mirrors/arti.git/crates/tor-rtcompat/src, branch arti-v1.4.2mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.4.22025-03-24T13:58:54ZAF_UNIX terminology: Rename two error structs2025-03-24T13:58:54ZIan Jacksonijackson@chiark.greenend.org.uk2025-03-06T15:52:03Zurn:sha1:73157920ffa84d6f1580170a0e40e5fbe3106a67
We change `NoUnixAddressSupport` to `NoAfUnixSocketSupport` because it
doesn't make much sense to talk about support for the addresses
separately from support for the sockets.
Fix AF_UNIX terminology in docs, comments, and error messages2025-03-24T13:58:54ZIan Jacksonijackson@chiark.greenend.org.uk2025-03-06T15:16:03Zurn:sha1:a60165c11c66c579d628a670de56bfcff494c1cdMerge branch 'x509-signature-yeet' into 'main'2025-03-05T13:50:08ZNick Mathewsonnickm@torproject.org2025-03-05T13:50:08Zurn:sha1:f880d8c4bea2cd82aba325b82bb68878bb769e97
Switch from x509-signature to rustls-webpki when using rustls.
Closes #1824 and #1854
See merge request tpo/core/arti!2816rustls: move provider-installer to its own function.2025-03-04T19:45:18ZNick Mathewsonnickm@torproject.org2025-03-03T15:17:33Zurn:sha1:d206e9b70ddfce0083546d4f1836129985b9abfc
We do this so that we can make sure there's a provider installed
when we run the tests.
rustls.rs: Replace x509-signature with rustls-webpki2025-03-04T19:45:18ZNick Mathewsonnickm@torproject.org2025-02-26T22:02:48Zurn:sha1:ede6d75567c1ee81812478e6137032dd568ddb91
The x509-signature crate is archived, and won't see any more
releases. Using it is tying us to ring 0.16 internally,
which means we depend on two ring versions.
Fortunately, rustls-webpki relaxes some of the earlier restrictions
from the vanilla webpki crate, which means that its certificate parser
now accepts C tor's oddball x509 certificates as valid.
With this change, we can delegate to rustls's built-in
signature-checking code, and we only have to override its
certificate validation. (We still override it with a pile of
comments about how we don't validate link certificates much.)
I've had to include a few certificates: two are for tests,
but one is needed as a placeholder, since we can't construct
a rustls certificate validator without a root cert,
even if we'll never use it.
Closes #1824.
Closes #1854.
rtcompat: Un-rename CertificateDer type.2025-03-04T19:45:18ZNick Mathewsonnickm@torproject.org2025-02-26T21:20:03Zurn:sha1:170edfe9aa912ea9f1977475d2a2a8904c62224a
(We had added this rename when rustls renamed it originally.)
tor-rtcompat: Fix grammar in doc2025-03-04T17:33:25ZIan Jacksonijackson@chiark.greenend.org.uk2025-03-04T17:28:21Zurn:sha1:34f0ede744fb3a5e1f589ddd9afb44ef8b008786
As per
https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2810#note_3168425
tor-rtcompat: Rename spawn_thread to spawn_blocking2025-03-04T17:33:25ZIan Jacksonijackson@chiark.greenend.org.uk2025-03-04T15:39:48Zurn:sha1:11049b07c419fc7544c382a98ea8366d6b468daf
Let's use Tokio terminology here.
tor-rtcompat: Give a reason in blocking_io for not using for cpu work2025-03-04T17:33:25ZIan Jacksonijackson@chiark.greenend.org.uk2025-03-04T15:36:20Zurn:sha1:c515ee88f26f6ea59980f9f3aa105737ae2291b6
As requested
https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2810#note_3167979
tor-rtcompat: Fix docs typo2025-03-04T17:33:25ZIan Jacksonijackson@chiark.greenend.org.uk2025-03-04T15:33:27Zurn:sha1:f24d0434cc79f038f4d2371ece56e6d10e4c21b9
As per
https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2810#note_3167978