mirrors/arti.git/tests/shadow, branch arti-v1.1.10 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.1.10 2023-10-13T17:11:28Z tor-keymgr: Encode whether the key is public or private in the file extension. 2023-10-13T17:11:28Z Gabriela Moldovan gabi@torproject.org 2023-10-13T11:14:56Z urn:sha1:3b2f1b838b0113effb98852a750db90ac7e20262 There are 2 reasons to make this change: * because having the word `private` in the extension will make it more difficult to accidentally misuse or misplace a private key (see https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/1618#note_2947461) * because `Keystore`s will soon grow a `list()` function returning all `(ArtiPath, KeyType)`s in the keystore, and in order for `ArtiNativeKeystore` to implement this function, it will need to be able to reverse the `KeyType -> file extension` mapping (if two different `KeyType`s are mapped to the same extension, `ArtiNativeKeystore`s won't be able to reverse the mapping) tor-keymgr: Fix typo in key names. 2023-09-12T15:58:29Z Gabriela Moldovan gabi@torproject.org 2023-09-12T15:58:29Z urn:sha1:d8ead902fcd7cd80905d8acd5299c3865bb6b0ab The secret keys are prefixed with `KS`, not `KP`. tor-keymgr: Remove redundant _private suffix from key extension. 2023-09-12T15:56:15Z Gabriela Moldovan gabi@torproject.org 2023-09-12T15:56:15Z urn:sha1:83c69cd9cba152babc7ddac86b58897f44035b14 The privateness of the keys is encoded in their name. keymgr: Do not expect x25519 keys to be stored as ed25519 ssh keys. 2023-08-16T09:43:28Z Gabriela Moldovan gabi@torproject.org 2023-07-25T10:51:34Z urn:sha1:17d965e8941397b8c362d88df8c90e6a2632bd52 Previously, the Arti key store would store x25519 secret keys as ed25519 OpenSSH keys, which it would convert to x25519 upon loading (using the conversion function added in !1297 (merged)). This approach isn't good enough though: most people will probably want to bring their existing x25519 keys, and in order to store those in OpenSSH format, we'd need convert them to ed25519, which is impossible (because the secret part of an x25519 key contains a SHA512'd secret, whereas the corresponding, "un-expanded", ed25519 secret key contains the secret itself rather than the SHA). Now that `ssh-key` has support for ssh keys with [custom algorithm names], we can store x25519 in OpenSSH format directly. This commit changes the storage format used by the keymgr for x25519 client auth keys (from ed25519-ssh to our own custom key type with an algorithm name of `"x25519@torproject.org"`). Closes #936 [custom algorithm names]: https://github.com/RustCrypto/SSH/pull/136 arti-client: Use the config struct from tor-keymgr. 2023-07-13T11:29:57Z Gabriela Moldovan gabi@torproject.org 2023-07-12T18:07:55Z urn:sha1:0260405603c41ae88486996868ee1ebe2fa8615a CI: Reduce the success threshold for the HS client integration tests. 2023-07-12T16:11:56Z Gabriela Moldovan gabi@torproject.org 2023-07-12T15:42:59Z urn:sha1:d684073a31bba2685c74758dad978eb7121bbd3e Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/1399#note_2921505 CI: Add client auth integration test. 2023-07-12T15:36:11Z Gabriela Moldovan gabi@torproject.org 2023-07-10T18:42:28Z urn:sha1:24501fdf0e4e4588b84d2ffd94e8288394ca7acd articlient-onion: don't filter onion addresses 2023-07-03T19:15:23Z Jim Newsome jnewsome@torproject.org 2023-07-03T17:59:24Z urn:sha1:3eda3a7936ab8cbaefd2f89bd33f920b0e2bcf09 Dedupe arti configs and match TestingTorNetworks HS config 2023-07-03T19:15:23Z Jim Newsome jnewsome@torproject.org 2023-07-03T17:04:15Z urn:sha1:3b01f3ba61549b5a769cf8fbc46afc449da595d7 shadow test: disable trace-level logging 2023-07-03T17:49:14Z Jim Newsome jnewsome@torproject.org 2023-06-26T19:42:40Z urn:sha1:2b895f4de3c31e1e2bbbbb7c61adf3839016d61e Some hosts were configured to log at trace level instead of the global default (debug level). This was resulting in quite large shadow log output.