mirrors/arti.git/crates/tor-netdoc/src/doc/hsdesc/outer.rs, branch arti-v1.1.3

Add builder for encoding hidden service descriptors.

2023-03-24T18:57:49Z

This introduces the `NetdocBuilder` trait described in `netdoc-builder.md` and a new `tor-netdoc::doc::hsdesc::build` module, which exports the `HsDescBuilder`. Hidden services will use `HsDescBuilder` to build and encode hidden service descriptors. There are several TODOs in the code that I'm planning to address separately. Partially addresses #745. Signed-off-by: Gabriela Moldovan

Turn two blocking TODOs in hsdesc into "TODO HS"

2023-03-21T13:08:14Z

TODO HS is blocking for HS release, but not for CI.

tor-netdoc: Clarify that we must indeed check cert expiration.

2023-03-01T14:49:17Z

tor-netdoc: Validate inner certs in HsDesc

2023-03-01T14:48:51Z

This makes our implementation behave the same as the C tor implementation, by validating all of the expiration and signatures on the certificates in the inner document. (It is still not semantically necessary to check these certs: the document in which they appear is already signed by the key with which they are allegedly signed.) Closes #744

tor-netdoc: Remove many needless calls to .iter() and .into_iter()

2023-02-15T17:17:01Z

netdoc: Add a feature to expose hsdesc inner doc parsers

2023-02-14T12:44:18Z

We want to fuzz these parsers, but there's no currently way to get at the parsers for inner documents without going through a lot of encryption. (Coverage-guided fuzzers are powerful, but they can't find SHA3 preimages.)

hsdesc: Use an IntegerMinutes to hold lifetime.

2023-02-08T18:33:07Z

netdoc: Fix most "TODO HS rename" comments

2023-02-08T18:23:21Z

netdoc::hsdesc: Distinguish layer from document.

2023-02-08T18:16:44Z

netdoc::hsdesc: Rename "layer" modules.

2023-02-08T18:08:57Z