summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | Make TAP keys optional when parsing documents.Nick Mathewson2024-06-274-27/+107
| | | | | | | | | | | | | | | | | | | | This is the client-side part of phase 1 for proposal 350, which will eventually remove TAP completely from the Tor network.
* | | | Merge branch 'post-release' into 'main'Nick Mathewson2024-06-273-13/+84
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Release process improvements See merge request tpo/core/arti!2240
| * | | | maint/tag-arti-releaes: New scriptIan Jackson2024-06-272-4/+38
| | | | |
| * | | | Release.md: Say to run maint/update-md-linksIan Jackson2024-06-271-9/+7
| | | | | | | | | | | | | | | | | | | | Not the raw gen_md_links utility.
| * | | | maint/changelog-syntax-fiddle: New scriptIan Jackson2024-06-272-0/+39
| | | | |
* | | | | Merge branch 'arti-hsc-subcommand' into 'main'gabi-2502024-06-279-5/+299
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | arti: Add an arti hsc subcommand. Closes #1281 and #1291 See merge request tpo/core/arti!2212
| * | | | arti: Rewrite the hsc prepare-service-discovery-key command (fmt).Gabriela Moldovan2024-06-271-11/+6
| | | | |
| * | | | arti: Rewrite the hsc prepare-service-discovery-key command.Gabriela Moldovan2024-06-271-10/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The `arti hsc prepare-service-discovery-key` command is now `arti hsc get-key [--key-type=service-discovery]`. Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2212#note_3042903
| * | | | maint/check-cli-help: Don't attempt to parse wrapped help lines.Gabriela Moldovan2024-06-271-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Skip parsing the next line unless it starts with two spaces followed by a non-whitespace character. This ensures we don't accidentally try to parse a wrapped help line as a command. This enables it to parse commands with wrapping descriptions, such as ``` Usage: arti hsc [OPTIONS] <COMMAND> Commands: prepare-service-discovery-key Prepare a service discovery key for connecting to a service running in restricted discovery mode help Print this message or the help of the given subcommand(s) ```
| * | | | arti: Add an arti hsc subcommand.Gabriela Moldovan2024-06-275-2/+170
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds an experimental `arti hsc` subcommand for managing client state and keys. Currently, it only supports the `prepare-service-discovery-keys` operation described in #1281 and `doc/dev/notes/client-auth.md`. A note on terminology: I am referring to services that encrypt the second layer of their descriptor as running in "restricted discovery" mode (because they can only be discovered, i.e. have their IPT points found out, by a set of authorized clients). The corresponding client "auth" keys, being the keys that enable the client to find out the list of intro points, pow-params etc. of the service, are referred to as service "discovery keys". Alternative names I considered: * extra descriptor encryption: accurate, but overly technical. IMO, the CLI should be accessible to users who aren't familiar with the nitty-gritty of the protocol * shielded mode: good, but slightly misleading. Calling it "shielded mode" makes it sound like a universally desirable "extra protection" that should almost always be enabled (which is not the case). Seeing `shielded_mode = off` in the config might be worry operators that don't fully understand what "extra descriptor encryption" or "shielded mode" means * restricted mode: slightly inaccurate. It implies this mechanism is a good substitute for conventional service-side authentication, which it isn't (because client authorization isn't instantaneous) Closes #1281
| * | | | arti-client: Add a function for generating client authorization keys.Gabriela Moldovan2024-06-273-1/+90
| | | | | | | | | | | | | | | | | | | | Part of #1281
| * | | | tor-hscrypto: Add helper for encoding client auth keys in C Tor format.Gabriela Moldovan2024-06-271-0/+23
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | This will enable us to implement the `arti hsc` client subcommand for generating client auth keys (#1281). Closes #1291
* | | | Merge branch 'fix-cargo' into 'main'arti-v1.2.5Ian Jackson2024-06-271-1/+1
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | tor-memquota: Fix cargo categories See merge request tpo/core/arti!2239
| * | | | tor-memquota: Fix cargo categoriesIan Jackson2024-06-271-1/+1
|/ / / / | | | | | | | | | | | | | | | | | | | | See #1481. I have checked that this category exists.
* | | | Merge branch 'versions' into 'main'Ian Jackson2024-06-2745-398/+398
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Version bumps for 1.2.5 See merge request tpo/core/arti!2238
| * | | | Update arti to 1.2.5Ian Jackson2024-06-274-4/+4
| | | | | | | | | | | | | | | | | | | | cargo set-version --offline -p arti 1.2.5
| * | | | Update versions of 0.x tor-* and arti-* cratesIan Jackson2024-06-2745-394/+394
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nailing-cargo -uE set-version -p arti-client 0.20.0 nailing-cargo -uE set-version -p arti-relay 0.20.0 nailing-cargo -uE set-version -p arti-rpcserver 0.20.0 nailing-cargo -uE set-version -p tor-async-utils 0.20.0 nailing-cargo -uE set-version -p tor-basic-utils 0.20.0 nailing-cargo -uE set-version -p tor-bytes 0.20.0 nailing-cargo -uE set-version -p tor-cell 0.20.0 nailing-cargo -uE set-version -p tor-cert 0.20.0 nailing-cargo -uE set-version -p tor-chanmgr 0.20.0 nailing-cargo -uE set-version -p tor-checkable 0.20.0 nailing-cargo -uE set-version -p tor-circmgr 0.20.0 nailing-cargo -uE set-version -p tor-config 0.20.0 nailing-cargo -uE set-version -p tor-consdiff 0.20.0 nailing-cargo -uE set-version -p tor-dirclient 0.20.0 nailing-cargo -uE set-version -p tor-dirmgr 0.20.0 nailing-cargo -uE set-version -p tor-error 0.20.0 nailing-cargo -uE set-version -p tor-geoip 0.20.0 nailing-cargo -uE set-version -p tor-guardmgr 0.20.0 nailing-cargo -uE set-version -p tor-hsclient 0.20.0 nailing-cargo -uE set-version -p tor-hscrypto 0.20.0 nailing-cargo -uE set-version -p tor-hsrproxy 0.20.0 nailing-cargo -uE set-version -p tor-hsservice 0.20.0 nailing-cargo -uE set-version -p tor-keymgr 0.20.0 nailing-cargo -uE set-version -p tor-linkspec 0.20.0 nailing-cargo -uE set-version -p tor-llcrypto 0.20.0 nailing-cargo -uE set-version -p tor-log-ratelim 0.20.0 nailing-cargo -uE set-version -p tor-memquota 0.20.0 nailing-cargo -uE set-version -p tor-netdir 0.20.0 nailing-cargo -uE set-version -p tor-netdoc 0.20.0 nailing-cargo -uE set-version -p tor-persist 0.20.0 nailing-cargo -uE set-version -p tor-proto 0.20.0 nailing-cargo -uE set-version -p tor-protover 0.20.0 nailing-cargo -uE set-version -p tor-ptmgr 0.20.0 nailing-cargo -uE set-version -p tor-relay-selection 0.20.0 nailing-cargo -uE set-version -p tor-rpcbase 0.20.0 nailing-cargo -uE set-version -p tor-rtcompat 0.20.0 nailing-cargo -uE set-version -p tor-rtmock 0.20.0 nailing-cargo -uE set-version -p tor-socksproto 0.20.0 nailing-cargo -uE set-version -p tor-units 0.20.0 Each of which runs a rune like cargo set-version --offline -p tor-units 0.20.0
* | | | | Merge branch 'changelog' into 'main'Ian Jackson2024-06-271-63/+115
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | CHANGELOG for 1.2.5 See merge request tpo/core/arti!2237
| * | | | CHANGELOG: fix typoIan Jackson2024-06-271-1/+1
| | | | |
| * | | | CHANGELOG: Add link for DRLIan Jackson2024-06-271-1/+1
| | | | |
| * | | | CHANGELOG: Run update-md-links againIan Jackson2024-06-271-0/+3
| | | | |
| * | | | CHANGELOG: Use formal title for DRLIan Jackson2024-06-271-1/+1
| | | | |
| * | | | CHANGELOG: Minor formatting fixIan Jackson2024-06-271-1/+1
| | | | |
| * | | | Add trinity to the creditsIan Jackson2024-06-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | This contributor didn't have any MRs so didn't show up automatically, but it's made some very helpful contributions.
| * | | | CHANGELOG: Add acknowledgementsIan Jackson2024-06-271-0/+11
| | | | | | | | | | | | | | | | | | | | List of contributors is from maint/thanks
| * | | | CHANGELOG: Fill in linksIan Jackson2024-06-271-3/+3
| | | | |
| * | | | CHANGELOG: Run update-md-linksIan Jackson2024-06-271-0/+51
| | | | |
| * | | | CHANGELOG: Call this 1.2.5Ian Jackson2024-06-271-1/+2
| | | | |
| * | | | CHANGELOG: manual corrections to autoformattingIan Jackson2024-06-271-6/+5
| | | | |
| * | | | CHANGELOG: autoformattingIan Jackson2024-06-271-52/+29
| | | | | | | | | | | | | | | | | | | | | | | | | I have a small perl script for this which I will make an MR for post-release.
| * | | | CHANGELOG: formattingIan Jackson2024-06-271-14/+14
| | | | |
| * | | | CHANGELOG: Changes up to the intended releaseIan Jackson2024-06-271-6/+16
| | | | |
* | | | | Merge branch 'wat-bis' into 'main'Ian Jackson2024-06-271-0/+1
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Explain in a comment why x32 is disabled See merge request tpo/core/arti!2236
| * | | | | Explain in a comment why x32 is disabledIan Jackson2024-06-271-0/+1
|/ / / / /
* | | | | Merge branch 'wat' into 'main'Ian Jackson2024-06-271-1/+1
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | Disable x86_64-unknown-linux-gnux32 test case (Linux x32 ABI) See merge request tpo/core/arti!2235
| * | | | Disable x86_64-unknown-linux-gnux32 test caseIan Jackson2024-06-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This only runs in scheduled jobs. And it doesn't work right now. It hasn't passed for at least a month, but it's not clear how much of that time it was being run because the osx failure would mask it.
* | | | | Merge branch 'changelog' into 'main'Ian Jackson2024-06-271-0/+128
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | CHANGELOG: document changes so far See merge request tpo/core/arti!2233
| * | | | CHANGELOG: Fix typosIan Jackson2024-06-271-4/+4
| | | | |
| * | | | CHANGELOG: Run maint/update-md-linksIan Jackson2024-06-261-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | Only two links so far. Most of the xrefs will be made into proper syntax later.
| * | | | CHANGELOG: Document changes up to nowIan Jackson2024-06-261-0/+125
| | | | |
* | | | | Merge branch 'client-rend-stub' into 'main'gabi-2502024-06-262-4/+4
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | vanguards: Make client rend circuits be STUB+. Closes #1474 See merge request tpo/core/arti!2230
| * | | | | tor-circmgr: Make client rendezvous circuits EXTENDED instead of SHORT.Gabriela Moldovan2024-06-251-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This updates the code to match the spec. This fixes TROVE-2024-008. Closes #1474
| * | | | | doc/dev/notes: vanguards: Make client rend circuits be STUB+.Gabriela Moldovan2024-06-251-1/+1
| | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to the [vanguards spec], client rendezvous circuits should be STUB+: * lite: `C -> G -> L2 -> Rend` * full: `C -> G -> L2 -> L3 -> Rend` [vanguards spec]: https://gitlab.torproject.org/tpo/core/torspec/-/blob/e5ace3667dcbbf893c6b632fd4e3f16114fd2a0e/spec/vanguards-spec/index.md
* | | | | Merge branch 'osx' into 'main'Ian Jackson2024-06-262-21/+18
|\ \ \ \ \ | |_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | Fix macos build test by bodging the Cargo.lock Closes #1472 See merge request tpo/core/arti!2234
| * | | | Enable the build-repro CI job in MR jobsIan Jackson2024-06-261-4/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Hopefully this will not be too slow. Fixes #1472.
| * | | | Revert "Disable macos build tests"Ian Jackson2024-06-261-1/+2
| | | | | | | | | | | | | | | | | | | | This reverts commit a6801c10584558316ff38f354167812d0c697549.
| * | | | Downgrade to cc 1.0.93 in Cargo.lockIan Jackson2024-06-261-16/+15
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As proposed in https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2231#note_3043322 I made this commit by: * Taking the hunk to add `cc = "1.0.93"` from !2231. * Running `cargo fetch` * Staging everything except the additions of cc to `Cargo.toml` and `Cargo.lock` Here is the output I got from cargo: Updating crates.io index Locking 5 packages to latest compatible versions Downgrading addr2line v0.22.0 -> v0.21.0 (latest: v0.23.0) Downgrading backtrace v0.3.73 -> v0.3.71 (latest: v0.3.73) Downgrading cc v1.0.100 -> v1.0.93 (latest: v1.0.101) Downgrading gimli v0.29.0 -> v0.28.1 (latest: v0.30.0) Downgrading object v0.36.0 -> v0.32.2 (latest: v0.36.0) Downloaded cc v1.0.93 Downloaded derive-deftly v0.13.1 Downloaded 2 crates (149.8 KB) in 1.52s
* | | | Merge branch 'update2' into 'main'gabi-2502024-06-261-32/+12
|\ \ \ \ | |/ / / |/| | | | | | | | | | | Update to derive-deftly 0.13.1 See merge request tpo/core/arti!2232
| * | | Update to derive-deftly 0.13.1Ian Jackson2024-06-261-32/+12
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes build breakage in the build-repro test. derive-deftly 0.13.0 has an MSRV violation, due to a breach by cargo of the Rust stability guarantee: d-d 0.13.0 works with Rust 1.56 but not 1.76. References: https://gitlab.torproject.org/Diziet/rust-derive-deftly/-/issues/103 https://github.com/rust-lang/cargo/issues/14147#issuecomment-2189915460
* | | Merge branch 'no-arti-hyper' into 'main'Ian Jackson2024-06-258-756/+20
|\ \ \ | | | | | | | | | | | | | | | | Remove arti-hyper See merge request tpo/core/arti!2225
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 16:47:20 +0000