mirrors/arti.git/crates/tor-netdoc/src/doc/hsdesc/build.rs, branch arti-v1.1.10mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.1.102023-10-30T14:18:02Ztor-netdoc: Use the new HandshakeType enum to represent CREATE2 HTYPEs.2023-10-30T14:18:02ZGabriela Moldovangabi@torproject.org2023-10-30T13:56:58Zurn:sha1:28a0b24db240cc24230c80732c5f4ba3a0b0d461
Representing the supported HTYPEs as `HandshakeType`s instead of `u32`s
makes it more difficult to pass in wrong/invalid values to
`HsDescBuilder::create2_formats`.
This also fixes a descriptor publisher bug spotted by @jnewsome, where
the advertised CREATE2 HTYPEs included HTYPE `1`, which is actually
supposed to be a reserved value. The publisher now only advertises the
`NTOR` HTYPE (just like C Tor).
tor-cert, tor-netdoc: Use EncodedEd25519Cert instead of Vec<u8>.2023-10-25T15:32:36ZGabriela Moldovangabi@torproject.org2023-10-25T14:54:49Zurn:sha1:36f8b29ffd4e6291168cf4b34132d83249e076a4tor-netdoc: Change return type of create_desc_sign_key_cert.2023-10-25T15:32:36ZGabriela Moldovangabi@torproject.org2023-10-25T14:30:43Zurn:sha1:aad987a47aa9584ce2ba6a16ab06710103737dc3
`Bug` wasn't necessarily the right error type here. Plus, with the new
error type adding new errors (i.e. `CertEncodeError` variants), is not a
breaking change.
tor-netdoc: Building a descriptor now only requires the public part of blinded_id.2023-10-25T15:32:36ZGabriela Moldovangabi@torproject.org2023-10-25T14:05:20Zurn:sha1:6420e5ef3460e1ff3ccb77beeb75af2c918f86d7tor-netdoc: Remove now-unused blinded_id field.2023-10-25T15:32:36ZGabriela Moldovangabi@torproject.org2023-10-24T17:09:32Zurn:sha1:3df065a6b1af6f37d65517fa82a28b3e30928c71tor-netdoc: Update HsDesc, HsDescOuter to accept the hs_desc_sign cert as an argument.2023-10-25T15:32:36ZGabriela Moldovangabi@torproject.org2023-10-23T17:56:33Zurn:sha1:7edade162c8dd5f45f8d69496084f32003357e55
This will enable us to (eventually) the load the descriptor signing key
cert from the keystore (as opposed to always recomputing it when
building the `HsDesc`).
Part of #1048
tor-netdoc: Add helper function for computing the descriptor signing key cert.2023-10-25T15:32:36ZGabriela Moldovangabi@torproject.org2023-10-24T16:35:48Zurn:sha1:35f3c1c9dc8a64b4f6f76e6e3d06b782b3d255d5 tor-hsclient, arti-client, tor-keymgr, tor-netdoc: Use a keypair instead of StaticSecret (fmt).2023-09-25T18:57:02ZGabriela Moldovangabi@torproject.org2023-09-25T16:16:23Zurn:sha1:2ed5eae770f926e7c0892e5373c30dc031732b82tor-hsclient, arti-client, tor-keymgr, tor-netdoc: Use a keypair instead of StaticSecret.2023-09-25T18:56:58ZGabriela Moldovangabi@torproject.org2023-09-25T15:28:29Zurn:sha1:5b5483aa2c8e6a9a9fbcdece1c453ad87d434fdc
Previously, when retrieving `KS_hsc_desc_enc` keys (or any other x25519
keys) from the keystore, the keymgr would discard the public part of the
key (SSH private keys contain the public part of the key too). Instead
of discarding the public key and returning just the `StaticSecret`, the
keymgr now returns a `StaticKeypair`. This makes the x25519
`EncodableKey`/`ToEncodableKey` implementation consistent with the
ed25519 one (which retrieves key pairs rather than "unescorted"
secrets).
Merge branch 'clippy' into 'main'2023-08-23T13:24:18ZIan Jacksoniwj@torproject.org2023-08-23T13:24:18Zurn:sha1:27bdc971415837c18bbfe8911266e251d853b754
clippy: Suppress needless_pass_by_value in tests
See merge request tpo/core/arti!1535