mirrors/arti.git/crates/tor-netdoc/src/doc/hsdesc/build, branch arti-v1.1.5

netdoc, hsclient: Update remaining ed25519::SecretKey users

2023-05-18T18:18:53Z

Fortunately, these are all in experimental code. Closes #798

Use non-deprecated *Secret::random_from_rng.

2023-05-13T20:52:23Z

The `new` function is deprecated in x25519-dalek 2.0.0-rc.2

Merge branch 'remove-hsdesc-todo' into 'main'

2023-04-12T16:52:59Z

Remove misleading TODO. See merge request tpo/core/arti!1130

Remove misleading TODO.

2023-04-11T18:44:50Z

The `superencrypted` blob is, in fact, followed by a newline. See [core/torspec!122]. [core/torspec!122]: https://gitlab.torproject.org/tpo/core/torspec/-/merge_requests/122 Signed-off-by: Gabriela Moldovan

tor-netdoc: Tidy up and fix some broken intra-doc links

2023-04-11T18:31:10Z

1. Abbreviate the link text, and don't have it contain `crate` which is not really great in docs. 2. Use `super::` for the link target, to find the right thing. (`crate` doesn't seem to work in rustdoc, perhaps deliberately, although the error messages are ridiculous and claim the nonexistence of intermediate modules.) 3. Wrap the lines a bit more.

tor-netdoc: Expose test data under new "testing" feature flag

2023-04-05T10:02:36Z

Generate a new KP_hss_desc_enc keypair for each new descriptor.

2023-03-31T14:04:30Z

Previously, to build descriptors for hidden services with client auth enabled, in addition to the list of authorized clients, users of `HsDescBuilder` were required to also provide a descriptor encryption keypair and a descriptor cookie. This was potentially dangerous and/or error-prone, because the ephemeral encryption key and the descriptor cookie are expected to be randomly generated and unique for each descriptor. This change makes `ClientAuth` private to the `hsdesc::build` module and updates `HsDescBuilder` to build `ClientAuth`s internally. Users now only need to provide the list of authorized client public keys. Signed-off-by: Gabriela Moldovan

Remove unnecessary test constant.

2023-03-31T14:04:26Z

It's not really needed, it can just be generated at (test) runtime. Signed-off-by: Gabriela Moldovan

Stop requiring the caller to supply `AuthClient`s.

2023-03-31T14:04:15Z

`AuthClient`s were originally meant to represent parsed `auth-client` lines. In !1070, this struct was repurposed for representing individual authorized clients in the HS descriptor encoder. However, hidden services will likely use a list of public keys to represent the authorized clients rather than a list of `AuthClient`s, as the information from an `AuthClient` (`client_id`, `iv`, `encrypted_cookie`) likely won't be immediately available to the hidden service. This change updates the HS descriptor encoder to represent authorized clients as a list of `curve25519::PublicKey`s. As such, it is now the responsibility of the encoder to create the `client_id`, `iv`, and `encrypted_cookie` using the available keys, the unencrypted descriptor cookie, and HS subcredential. Signed-off-by: Gabriela Moldovan

Merge branch 'fix-broken-doc-links' into 'main'

2023-03-30T19:12:01Z

Fix broken doc link. See merge request tpo/core/arti!1082