| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Reason for this is because both initiator and responder build the
authentication data in order to send it (initiator) and validate it
(responder).
The build_auth_data() function takes a VerifiedChannel as an argument in
order to access the CLOG/SLOG data and authentication data MUST always
be handled after a channel is verified as in its CERTS has been checked.
Take the opportunity also to add the NETINFO and relay identities data
into the verified channel which will be needed to finalize the channel.
The check() function is now missing the actual validation of the
AUTHENTICATE for a responder which will come in the next commit(s).
Signed-off-by: David Goulet <[email protected]>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This commit introduces the RelayResponderHandshake object used when
accepting an inbound connection to open a channel.
There are still TODOs pepperred in the code but the base is implemented.
The Unverified and Verified channel need to be adjusted for this new
handshake.
This will come in the next commits.
Signed-off-by: David Goulet <[email protected]>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Again, as the CERTS helper, this is used by both initiator and responder
handshake.
Signed-off-by: David Goulet <[email protected]>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Both initiator and responder send CERTS cell hence this helper.
Signed-off-by: David Goulet <[email protected]>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
We need the advertised addresses for the NETINFO cell when opening a
relay channel. Keep them in the TorRelay object so we can pass them to
the ChanMgr channel handler.
This will also help with config reload where only the local values in
TorRelay will need to be updated.
Signed-off-by: David Goulet <[email protected]>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
It is always the same type for this specific certificate.
Signed-off-by: David Goulet <[email protected]>
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This requires to make a series of cert and digest also optionnable in
the VerifiedChannel.
This change is needed because as a relay responder, you might get the
CERTS or not depending on if the other side wants to authenticate.
Client and bridges do not authenticate and thus it is expected to not
have a CERTS cell.
This leads to the UnverifiedChannel::check() function to return early
with a VerifiedChannel without any identity attached to it.
Signed-off-by: David Goulet <[email protected]>
|
| | | |_|/
| |/| |
| | | |
| | | |
| | | |
| | | | |
Code movement only.
Signed-off-by: David Goulet <[email protected]>
|
| |\ \ \ \
| |_|_|/
|/| | |
| | | |
| | | | |
arti-relay: Change debug message to rate-limited warning
See merge request tpo/core/arti!3602
|
| | | |/
| |/| |
|
| |\ \ \
| |_|/
|/| |
| | |
| | | |
tor-dirserver: Refactorings in the database.rs module
See merge request tpo/core/arti!3599
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This commit removes FromStr for DocumentId because it was only used in
testing anyways.
Instead, it replaces it with a simple From<[u8; 32]> only enabled in
test builds, which is sufficient for what we are trying to do.
An alternative would be to make the inner field pub, but this seems to
aggressive for a testing only thing.
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This comit adds a `sha2` column to `router_descriptor` alongside a
`CHECK` to see whether it equals `docid`.
The reason for this is simple: Microdescriptors are the only kind of
documents that are queriable with a SHA2 hash. Previously, we would
have simply used the `docid` column for this, but in order to abstract
it better, a distinct column with this hash is better.
|
| | | |
| | |
| | |
| | |
| | | |
Because we went with `docid` in the database (due to `rowid`), it is
only natural to call the code variables `docid` too.
|
| | | |
| | |
| | |
| | |
| | |
| | | |
This commit renames the sha256 column to docid for the reason that we
agreed upon making the schema visible to all modules, so if we were to
encapsulate docid properly, this change is only natural.
|
| | | |
| | |
| | |
| | |
| | | |
This commit renames arti_dirmirror_schema_version to
arti_dirserver_schema_version.
|
| | | |
| | |
| | |
| | |
| | |
| | | |
This commit introduces a new type in the database module named
`DocumentId` for abstracting the underlying content-addressable hash
algorithm we are using.
|
| |\ \ \
| | | |
| | | |
| | | |
| | | | |
tor-dircommon: Remove legacy authority syntax
See merge request tpo/core/arti!3597
|
| | | | | |
|
| | | | | |
|
| | | | | |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Because arti 2.0 is pending, it is good to get rid of technical debt,
such as the legacy syntax for specifying directory authorities, which
had been replaced by prop330 a few months ago.
|
| |/ / /
| | |
| | |
| | |
| | | |
This commit adds more documentation/examples for the prop330 syntax for
specifying directory authorities.
|
| |\ \ \
| | | |
| | | |
| | | |
| | | | |
tor-dirserver: Make downloader stateless
See merge request tpo/core/arti!3601
|
| | | |/
| |/|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This commit makes the downloader found in `mirror::operation::download`
stateless by removing the `preferred_authority` field and changing all
methods from `&mut self` to `&self`.
The preferred authority is now accepted as a parameter to
`DownloadManager::download` which also returns a tuple now with the
actually used authority alongside the response, putting the management
of this to the responsibility of the caller.
Meanwhile, it also renames the structure from `ConsensusBoundDownloader`
to `DownloadManager` because it no longer keeps a state that
invalidates after a consensus "ends".
The purpose of this is to simplify overall state in order to make the
implementation of a finite-state-machine for the dirmirror operation
more easy (and deterministic).
|
| |\ \ \
| |/ /
|/| |
| | |
| | | |
Bump chutney
See merge request tpo/core/arti!3604
|
| | | |
| | |
| | |
| | |
| | |
| | | |
Previously this was naively wrapping strings in double-quotes. This
works ok for escaping internal whitespace, but doesn't escape other
special characters.
|
| | | |
| | |
| | |
| | | |
Bump chutney, and migrate to CLI changes introduced in chutney!101
|
| |/ / |
|
| |\ \
| | |
| | |
| | |
| | | |
Use kebab case for all scripts in maint/
See merge request tpo/core/arti!3590
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | | |
Change the script name to use hyphens, not underscores.
Make the script name and the CI job name the same, except the script
has -arti at the end in case we add more similar checks.
|
| | | |
| | |
| | |
| | | |
This avoids tripping over things like `__pycache__`
|
| | | | |
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Swap the symlink direction: now we have list_crates.py (the python
module) with a symlink list-crates pointing to it. This allows the
module to be imported but the command to be kebab case.
The checking tooling doesn't understand this special arrangement.
Lots of references to update!
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | | |
We're using maint/common/shellcheck-all now. The docs were
inconsistent.
|
| | | |
| | |
| | |
| | | |
We had both maint/docker-... and maint/docker_...
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | | |
Use kebab case, and also add the word deps. Otherwise it might refer
to files or something.
|
| | | | |
|
| | | |
| | |
| | |
| | |
| | |
| | | |
The job was called `check-targets` and the script was called
`cargo_check_target`. Make them match. Use kebab case, and the
plural (it checks multiple targets).
|
| |/ /
| |
| |
| | |
As per the docs for that script.
|