hsservice: Add an error type for subcredential lookup failures.2024-01-22T11:11:12ZGabriela Moldovangabi@torproject.org2024-01-22T10:55:46Zurn:sha1:d8565206e5e9e9bad320786c36a2b6ed403dbe48
The subcredential lookup will be moved to
`IntroRequest::decrypt_from_introduce2`. The error returned on failure
is going to be `IntroRequestError::Subcredentials`.
Part of #1242
hsservice: Document circ lifetime in OpenSession.2024-01-17T16:44:44ZNick Mathewsonnickm@torproject.org2024-01-17T16:29:51Zurn:sha1:fb50aa5df50372ba37984ef9f9a84e08d9d158ff
Closes #1224, by making it more clear that we aren't keeping a
circuit alive indefinitely.
hsservice::svc: Lower "allows" to publish.rs2024-01-12T20:01:50ZNick Mathewsonnickm@torproject.org2024-01-12T20:01:50Zurn:sha1:80f5d8824c5b8177731809f05cf6e70b838fc007
See #1232 for fixing the remaining part of these.
hsservice: Move "Cleanup ErrorKind" TODOs to #1225.2024-01-12T15:09:46ZNick Mathewsonnickm@torproject.org2024-01-12T15:09:46Zurn:sha1:49972c221e6e7c9419ac337babe55d0d051df744hsservice: Convert TODO about circuit lifetimes to #12242024-01-12T15:03:44ZNick Mathewsonnickm@torproject.org2024-01-12T15:03:44Zurn:sha1:ef0574de34553cafe3993917f57b1be67515b0c3
This one is a MUST.
hsservice: Convert a "TODO" to a ticket about logic duplication2024-01-12T14:59:37ZNick Mathewsonnickm@torproject.org2024-01-12T14:59:37Zurn:sha1:15b5e7fea9513a8351618575a933e5c2193c6171
New ticket is #1223.