mirrors/arti.git/crates/tor-proto/src/relay/channel.rs, branch arti-v2.2.0

Fix typos

2026-03-24T16:04:08Z

Typos found with codespell

Merge branch 'build_certs_refactor' into 'main'

2026-03-23T14:33:56Z

cell, proto, cert: Simplify CERTS cell building. See merge request tpo/core/arti!3795

proto: Check the AUTHENTICATE auth type that we support it

2026-03-19T20:31:09Z

As a responder, we should check the AUTHENTICATE auth type and make sure we support it. We were not doing that, we were simply putting in our max version. Signed-off-by: David Goulet

tor-proto: get SLOG/CLOG outside of `ChannelAuthenticationData`

2026-03-19T20:31:09Z

proto: Responder channel properly validates the AUTHENTICATE cell

2026-03-19T20:31:09Z

It is now validated against the received KP_link_ed of the initiator peer and we compare only the section of the AUTHENTICATE cell that we can compare (minus random bytes and sig). Signed-off-by: David Goulet

proto: Add specialized build functions for ChannelAuthenticationData

2026-03-19T20:31:09Z

The initiator and responder are quite different. Building an AUTHENTICATE cell is delicate and so this change differenticates clearly between the two. This allows us to remove the peer_cert_digest from an UnverifiedChannel which is only something that makes sense for an initiator. Signed-off-by: David Goulet

proto: Add the verify_link_auth_cert() helper

2026-03-19T20:31:08Z

The responder channel will soon use it. Signed-off-by: David Goulet

proto: Use RelayIds in a VerifiedChannel

2026-03-19T20:31:08Z

In order to pull this off, make UnverifiedChannel::check_relay_identities() to return a RelayIds that it builds after checking if they match the peer we were expecting. This part is moved in this commit so once check_relay_identities() returns, we are certain of the relay identity validity on both "it identified properly" and "it is the right expected relay". This makes it that the check_relay_identities() returns the RelayIds, the signing key and the RSA id digest (which is needed for authentication later). Signed-off-by: David Goulet

cell, proto, cert: Simplify CERTS cell building.

2026-03-19T15:43:38Z

Formerly we required the caller for push_cert_body to specify the type of the cert that they were pushing. But in nearly every case, the certificate object that the caller is holding knows what its own type is! This makes the tor_proto build_certs_cell function a bit less error-prone, since we don't have to worry about mismatch.

proto: Make channel PeerAddr sensitive

2026-03-03T15:51:33Z

Only the R2R channel that the PeerAddr becomes unsensitive. The rest, we keep it sensitive as it can be a client or a client's guard/bridge. Signed-off-by: David Goulet