summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | tor-hsservice: Remove unused code (fmt).Gabriela Moldovan2024-07-091-1/+1
| | | | |
| * | | | tor-hsservice: Remove unused code.Gabriela Moldovan2024-07-094-188/+1
| | | | | | | | | | | | | | | | | | | | This is being reimplemented as #1292
| * | | | tor-hsservice: Remove unused publisher functions.Gabriela Moldovan2024-07-092-13/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This removes a couple of unimplemented functions. These were supposed to be the starting point for #1217, but we won't be implementing that any time soon.
| * | | | tor-hsservice: Remove unnecessary allow.Gabriela Moldovan2024-07-091-1/+0
| |/ / / | | | | | | | | | | | | Note: #1217 is still open and we may want to implement it at some point.
* | | | Merge branch 'arti-hyper-cleanup' into 'main'Nick Mathewson2024-07-092-20/+0
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Remove remaining reference to arti-hyper See merge request tpo/core/arti!2250
| * | | | Remove an obsolete RUSTSEC allowIan Jackson2024-07-091-18/+0
| | | | | | | | | | | | | | | | | | | | | | | | | We don't use the affected crates any more, now that arti-hyper is gone.
| * | | | Remove reference to arti-hyper in arti-client README.mdIan Jackson2024-07-091-2/+0
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | As per https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2225#note_3043992 We have an example for how to use arti-client with hyper 1.x, but I don't think we need to to mention that here.
* | | | Merge branch 'single-arch-image' into 'main'Nick Mathewson2024-07-091-17/+2
|\ \ \ \ | |/ / / |/| | | | | | | | | | | CI: single-arch images See merge request tpo/core/arti!2249
| * | | CI: set default image to amd64/debian:bookworm-slimJim Newsome2024-07-081-18/+2
| | | |
| * | | CI: maint-check-ownership use single-arch imageJim Newsome2024-07-081-1/+2
| | | |
* | | | Merge branch 'fix-time-period-parsing-bug' into 'main'gabi-2502024-07-081-5/+7
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | tor-keymgr: Use collect_tuple in TimePeriod::from_slug. See merge request tpo/core/arti!2248
| * | | | tor-keymgr: Use collect_tuple in TimePeriod::from_slug (fmt).Gabriela Moldovan2024-07-081-1/+2
| | | | |
| * | | | tor-keymgr: Use collect_tuple in TimePeriod::from_slug.Gabriela Moldovan2024-07-081-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The previous approach was buggy: collecting the parts of the time period into an `ArrayVec` of length 3 would panic if the number of parts was greater than 3.
| * | | | tor-keymgr: Test that parsing a TimePeriod with too many parts doesn't panic.Gabriela Moldovan2024-07-081-0/+1
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | This test currently fails because we have a bug in `TimePeriod`'s `from_slug()` implementation. `TimePeriod::from_slug()` splits the slug by `_`, and attempts to collect the parts into an `ArrayVec` of length 3. This is wrong, because the `collect()` will panic if there are more than 3 parts.
* | | | Merge branch 'parse-client-auth-key' into 'main'gabi-2502024-07-082-17/+136
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | tor-hscrypto: Implement FromStr for HsClientDescEncKey. See merge request tpo/core/arti!2246
| * | | | tor-hscrypto: Use collect_tuple to avoid unnecessary Vec allocation.Gabriela Moldovan2024-07-081-6/+3
| | | | |
| * | | | tor-hscrypto: Remove HsClientDescKeyParseError's HasKind impl.Gabriela Moldovan2024-07-081-12/+0
| | | | | | | | | | | | | | | | | | | | Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2246#note_3045656
| * | | | tor-hscrypto: Implement FromStr for HsClientDescEncKey.Gabriela Moldovan2024-07-081-3/+149
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We will use this impl for parsing the authorized clients of a hidden service running in "restricted discovery" mode. NB: "Restricted discovery" is the new terminology for "services that require client authorization", i.e. services that implement "client authorization" as described in rend-spec HS-DESC-ENC[0]. Note we haven't fully transitioned to the new terminology yet (see #1476). Part of #1292 [0]: https://spec.torproject.org/rend-spec/hsdesc-encrypt.html#HS-DESC-SECOND-LAYER
| * | | | tor-hscrypto: Remove unnecessary Display wrapper.Gabriela Moldovan2024-07-082-18/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I don't think we need a separate wrapper type for displaying `HsClientDescEncKey` keys in the "C Tor format" (`<auth-type>:<key-type>:<base32-encoded-public-key>`). I think this should be the canonical string representation of `HsClientDescEncKey`, so I'm removing the `display_authorized_client` function and corresponding `DisplayAuthorizedHsClientDescEncKey` wrapper type.
* | | | | Merge branch 'nightly-doc' into 'main'Nick Mathewson2024-07-081-1/+1
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | Fix a footnote reference that Nightly complains about See merge request tpo/core/arti!2247
| * | | | Fix a footnote reference that Nightly complains aboutIan Jackson2024-07-081-1/+1
|/ / / /
* | | | Merge branch 'deftly' into 'main'Ian Jackson2024-07-0814-18/+18
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Update to derive-deftly 0.14 See merge request tpo/core/arti!2241
| * | | | Update to derive-deftly 0.14Ian Jackson2024-07-0814-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | This removes the deprecated syntaxes. Updating now will prevent us re-introducing the old syntaxes, which we updated in arti!2209.
* | | | | Merge branch 'warnings' into 'main'Ian Jackson2024-07-0812-32/+42
|\ \ \ \ \ | |_|_|/ / |/| | | | | | | | | | | | | | Fix or allow warnings that show up in beta See merge request tpo/core/arti!2244
| * | | | Work around clippy::doc_lazy_continuation false positivesIan Jackson2024-07-082-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | See https://github.com/rust-lang/rust-clippy/issues/13001 I think it's OK to change this in our tree, nevertheless.
| * | | | Fix clippy::doc_lazy_continuationIan Jackson2024-07-086-25/+28
| | | | |
| * | | | tor-dirmgr: Add some duplicate dead code allowsIan Jackson2024-07-082-2/+4
| | | | | | | | | | | | | | | | | | | | Sadly, rustc seems to want us to mark this allow in several places.
| * | | | Add allows for many dead code warnings in tor-protoIan Jackson2024-07-082-0/+5
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | I'm not sure how to resolve these. See #1467. We ought to fix them before they propagate to +stable, particularly since after !2242 they'll break CI.
* | | | Merge branch 'quote' into 'main'Nick Mathewson2024-07-082-1/+2
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Fix markdown quoting and guard against regressions See merge request tpo/core/arti!2242
| * | | | Test for broken docs in rust-latest job, denying failuresIan Jackson2024-07-081-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Broken docs keep slipping in because we test this only with nightly, where we allow failures. Currently nightly is broken; see #1467. I'm not addressing that here yet.
| * | | | Fix markdown quoting.Ian Jackson2024-07-081-1/+1
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: warning: unclosed HTML tag `FILE` --> crates/arti/src/subcommands/hsc.rs:56:33 | 56 | /// Write the public key to <FILE>. Use - to write to stdout | ^^^^^^ | = note: `#[warn(rustdoc::invalid_html_tags)]` on by default
* | | | Merge branch 'hashx-warning' into 'main'Nick Mathewson2024-07-081-7/+0
|\ \ \ \ | |/ / / |/| | | | | | | | | | | hashx: Abolish Shape::BUCKET_CAPACITY See merge request tpo/core/arti!2243
| * | | hashx: Abolish Shape::BUCKET_CAPACITYIan Jackson2024-07-081-7/+0
|/ / / | | | | | | | | | | | | This is not used anywhere. It's not clear to we why it exists and I think we can safely delete it.
* | | Merge branch 'todo-number' into 'main'Alexander Færøy2024-07-072-2/+2
|\ \ \ | |/ / |/| | | | | | | | Fix two TODO ticket numbers See merge request tpo/core/arti!2224
| * | Fix two TODO ticket numbersIan Jackson2024-06-252-2/+2
| | | | | | | | | | | | | | | I seem to have mistyped this ticket number. We meant #1397 aka "Circuit reactor isn't great", not some release ticket.
* | | Merge branch 'tap-out-phase-1' into 'main'Nick Mathewson2024-06-274-27/+107
|\ \ \ | | | | | | | | | | | | | | | | Make TAP keys optional when parsing documents. See merge request tpo/core/arti!2227
| * | | Make TAP keys optional when parsing documents.Nick Mathewson2024-06-274-27/+107
| | | | | | | | | | | | | | | | | | | | This is the client-side part of phase 1 for proposal 350, which will eventually remove TAP completely from the Tor network.
* | | | Merge branch 'post-release' into 'main'Nick Mathewson2024-06-273-13/+84
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Release process improvements See merge request tpo/core/arti!2240
| * | | | maint/tag-arti-releaes: New scriptIan Jackson2024-06-272-4/+38
| | | | |
| * | | | Release.md: Say to run maint/update-md-linksIan Jackson2024-06-271-9/+7
| | | | | | | | | | | | | | | | | | | | Not the raw gen_md_links utility.
| * | | | maint/changelog-syntax-fiddle: New scriptIan Jackson2024-06-272-0/+39
| | | | |
* | | | | Merge branch 'arti-hsc-subcommand' into 'main'gabi-2502024-06-279-5/+299
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | arti: Add an arti hsc subcommand. Closes #1281 and #1291 See merge request tpo/core/arti!2212
| * | | | arti: Rewrite the hsc prepare-service-discovery-key command (fmt).Gabriela Moldovan2024-06-271-11/+6
| | | | |
| * | | | arti: Rewrite the hsc prepare-service-discovery-key command.Gabriela Moldovan2024-06-271-10/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The `arti hsc prepare-service-discovery-key` command is now `arti hsc get-key [--key-type=service-discovery]`. Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2212#note_3042903
| * | | | maint/check-cli-help: Don't attempt to parse wrapped help lines.Gabriela Moldovan2024-06-271-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Skip parsing the next line unless it starts with two spaces followed by a non-whitespace character. This ensures we don't accidentally try to parse a wrapped help line as a command. This enables it to parse commands with wrapping descriptions, such as ``` Usage: arti hsc [OPTIONS] <COMMAND> Commands: prepare-service-discovery-key Prepare a service discovery key for connecting to a service running in restricted discovery mode help Print this message or the help of the given subcommand(s) ```
| * | | | arti: Add an arti hsc subcommand.Gabriela Moldovan2024-06-275-2/+170
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds an experimental `arti hsc` subcommand for managing client state and keys. Currently, it only supports the `prepare-service-discovery-keys` operation described in #1281 and `doc/dev/notes/client-auth.md`. A note on terminology: I am referring to services that encrypt the second layer of their descriptor as running in "restricted discovery" mode (because they can only be discovered, i.e. have their IPT points found out, by a set of authorized clients). The corresponding client "auth" keys, being the keys that enable the client to find out the list of intro points, pow-params etc. of the service, are referred to as service "discovery keys". Alternative names I considered: * extra descriptor encryption: accurate, but overly technical. IMO, the CLI should be accessible to users who aren't familiar with the nitty-gritty of the protocol * shielded mode: good, but slightly misleading. Calling it "shielded mode" makes it sound like a universally desirable "extra protection" that should almost always be enabled (which is not the case). Seeing `shielded_mode = off` in the config might be worry operators that don't fully understand what "extra descriptor encryption" or "shielded mode" means * restricted mode: slightly inaccurate. It implies this mechanism is a good substitute for conventional service-side authentication, which it isn't (because client authorization isn't instantaneous) Closes #1281
| * | | | arti-client: Add a function for generating client authorization keys.Gabriela Moldovan2024-06-273-1/+90
| | | | | | | | | | | | | | | | | | | | Part of #1281
| * | | | tor-hscrypto: Add helper for encoding client auth keys in C Tor format.Gabriela Moldovan2024-06-271-0/+23
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | This will enable us to implement the `arti hsc` client subcommand for generating client auth keys (#1281). Closes #1291
* | | | Merge branch 'fix-cargo' into 'main'arti-v1.2.5Ian Jackson2024-06-271-1/+1
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | tor-memquota: Fix cargo categories See merge request tpo/core/arti!2239
| * | | | tor-memquota: Fix cargo categoriesIan Jackson2024-06-271-1/+1
|/ / / / | | | | | | | | | | | | | | | | | | | | See #1481. I have checked that this category exists.
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 21:53:45 +0000