mirrors/arti.git/crates/tor-keymgr/src/config, branch arti-v1.2.8

tor-keymgr: Rename keystore.type to keystore.kind.

2024-09-23T18:55:23Z

In !2394 we settled on `kind`. This updates the error messages to reference the new field name.

tor-keymgr: Move keystore config under keystore.primary.

2024-09-23T18:55:23Z

The keystore settings only configure the *primary* keystore, so they should be under `keystore.primary`.

arti: Reinstate the keystore.enabled option.

2024-09-23T18:37:41Z

This is a follow-up from !2394 I want to keep the `keystore.enabled` option, because I'm planning on extending `ArtiKeystoreConfig` to support configuring secondary keystores too (currently, the only supported setting is `keystore.kind`, which configures the primary keystore). `keystore.enabled` will disable keystore use altogether (i.e. both primary and secondary). Currently, we only support configuring the "primary" (previously known as "default") keystore, which can be either "native" (the on-disk Arti keystore), or "ephemeral" (an in-memory keystore). To implement #858, we will need to support configuring additional keystores too, so we will need to move to a config of the form ```toml [storage.keystore] # Whether the keystore is enabled. #enabled = "auto" # Configure the primary keystore. [storage.keystore.primary] # The type of primary keystore to use kind = "auto" | "native" | "ephemeral" # Optionally configure C Tor keystores for arti to use. # # Note: The keystores listed here are read-only (keys are only # ever written to the primary keystore, configured in # `storage.keystore.primary`). [[storage.keystore.ctor]] # If the `kind` is `service`, this should be set to the `HiddenServiceDirectory` # of your hidden service. Arti will read `HiddenServiceDirectory/hostname` # and `HiddenServiceDirectory/private_key`. (Note: if your service is running # in restricted discovery mode, you must set the # `[[onion_services."".restricted_discovery.key_dirs]]` # to `HiddenServiceDirectory/client_keys` # # If the `kind` is `client`, this should be set to `ClientOnionAuthDir` of # your client. If Arti is configured to run as a client (i.e. if it runs in SOCKS # proxy mode), it will read the client restricted discovery keys from this path. path = "/foo/bar" # The type of keystore `path` should be interpreted as kind = "client" | "service" ``` This moves the current keystore settings to `storage.keystore.primary` in preparation for that change.

tor-keymgr: Add back ArtiKeystoreConfig::is_enabled().

2024-09-23T17:58:55Z

I am adding `is_enabled()` back because I plan to un-deprecate the `enabled` setting.

tor-keymgr: added support for specifying keystore kind to ArtiKeystoreConfig

2024-09-20T23:13:14Z

tor-keymgr: renamed ArtiNativeKeystoreConfig to ArtiKeystoreConfig

2024-09-20T23:13:14Z

arti, arti-client, tor-keymgr: Remove keystore dir configuration.

2024-02-21T14:58:46Z

Closes #1202

tor-keymgr: Abolish ArtiNativeKeystoreConfig::expand_keystore_dir.

2024-01-10T15:07:26Z

This resolves a `TODO HSS` in arti-client. Part of #1187

arti-client: use sub_builder for ArtiNativeKeystoreConfig

2023-12-13T14:04:09Z

The sub_builder pattern changes `StorageConfigBuilder` so that instead of holding an `Option`, it holds an `ArtiNativeKeystoreConfigBuilder`. This makes it a little more ergonomic to use from Rust, and lets us use defaults for the builder fields so that we can make them optional in our configuration.

keymgr: Use std::cfg instead of if_cfg.

2023-07-20T18:35:54Z