mirrors/arti.git/tests/shadow/shadow.data.template, branch ios-sqlite-hacksmirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=ios-sqlite-hacks2023-09-12T15:58:29Ztor-keymgr: Fix typo in key names.2023-09-12T15:58:29ZGabriela Moldovangabi@torproject.org2023-09-12T15:58:29Zurn:sha1:d8ead902fcd7cd80905d8acd5299c3865bb6b0ab
The secret keys are prefixed with `KS`, not `KP`.
tor-keymgr: Remove redundant _private suffix from key extension.2023-09-12T15:56:15ZGabriela Moldovangabi@torproject.org2023-09-12T15:56:15Zurn:sha1:83c69cd9cba152babc7ddac86b58897f44035b14
The privateness of the keys is encoded in their name.
keymgr: Do not expect x25519 keys to be stored as ed25519 ssh keys.2023-08-16T09:43:28ZGabriela Moldovangabi@torproject.org2023-07-25T10:51:34Zurn:sha1:17d965e8941397b8c362d88df8c90e6a2632bd52
Previously, the Arti key store would store x25519 secret keys as ed25519
OpenSSH keys, which it would convert to x25519 upon loading (using the
conversion function added in !1297 (merged)). This approach isn't good
enough though: most people will probably want to bring their existing
x25519 keys, and in order to store those in OpenSSH format, we'd need
convert them to ed25519, which is impossible (because the secret part of
an x25519 key contains a SHA512'd secret, whereas the corresponding,
"un-expanded", ed25519 secret key contains the secret itself rather than
the SHA).
Now that `ssh-key` has support for ssh keys with [custom algorithm
names], we can store x25519 in OpenSSH format directly. This commit
changes the storage format used by the keymgr for x25519 client auth
keys (from ed25519-ssh to our own custom key type with an algorithm name
of `"x25519@torproject.org"`).
Closes #936
[custom algorithm names]: https://github.com/RustCrypto/SSH/pull/136
CI: Add client auth integration test.2023-07-12T15:36:11ZGabriela Moldovangabi@torproject.org2023-07-10T18:42:28Zurn:sha1:24501fdf0e4e4588b84d2ffd94e8288394ca7acdarticlient-onion: don't filter onion addresses2023-07-03T19:15:23ZJim Newsomejnewsome@torproject.org2023-07-03T17:59:24Zurn:sha1:3eda3a7936ab8cbaefd2f89bd33f920b0e2bcf09Dedupe arti configs and match TestingTorNetworks HS config2023-07-03T19:15:23ZJim Newsomejnewsome@torproject.org2023-07-03T17:04:15Zurn:sha1:3b01f3ba61549b5a769cf8fbc46afc449da595d7shadow test: enable arti's `log_sensitive_information` option2023-07-03T17:49:14ZJim Newsomejnewsome@torproject.org2023-06-22T22:24:47Zurn:sha1:3dc90f03ecf3b8fca5769eac5443ef836df0c7dfshadow test: add 2 more relays2023-07-03T17:49:14ZJim Newsomejnewsome@torproject.org2023-06-22T20:57:03Zurn:sha1:1baa1193ceca7c830e75a4ae18b78e8f4a97d368
Without this, the onion client was failing to find a guard.
We recently made this change in shadow's "tor minimal" test as well.
shadow test: add and validate arti onion client2023-07-03T17:49:14ZJim Newsomejnewsome@torproject.org2023-06-22T20:23:12Zurn:sha1:9c3bb8dcbb11c7ba5fb3ebe6340974f220c51876shadow test: add onion server2023-07-03T17:49:14ZJim Newsomejnewsome@torproject.org2023-06-22T20:07:01Zurn:sha1:e850654afb9c212d3722bf84997cf84a89390696