summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | relay-crypto: Initial import of new tor-relay-crypto crateDavid Goulet2024-09-187-0/+190
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds a new crate called tor-relay-crypto which is responsible for declaring the relay keys and certificate that will be used by a relay and stored in a KeyMgr. This is in its own crate and considered pretty low level so other crates can use it to access the relay keys, like tor-proto, for cryptographic actions like channel authentication or descriptor signing. The lower level cryptographic keys are wrapped in a higher level object in this crate, using tor-key-forge crate, so we can have proper semantic and strong type check on those keys so they are not misused or confused with other keys. At this point, the key declaration might change once the KeyMgr supports attaching a certificate to a key. We are likely going to see more code related to certificate creation in this crate in the future. Part of #1604 Signed-off-by: David Goulet <[email protected]>
| * | key-forge: Add helper function and implement traitsDavid Goulet2024-09-184-12/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Implement the signature::Signer and Ed25519PublicKey trait so the ed25519 keypair wrapper can be easily used for certificate creation. This also adds a to_ed25519_id() so we can get a Ed25519Identity which is an object used around. Finally, add a prelude module as the list of imports started to grow a bit out of control. Part of #1604 Signed-off-by: David Goulet <[email protected]>
* | | Merge branch 'keymgr-default' into 'main'Alexander Hansen Færøy2024-09-181-1/+1
|\ \ \ | |/ / |/| | | | | | | | tor-keymgr: Enable the keymgr feature by default. See merge request tpo/core/arti!2428
| * | tor-keymgr: Enable the keymgr feature by default.Gabriela Moldovan2024-09-181-1/+1
|/ / | | | | | | `tor-keymgr` users now get the real keymgr implementation by default.
* | Merge branch 'ephemeral-keystore-feature' into 'main'David Goulet2024-09-183-2/+11
|\ \ | | | | | | | | | | | | tor-keymgr: put ephemeral keystore behind experimental "ephemeral-keystore" feature See merge request tpo/core/arti!2426
| * | tor-keymgr: put ephemeral keystore behind experimental featureSteven Engler2024-09-173-2/+11
|/ / | | | | | | Feature is named "ephemeral-keystore".
* | Merge branch 'svc-no-proxy-port' into 'main'David Goulet2024-09-173-14/+42
|\ \ | | | | | | | | | | | | | | | | | | arti: Allow running hidden services with SOCKS/DNS proxying disabled. Closes #1569 See merge request tpo/core/arti!2423
| * | shadow CI: Disable SOCKS/DNS proxying for the arti onion services.Gabriela Moldovan2024-09-171-0/+6
| | | | | | | | | | | | This tests that #1569 works.
| * | arti: Don't log that we are in SOCKS mode unless socks_listen is set.Gabriela Moldovan2024-09-171-6/+13
| | | | | | | | | | | | If `socks_listen` is disabled, we're not actually running in SOCKS mode.
| * | arti: Allow running hidden services with SOCKS/DNS ports disabled.Gabriela Moldovan2024-09-172-8/+23
| | | | | | | | | | | | Closes #1569
* | | Merge branch 'mq-tidy' into 'main'David Goulet2024-09-178-177/+88
|\ \ \ | | | | | | | | | | | | | | | | memquota: be more firm about avoiding panics, and tidy up docs See merge request tpo/core/arti!2404
| * | | tor-memquota: queue plan: Add a cross-referenceIan Jackson2024-09-101-0/+3
| | | |
| * | | tor-memquota: queue plan: Clean up intent and make into a doc commentIan Jackson2024-09-101-32/+24
| | | | | | | | | | | | | | | | Remove extraneous text, wrap it, and change to a more declarative style.
| * | | tor-memquota: queue plan: Copy from !1997 discussionIan Jackson2024-09-101-0/+32
| | | |
| * | | memory-limit.md: Make the rubric accurateIan Jackson2024-09-101-8/+4
| | | | | | | | | | | | | | | | And remove the rest of the now-obsolete text.
| * | | tor-memquota: Worsify formatting to stop rustfmt making it even worseIan Jackson2024-09-101-1/+3
| | | |
| * | | tor-memquota: Use clippy::arithmetic_side_effects, against panicsIan Jackson2024-09-105-6/+12
| | | | | | | | | | | | | | | | | | | | | | | | This detect possibly-panicking operations. Empirically this lint seems rather better now.
| * | | tor-memquota: Document that we're panic-freeIan Jackson2024-09-101-0/+10
| | | |
| * | | tor-memquota: Avoid a perhaps-impossible division-by-zero (fmt)Ian Jackson2024-09-101-1/+5
| | | |
| * | | tor-memquota: Avoid a perhaps-impossible division-by-zeroIan Jackson2024-09-101-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | It is not locally obvious that n_particips can't be zero, here. Certainly if it *is* that would be state corruption, but I don't think I can quite rule it out in the presence of a bug somewhere else.
| * | | tor-memquota: Use a const to hoist a panic to compile-timeIan Jackson2024-09-101-1/+3
| | | |
| * | | tor-memquota: Use checked_sub .. expect in two places (fmt)Ian Jackson2024-09-101-2/+6
| | | |
| * | | tor-memquota: Use checked_sub .. expect in two placesIan Jackson2024-09-101-2/+6
| | | | | | | | | | | | | | | | | | | | In these two places, underflow is statically impossible, but demonstrating that to the compiler is probably too onerous.
| * | | memory-limit: Fix heading depth for cache discussionsIan Jackson2024-09-101-4/+4
| | | |
| * | | memory-limit.md: Remove obsolete overview docsIan Jackson2024-09-101-31/+0
| | | | | | | | | | | | | | | | All of this is now documented in the lib.rs.
| * | | tor-memquota: Move some information into the proper docsIan Jackson2024-09-102-2/+8
| | | | | | | | | | | | | | | | | | | | This sentence is very important piece of overall explanation, but didn't make it into the crate level docs.
| * | | memory-limit.md: Remove obsolete docs of implemented channel facilityIan Jackson2024-09-101-121/+0
| | | | | | | | | | | | | | | | All of this is now implemented. Delete the obsolete sketch.
* | | | Merge branch 'ephemeral-keystore-docs' into 'main'gabi-2502024-09-171-0/+6
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | tor-keymgr: add disk-related docs to `ArtiEphemeralKeystore` See merge request tpo/core/arti!2424
| * | | | tor-keymgr: add disk-related docs to `ArtiEphemeralKeystore`Steven Engler2024-09-171-0/+6
| | | | |
* | | | | Merge branch 'msrv-1.75' into 'main'Nick Mathewson2024-09-1762-62/+62
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | Bump MSRV from 1.70 to 1.75. See merge request tpo/core/arti!2421
| * | | | Bump MSRV from 1.70 to 1.75.Wesley Aptekar-Cassels2024-09-1662-62/+62
| | | | |
* | | | | Merge branch 'hss-generate-hsid' into 'main'gabi-2502024-09-176-73/+220
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | arti: Add subcommand for generating service identity keys Closes #1621 See merge request tpo/core/arti!2419
| * | | | | arti: Remove hss get-key from the tests.Gabriela Moldovan2024-09-172-24/+2
| | | | | | | | | | | | | | | | | | | | | | | | The `hss get-key` functionality was folded into `hss onion-name`.
| * | | | | arti: Remove get-key subcommand in favor of onion-name.Gabriela Moldovan2024-09-171-28/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The `hss get-key` subcommand is now folded into `onion-name`, which takes a `--generate` argument which specifies whether to generate the key if missing. Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2419#note_3078068
| * | | | | tor-hsservice: Remove unused import from internal prelude.Gabriela Moldovan2024-09-171-1/+1
| | | | | |
| * | | | | arti: Add a test and some docs for the hss get-key subcommand.Gabriela Moldovan2024-09-171-0/+30
| | | | | |
| * | | | | arti: Add CLI for generating an onion service hsid.Gabriela Moldovan2024-09-172-3/+85
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds a new `hss get-key` subcommand for retrieving and generating service identity keys. The existing `hss onion-name` is now a convenience alias for `hss get-key --generate=no --key-type=onion-name`. Note: I am calling this new subcommand `get-key` for consistency with its client counterpart (`hsc get-key`). Closes #1621
| * | | | | arti: Add an enum for the hss subcommand.Gabriela Moldovan2024-09-173-40/+48
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is needed because we'll soon add an `hss get-key` subcommand for getting and/or generating a service identity key alongside `hss onion-name` (`hss onion-name` will become a convenience around `hss get-key --key-type=onion-name`).
| * | | | | arti: Refactor hss::onion_name() implementation.Gabriela Moldovan2024-09-171-11/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This splits `onion_name` into multiple functions (which will be repurposed for the future `hss get-key` implementation).
| * | | | | arti: Move hss onion-name implementation to a separate function.Gabriela Moldovan2024-09-171-29/+41
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | `hss` will soon sprout another subcommand, so I am preemptively refactoring the `hss onion-name` implementation out of `hss::run()`.
| * | | | | arti: Remove a completed TODO.Gabriela Moldovan2024-09-171-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | The tests were added in !2275
| * | | | | tor-hsservice: Add API for generating the hsid for a service.Gabriela Moldovan2024-09-171-2/+30
| | | | | | | | | | | | | | | | | | | | | | | | This also reexports `HsId` from the `tor-hsservice` crate.
| * | | | | tor-hsservice: Make maybe_generate_hsid take a selector (fmt).Gabriela Moldovan2024-09-171-3/+14
| | | | | |
| * | | | | tor-hsservice: Make maybe_generate_hsid take a selector.Gabriela Moldovan2024-09-171-6/+8
| | |_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We will soon add a new `OnionService` function for generating an HsId for the service without launching it (#1621). This new API will be implemented using `maybe_generate_hsid`, which will need to take the user-provided keystore selector as an argument. (the selector exists for future-proofing reasons; we're not yet exposing it in the CLI, but it will be part of the new `OnionService` API)
* | | | | Merge branch 's101-2024-q2' into 'main'Alexander Hansen Færøy2024-09-171-0/+26
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | Update s101 numbers for Q2 2024 See merge request tpo/core/arti!2245
| * | | | Update s101 numbers for Q2 2024Alexander Færøy2024-07-081-0/+26
| | | | |
* | | | | Merge branch 'bug_1612v2' into 'main'gabi-2502024-09-171-1/+45
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug 1612: Allow programmatic launching of onion-service with user-provided HsIdKeypair Closes #1612 See merge request tpo/core/arti!2402
| * | | | | arti-client: add experimental launch_onion_service_with_hsid() method which ↵Morgan2024-09-151-1/+45
| | | | | | | | | | | | | | | | | | | | | | | | HsIdKeypair
* | | | | | Merge branch 'defer-hsid-generation' into 'main'gabi-2502024-09-174-48/+29
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | | | | | | | | | | | | | tor-hsservice: Do not generate the HsId until the service is launched. See merge request tpo/core/arti!2417
| * | | | | arti: Test hss onion-name behavior when the hsid is missing.Gabriela Moldovan2024-09-172-0/+17
| | | | | |
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 20:26:36 +0000