mirrors/arti.git/crates/tor-netdoc/src/doc/hsdesc/inner.rs, branch arti-v1.1.5

Replace usage of KeyUnknownCert::check_key.

2023-05-16T21:53:15Z

netdoc: Rename `ParseError{Kind, Source}` to `NetdocError{Kind, Source}`.

2023-05-10T14:52:28Z

`ParseErrorSource` was originally meant to represent a parsing error, this enum has since gained some variants that aren't really parsing related (`Signature`, `CertSignature`, `UntimelyDescriptor`). Since this error type is now used for general-purpose netdoc errors, let's rename `ParseError{Kind, Source}` to `NetdocError{Kind, Source}`. Signed-off-by: Gabriela Moldovan

tor-netdoc: Expose test data under new "testing" feature flag

2023-04-05T10:02:36Z

tor-netdoc: Fix feature builds

2023-04-05T10:02:33Z

Fixes cargo +stable test --locked --offline F -p tor-netdoc cargo +stable clippy -p tor-netdoc F --all-targets for values of F including --all-features --features=hs-client --features=hs-common --features=hs-service (nothing)

Add builder for encoding hidden service descriptors.

2023-03-24T18:57:49Z

This introduces the `NetdocBuilder` trait described in `netdoc-builder.md` and a new `tor-netdoc::doc::hsdesc::build` module, which exports the `HsDescBuilder`. Hidden services will use `HsDescBuilder` to build and encode hidden service descriptors. There are several TODOs in the code that I'm planning to address separately. Partially addresses #745. Signed-off-by: Gabriela Moldovan

tor-netdoc: Validate inner certs in HsDesc

2023-03-01T14:48:51Z

This makes our implementation behave the same as the C tor implementation, by validating all of the expiration and signatures on the certificates in the inner document. (It is still not semantically necessary to check these certs: the document in which they appear is already signed by the key with which they are allegedly signed.) Closes #744

netdoc: Remove a TODO hs comment.

2023-02-17T20:06:09Z

It said to check whether C enforces an absence of extraneous bytes at the end of the link specifiers. It does, in `hs_desc.c:decode_link_specifiers()`, where it says: ``` if (link_specifier_list_parse(&specs, decoded, (size_t) decoded_len) < decoded_len) { goto err; } ``` The comparison with "decoded_len" checks whether all the bytes were decoded.

tor-netdoc: Run rustfmt (separately from the refactoring)

2023-02-15T17:17:01Z

tor-netdoc: Remove many needless calls to .iter() and .into_iter()

2023-02-15T17:17:01Z

netdoc: Add a feature to expose hsdesc inner doc parsers

2023-02-14T12:44:18Z

We want to fuzz these parsers, but there's no currently way to get at the parsers for inner documents without going through a lot of encryption. (Coverage-guided fuzzers are powerful, but they can't find SHA3 preimages.)