summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | Merge branch 'parse-client-auth-key' into 'main'gabi-2502024-07-082-17/+136
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | tor-hscrypto: Implement FromStr for HsClientDescEncKey. See merge request tpo/core/arti!2246
| * | | | tor-hscrypto: Use collect_tuple to avoid unnecessary Vec allocation.Gabriela Moldovan2024-07-081-6/+3
| | | | |
| * | | | tor-hscrypto: Remove HsClientDescKeyParseError's HasKind impl.Gabriela Moldovan2024-07-081-12/+0
| | | | | | | | | | | | | | | | | | | | Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2246#note_3045656
| * | | | tor-hscrypto: Implement FromStr for HsClientDescEncKey.Gabriela Moldovan2024-07-081-3/+149
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We will use this impl for parsing the authorized clients of a hidden service running in "restricted discovery" mode. NB: "Restricted discovery" is the new terminology for "services that require client authorization", i.e. services that implement "client authorization" as described in rend-spec HS-DESC-ENC[0]. Note we haven't fully transitioned to the new terminology yet (see #1476). Part of #1292 [0]: https://spec.torproject.org/rend-spec/hsdesc-encrypt.html#HS-DESC-SECOND-LAYER
| * | | | tor-hscrypto: Remove unnecessary Display wrapper.Gabriela Moldovan2024-07-082-18/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I don't think we need a separate wrapper type for displaying `HsClientDescEncKey` keys in the "C Tor format" (`<auth-type>:<key-type>:<base32-encoded-public-key>`). I think this should be the canonical string representation of `HsClientDescEncKey`, so I'm removing the `display_authorized_client` function and corresponding `DisplayAuthorizedHsClientDescEncKey` wrapper type.
* | | | | Merge branch 'nightly-doc' into 'main'Nick Mathewson2024-07-081-1/+1
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | Fix a footnote reference that Nightly complains about See merge request tpo/core/arti!2247
| * | | | Fix a footnote reference that Nightly complains aboutIan Jackson2024-07-081-1/+1
|/ / / /
* | | | Merge branch 'deftly' into 'main'Ian Jackson2024-07-0814-18/+18
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Update to derive-deftly 0.14 See merge request tpo/core/arti!2241
| * | | | Update to derive-deftly 0.14Ian Jackson2024-07-0814-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | This removes the deprecated syntaxes. Updating now will prevent us re-introducing the old syntaxes, which we updated in arti!2209.
* | | | | Merge branch 'warnings' into 'main'Ian Jackson2024-07-0812-32/+42
|\ \ \ \ \ | |_|_|/ / |/| | | | | | | | | | | | | | Fix or allow warnings that show up in beta See merge request tpo/core/arti!2244
| * | | | Work around clippy::doc_lazy_continuation false positivesIan Jackson2024-07-082-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | See https://github.com/rust-lang/rust-clippy/issues/13001 I think it's OK to change this in our tree, nevertheless.
| * | | | Fix clippy::doc_lazy_continuationIan Jackson2024-07-086-25/+28
| | | | |
| * | | | tor-dirmgr: Add some duplicate dead code allowsIan Jackson2024-07-082-2/+4
| | | | | | | | | | | | | | | | | | | | Sadly, rustc seems to want us to mark this allow in several places.
| * | | | Add allows for many dead code warnings in tor-protoIan Jackson2024-07-082-0/+5
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | I'm not sure how to resolve these. See #1467. We ought to fix them before they propagate to +stable, particularly since after !2242 they'll break CI.
* | | | Merge branch 'quote' into 'main'Nick Mathewson2024-07-082-1/+2
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Fix markdown quoting and guard against regressions See merge request tpo/core/arti!2242
| * | | | Test for broken docs in rust-latest job, denying failuresIan Jackson2024-07-081-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Broken docs keep slipping in because we test this only with nightly, where we allow failures. Currently nightly is broken; see #1467. I'm not addressing that here yet.
| * | | | Fix markdown quoting.Ian Jackson2024-07-081-1/+1
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: warning: unclosed HTML tag `FILE` --> crates/arti/src/subcommands/hsc.rs:56:33 | 56 | /// Write the public key to <FILE>. Use - to write to stdout | ^^^^^^ | = note: `#[warn(rustdoc::invalid_html_tags)]` on by default
* | | | Merge branch 'hashx-warning' into 'main'Nick Mathewson2024-07-081-7/+0
|\ \ \ \ | |/ / / |/| | | | | | | | | | | hashx: Abolish Shape::BUCKET_CAPACITY See merge request tpo/core/arti!2243
| * | | hashx: Abolish Shape::BUCKET_CAPACITYIan Jackson2024-07-081-7/+0
|/ / / | | | | | | | | | | | | This is not used anywhere. It's not clear to we why it exists and I think we can safely delete it.
* | | Merge branch 'todo-number' into 'main'Alexander Færøy2024-07-072-2/+2
|\ \ \ | |/ / |/| | | | | | | | Fix two TODO ticket numbers See merge request tpo/core/arti!2224
| * | Fix two TODO ticket numbersIan Jackson2024-06-252-2/+2
| | | | | | | | | | | | | | | I seem to have mistyped this ticket number. We meant #1397 aka "Circuit reactor isn't great", not some release ticket.
* | | Merge branch 'tap-out-phase-1' into 'main'Nick Mathewson2024-06-274-27/+107
|\ \ \ | | | | | | | | | | | | | | | | Make TAP keys optional when parsing documents. See merge request tpo/core/arti!2227
| * | | Make TAP keys optional when parsing documents.Nick Mathewson2024-06-274-27/+107
| | | | | | | | | | | | | | | | | | | | This is the client-side part of phase 1 for proposal 350, which will eventually remove TAP completely from the Tor network.
* | | | Merge branch 'post-release' into 'main'Nick Mathewson2024-06-273-13/+84
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Release process improvements See merge request tpo/core/arti!2240
| * | | | maint/tag-arti-releaes: New scriptIan Jackson2024-06-272-4/+38
| | | | |
| * | | | Release.md: Say to run maint/update-md-linksIan Jackson2024-06-271-9/+7
| | | | | | | | | | | | | | | | | | | | Not the raw gen_md_links utility.
| * | | | maint/changelog-syntax-fiddle: New scriptIan Jackson2024-06-272-0/+39
| | | | |
* | | | | Merge branch 'arti-hsc-subcommand' into 'main'gabi-2502024-06-279-5/+299
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | arti: Add an arti hsc subcommand. Closes #1281 and #1291 See merge request tpo/core/arti!2212
| * | | | arti: Rewrite the hsc prepare-service-discovery-key command (fmt).Gabriela Moldovan2024-06-271-11/+6
| | | | |
| * | | | arti: Rewrite the hsc prepare-service-discovery-key command.Gabriela Moldovan2024-06-271-10/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The `arti hsc prepare-service-discovery-key` command is now `arti hsc get-key [--key-type=service-discovery]`. Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2212#note_3042903
| * | | | maint/check-cli-help: Don't attempt to parse wrapped help lines.Gabriela Moldovan2024-06-271-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Skip parsing the next line unless it starts with two spaces followed by a non-whitespace character. This ensures we don't accidentally try to parse a wrapped help line as a command. This enables it to parse commands with wrapping descriptions, such as ``` Usage: arti hsc [OPTIONS] <COMMAND> Commands: prepare-service-discovery-key Prepare a service discovery key for connecting to a service running in restricted discovery mode help Print this message or the help of the given subcommand(s) ```
| * | | | arti: Add an arti hsc subcommand.Gabriela Moldovan2024-06-275-2/+170
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds an experimental `arti hsc` subcommand for managing client state and keys. Currently, it only supports the `prepare-service-discovery-keys` operation described in #1281 and `doc/dev/notes/client-auth.md`. A note on terminology: I am referring to services that encrypt the second layer of their descriptor as running in "restricted discovery" mode (because they can only be discovered, i.e. have their IPT points found out, by a set of authorized clients). The corresponding client "auth" keys, being the keys that enable the client to find out the list of intro points, pow-params etc. of the service, are referred to as service "discovery keys". Alternative names I considered: * extra descriptor encryption: accurate, but overly technical. IMO, the CLI should be accessible to users who aren't familiar with the nitty-gritty of the protocol * shielded mode: good, but slightly misleading. Calling it "shielded mode" makes it sound like a universally desirable "extra protection" that should almost always be enabled (which is not the case). Seeing `shielded_mode = off` in the config might be worry operators that don't fully understand what "extra descriptor encryption" or "shielded mode" means * restricted mode: slightly inaccurate. It implies this mechanism is a good substitute for conventional service-side authentication, which it isn't (because client authorization isn't instantaneous) Closes #1281
| * | | | arti-client: Add a function for generating client authorization keys.Gabriela Moldovan2024-06-273-1/+90
| | | | | | | | | | | | | | | | | | | | Part of #1281
| * | | | tor-hscrypto: Add helper for encoding client auth keys in C Tor format.Gabriela Moldovan2024-06-271-0/+23
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | This will enable us to implement the `arti hsc` client subcommand for generating client auth keys (#1281). Closes #1291
* | | | Merge branch 'fix-cargo' into 'main'arti-v1.2.5Ian Jackson2024-06-271-1/+1
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | tor-memquota: Fix cargo categories See merge request tpo/core/arti!2239
| * | | | tor-memquota: Fix cargo categoriesIan Jackson2024-06-271-1/+1
|/ / / / | | | | | | | | | | | | | | | | | | | | See #1481. I have checked that this category exists.
* | | | Merge branch 'versions' into 'main'Ian Jackson2024-06-2745-398/+398
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Version bumps for 1.2.5 See merge request tpo/core/arti!2238
| * | | | Update arti to 1.2.5Ian Jackson2024-06-274-4/+4
| | | | | | | | | | | | | | | | | | | | cargo set-version --offline -p arti 1.2.5
| * | | | Update versions of 0.x tor-* and arti-* cratesIan Jackson2024-06-2745-394/+394
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nailing-cargo -uE set-version -p arti-client 0.20.0 nailing-cargo -uE set-version -p arti-relay 0.20.0 nailing-cargo -uE set-version -p arti-rpcserver 0.20.0 nailing-cargo -uE set-version -p tor-async-utils 0.20.0 nailing-cargo -uE set-version -p tor-basic-utils 0.20.0 nailing-cargo -uE set-version -p tor-bytes 0.20.0 nailing-cargo -uE set-version -p tor-cell 0.20.0 nailing-cargo -uE set-version -p tor-cert 0.20.0 nailing-cargo -uE set-version -p tor-chanmgr 0.20.0 nailing-cargo -uE set-version -p tor-checkable 0.20.0 nailing-cargo -uE set-version -p tor-circmgr 0.20.0 nailing-cargo -uE set-version -p tor-config 0.20.0 nailing-cargo -uE set-version -p tor-consdiff 0.20.0 nailing-cargo -uE set-version -p tor-dirclient 0.20.0 nailing-cargo -uE set-version -p tor-dirmgr 0.20.0 nailing-cargo -uE set-version -p tor-error 0.20.0 nailing-cargo -uE set-version -p tor-geoip 0.20.0 nailing-cargo -uE set-version -p tor-guardmgr 0.20.0 nailing-cargo -uE set-version -p tor-hsclient 0.20.0 nailing-cargo -uE set-version -p tor-hscrypto 0.20.0 nailing-cargo -uE set-version -p tor-hsrproxy 0.20.0 nailing-cargo -uE set-version -p tor-hsservice 0.20.0 nailing-cargo -uE set-version -p tor-keymgr 0.20.0 nailing-cargo -uE set-version -p tor-linkspec 0.20.0 nailing-cargo -uE set-version -p tor-llcrypto 0.20.0 nailing-cargo -uE set-version -p tor-log-ratelim 0.20.0 nailing-cargo -uE set-version -p tor-memquota 0.20.0 nailing-cargo -uE set-version -p tor-netdir 0.20.0 nailing-cargo -uE set-version -p tor-netdoc 0.20.0 nailing-cargo -uE set-version -p tor-persist 0.20.0 nailing-cargo -uE set-version -p tor-proto 0.20.0 nailing-cargo -uE set-version -p tor-protover 0.20.0 nailing-cargo -uE set-version -p tor-ptmgr 0.20.0 nailing-cargo -uE set-version -p tor-relay-selection 0.20.0 nailing-cargo -uE set-version -p tor-rpcbase 0.20.0 nailing-cargo -uE set-version -p tor-rtcompat 0.20.0 nailing-cargo -uE set-version -p tor-rtmock 0.20.0 nailing-cargo -uE set-version -p tor-socksproto 0.20.0 nailing-cargo -uE set-version -p tor-units 0.20.0 Each of which runs a rune like cargo set-version --offline -p tor-units 0.20.0
* | | | | Merge branch 'changelog' into 'main'Ian Jackson2024-06-271-63/+115
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | CHANGELOG for 1.2.5 See merge request tpo/core/arti!2237
| * | | | CHANGELOG: fix typoIan Jackson2024-06-271-1/+1
| | | | |
| * | | | CHANGELOG: Add link for DRLIan Jackson2024-06-271-1/+1
| | | | |
| * | | | CHANGELOG: Run update-md-links againIan Jackson2024-06-271-0/+3
| | | | |
| * | | | CHANGELOG: Use formal title for DRLIan Jackson2024-06-271-1/+1
| | | | |
| * | | | CHANGELOG: Minor formatting fixIan Jackson2024-06-271-1/+1
| | | | |
| * | | | Add trinity to the creditsIan Jackson2024-06-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | This contributor didn't have any MRs so didn't show up automatically, but it's made some very helpful contributions.
| * | | | CHANGELOG: Add acknowledgementsIan Jackson2024-06-271-0/+11
| | | | | | | | | | | | | | | | | | | | List of contributors is from maint/thanks
| * | | | CHANGELOG: Fill in linksIan Jackson2024-06-271-3/+3
| | | | |
| * | | | CHANGELOG: Run update-md-linksIan Jackson2024-06-271-0/+51
| | | | |
| * | | | CHANGELOG: Call this 1.2.5Ian Jackson2024-06-271-1/+2
| | | | |
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 18:28:07 +0000