mirrors/arti.git/crates/tor-proto/src/relay/channel/handshake.rs, branch arti-v2.1.0

proto: Implement the build_certs_cell() helper

2026-02-25T18:46:39Z

It was all commented out until now that we have a final RelayIdentities. Signed-off-by: David Goulet

proto: Pass PeerAddr at the channel handshake finish for initiators

2026-02-19T20:57:29Z

Responder relay handshake requires the peer address at the very start as it sends its NETINFO right away. For initiators, we only need it during the finalization process which is when the NETINFO is sent and the Channel is created. Signed-off-by: David Goulet

proto: Use the PeerAddr accross channel handshake

2026-02-19T20:57:29Z

This is a large change but it is basically using PeerAddr in the channel builder through the channel handshake code and into the Channel itself. Signed-off-by: David Goulet

proto: Channel finish() now handles canonicity

2026-02-12T16:11:07Z

All handshake pass the NETINFO cell, the advertised addresses (if any) and the peer address in order to build the Canonicity and build the channel with it. In order to pull this off, the "my_addrs" were added to several object along the NETINFO cell. We also pass the channel method when connecting (initiator) to a relay as we need this for this canonicity build. Signed-off-by: David Goulet

proto: Introduce new relay responder channel types

2026-02-04T18:22:17Z

Add the unverified, verified, non verifiable flavor types of a responder channel. This follow on the previous commit to use the type system for stronger guarantees. Signed-off-by: David Goulet

proto: Introduce new relay initiator channel types

2026-02-04T18:22:17Z

This commit adds the Unverified and Verified flavor of a relay channel specific to an initiator. We decided to use the type system for safety and avoid patterns like: "if chan.is_initiator() {...} else {...}" This allows us also to not duplicate code between initiator and responder code. The downside is that we expose these types outside of tor-proto meaning the caller needs to feature gate the usage of these types with the "relay" flag. Small price to pay for strong guarantees with the type system. Signed-off-by: David Goulet

proto: Enforce condition with type system

2026-01-22T16:16:44Z

This commits returns either Some(AUTH_CELL, CERTS) or None. We future proof ourselves against one Some and other None even if an error check is done before. Signed-off-by: David Goulet

proto: Use the channel codec channel type

2026-01-22T16:16:44Z

Remove the channel type from Unverified and Verified channels and instead use the channel type in the underlying channel codec. The codec requires such type in order to restrict messages sets. Instead of duplicating it, this commit simply makes it that there is now only a single channel type attached to a channel structure. The resulting `struct Channel` in the end gets it copied from the channel codec as the framed_tls gets split and given to the `Reactor`. Down the line, we need a channel type attached to the `Channel` in order to know if it is a client or not and authenticated or not. Signed-off-by: David Goulet

proto: Remove Option<> around peer_ip for build_netinfo_cell()

2026-01-22T16:16:44Z

Signed-off-by: David Goulet

proto: Avoid magic hardcoded value for LINK_AUTH

2026-01-22T16:16:44Z

Instead, use the static AUTHTYPE_ED25519_SHA256_RFC5705 value which is for now the only version we support. Signed-off-by: David Goulet