mirrors/arti.git/crates/tor-netdoc/src/doc/hsdesc/build.rs, branch arti-v1.1.7

Run maint/add_warning to actually apply new lint allows

2023-07-10T12:49:51Z

Back down x25519-dalek to 2.0.0-pre.1 from 2.0.0-rc.2

2023-06-27T17:55:24Z

========================= Notes from nickm: (This differs from pinkforest's original MR: It removes the Cargo.lock changes and the version bump on tor-llcrypto.) Minimal Cargo.lock changes from downgrade. (These are exactly those changes generated by running "build" and "test".) There are several reasons to do this: * It's best to bump all of our dalek dependencies at once to rc.3 or later, rather than the piecemeal approach we've been stuck with so far. * We don't want to do this bump right now, since there are some tricky questions about clamping we need to figure out (see #808), and we need to make sure we get them right, and we're in a distracted this week. * We _do_ need to move away from 2.0.0-rc.2 right now, since it was causing a failure in `cargo install arti`, and then it got yanked. Thanks to pinkforest for helping us out here and explaining all of this! Fixes #926. Commit-edited-by: Nick Mathewson

netdoc::doc::hsdesc changes to let us downgrade/remove allows

2023-06-16T16:24:05Z

netdoc: downgrade some TODO HS to TODO HSS.

2023-06-16T16:24:05Z

I'm using HSS for hs-service features.

netdoc, hsclient: Update remaining ed25519::SecretKey users

2023-05-18T18:18:53Z

Fortunately, these are all in experimental code. Closes #798

Use non-deprecated *Secret::random_from_rng.

2023-05-13T20:52:23Z

The `new` function is deprecated in x25519-dalek 2.0.0-rc.2

Generate a new KP_hss_desc_enc keypair for each new descriptor.

2023-03-31T14:04:30Z

Previously, to build descriptors for hidden services with client auth enabled, in addition to the list of authorized clients, users of `HsDescBuilder` were required to also provide a descriptor encryption keypair and a descriptor cookie. This was potentially dangerous and/or error-prone, because the ephemeral encryption key and the descriptor cookie are expected to be randomly generated and unique for each descriptor. This change makes `ClientAuth` private to the `hsdesc::build` module and updates `HsDescBuilder` to build `ClientAuth`s internally. Users now only need to provide the list of authorized client public keys. Signed-off-by: Gabriela Moldovan

Remove unnecessary test constant.

2023-03-31T14:04:26Z

It's not really needed, it can just be generated at (test) runtime. Signed-off-by: Gabriela Moldovan

Add an encode-decode test for descriptors with client auth.

2023-03-31T14:04:23Z

This adds a test for an `encode -> decode -> encode` flow for a hidden service descriptor with client authorization enabled. Signed-off-by: Gabriela Moldovan

Use constants instead of magic numbers.

2023-03-31T14:04:19Z

Signed-off-by: Gabriela Moldovan