summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* | Merge branch 'ticket1699_01' into 'main'David Goulet2026-02-242-5/+45
|\ \ | |/ |/| | | | | | | | | chanmgr: Don't allow to build relay channel to ourself Closes #1699 See merge request tpo/core/arti!3715
| * chanmgr: Don't allow to build relay channel to ourselfDavid Goulet2026-02-242-5/+45
|/ | | | | | | | | | The validate_relay_target() is meant to probably have more checks in the future hence the vagueness of it instead of being specific to the goal of this patch. Closes #1699 Signed-off-by: David Goulet <[email protected]>
* Merge branch 'ticket1605_01' into 'main'David Goulet2026-02-247-11/+62
|\ | | | | | | | | | | | | relay: Update the ChanMgr on key rotation Closes #1605 See merge request tpo/core/arti!3713
| * relay: Update ChanMgr on key rotationDavid Goulet2026-02-242-9/+20
| | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * chanmgr: Add a set_relay_identities() to update the RelayIdentitiesDavid Goulet2026-02-245-2/+42
|/ | | | | | | | | | The arti-relay crate rotates the keys at regular interval which we need to give to the ChanMgr to update its builder. This function boldly replace the default factory with the new identities including the TLS acceptor can pick up the new key. Signed-off-by: David Goulet <[email protected]>
* Merge branch 'deb-postinst' into 'main'Ian Jackson2026-02-241-1/+1
|\ | | | | | | | | | | | | debian: Do not bail in postinst if the account doesn't exist Closes #2368 See merge request tpo/core/arti!3707
| * debian: Replace echo with idiomatic alternativeGabriela Moldovan2026-02-231-1/+1
| | | | | | | | This applies a style nit from Diziet.
| * debian: Do not bail in postinst if the account doesn't existGabi Moldovan2026-02-231-1/+1
| |
* | Merge branch 'resume' into 'main'opara2026-02-242-2/+17
|\ \ | | | | | | | | | | | | tor-rtcompat: Disable rustls session resumption See merge request tpo/core/arti!3710
| * | tor-rtcompat: disable rustls session resumptionSteven Engler2026-02-242-2/+17
| |/
* | Merge branch 'rtcompat-unfold-2070' into 'main'opara2026-02-242-88/+20
|\ \ | | | | | | | | | | | | | | | | | | rtcompat: simplify async-std and smol incoming streams with unfold Closes #2070 See merge request tpo/core/arti!3705
| * | tor-rtcompat: unfold for smol incoming streamsmoumenalaoui2026-02-191-41/+11
| | |
| * | tor-rtcompat: unfold for async-std incoming streamsmoumenalaoui2026-02-191-47/+9
| | |
* | | Merge branch 'err-msgs' into 'main'David Goulet2026-02-242-8/+15
|\ \ \ | | | | | | | | | | | | | | | | arti-relay: Improve error/warning messages See merge request tpo/core/arti!3711
| * | | arti-relay: fix stale commentSteven Engler2026-02-231-1/+1
| | | | | | | | | | | | | | | | This method was renamed previously.
| * | | arti-relay: add more error contextSteven Engler2026-02-231-6/+12
| | | |
| * | | arti-relay: don't warn if key gen was successfulSteven Engler2026-02-231-1/+2
| | | |
* | | | Merge branch 'config-migrate-part2' into 'main'Nick Mathewson2026-02-2415-584/+499
|\ \ \ \ | |/ / / |/| | | | | | | | | | | Finish porting various crates to dd(TorConfig) See merge request tpo/core/arti!3698
| * | | tor-config: future-proof #[cfg] attribute.Nick Mathewson2026-02-241-17/+17
| | | |
| * | | arti: Fix some visibility-based compilation errors.Nick Mathewson2026-02-242-6/+10
| | | |
| * | | arti: Migrate top-level configuration to dd(TorConfig).Nick Mathewson2026-02-244-144/+83
| | | |
| * | | arti: Port rpc configuration to dd(TorConfig).Nick Mathewson2026-02-243-74/+74
| | | |
| * | | tor-config: Add an option to reject configured-out optionsNick Mathewson2026-02-241-6/+55
| | | |
| * | | tor-config: Have macros document more types and fnsNick Mathewson2026-02-242-0/+3
| | | |
| * | | arti: Port logging config to dd(TorConfig)Nick Mathewson2026-02-242-132/+71
| | | |
| * | | tor-config: Fix cfg() on sub_buildersNick Mathewson2026-02-241-0/+12
| | | | | | | | | | | | | | | | | | | | Previously, it used the sub_builder rule, which doesn't make sense when the value is a stub place-holder to tell us whether to warn.
| * | | tor-relay: convert to derive_deftly(TorConfig)Nick Mathewson2026-02-243-57/+45
| | | |
| * | | arti-client: Convert config to derive_deftly(TorConfig).Nick Mathewson2026-02-241-115/+94
| | | | | | | | | | | | | | | | | | | | (There are a few places where we still do things in nonstandard places to avoid API breakage.)
| * | | memquota: Implement ExtendBuilder for config builder.Nick Mathewson2026-02-241-0/+13
| | | |
| * | | keymgr: Port to derive_deftly(TorConfig)Nick Mathewson2026-02-241-44/+33
|/ / / | | | | | | | | | | | | As with previous modules, I've left some thing less conformant with our "standard" APIs in order to keep backward compat (for now).
* | | Merge branch 'arti-relay-keys' into 'main'David Goulet2026-02-2311-67/+412
|\ \ \ | | | | | | | | | | | | | | | | relay: Generate and rotate keys See merge request tpo/core/arti!3708
| * | | relay-crypto: Move comments above [derive] to be consistent accross codebaseDavid Goulet2026-02-231-7/+7
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | relay: Setup const for hardcoded value in crypto taskDavid Goulet2026-02-231-8/+13
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | relay: Log when key generation yields an existing key errorDavid Goulet2026-02-231-1/+4
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | relay: Simplify the crypto rotation task rotate_key()David Goulet2026-02-231-17/+11
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | relay: Get rid of start_task() for readabilityDavid Goulet2026-02-232-22/+10
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | relay: Generate relay identities at initDavid Goulet2026-02-232-7/+17
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | relay: Implement a helper to build RelayIdentitiesDavid Goulet2026-02-234-7/+119
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This required to add a slight helper to our tor-key-forge RSA key d-d macro to access the inner keypair. This avoids a clone. Signed-off-by: David Goulet <[email protected]>
| * | | relay-crypto: Fix the gen relay signing keypair typoDavid Goulet2026-02-231-3/+3
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | proto: Modify RelayIdentities to have encodable certDavid Goulet2026-02-232-14/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit also adds the TlsKeyAndCert to the identities so the TLS acceptor can set it up. Signed-off-by: David Goulet <[email protected]>
| * | | relay-crypto: Add gen_tls_cert() helper functionDavid Goulet2026-02-232-1/+18
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | relay: Remove unused ephemeral keystoreDavid Goulet2026-02-231-5/+1
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | relay: Move try_generate_keys() into crypto taskDavid Goulet2026-02-232-39/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Move rotating keys into a function so we can use it in try_generate_keys() that is used at startup. Signed-off-by: David Goulet <[email protected]>
| * | | relay: Add a crypto task for key rotationDavid Goulet2026-02-233-1/+183
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This task crypto module has a rotate key task that is in charge of rotating keys from our KeyMgr based on the valid until. To do so, we add a RotatableKeySpec trait to help us specify our to rotate a specific key. Allows us to have a generic rotate/generate function for all our keys. Task runs every 60 seconds. Taken from C-tor. Signed-off-by: David Goulet <[email protected]>
| * | | relay-crypto: Add missing helper functionsDavid Goulet2026-02-231-0/+13
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | relay-crypto: Add link signing key specifierDavid Goulet2026-02-231-0/+32
| | |/ | |/| | | | | | | Signed-off-by: David Goulet <[email protected]>
* | | Merge branch 'oniux-0.8.1' into 'main'Alexander Hansen Færøy2026-02-231-1/+1
|\ \ \ | |/ / |/| | | | | | | | web: oniux 0.8.1 See merge request tpo/core/arti!3655
| * | web: oniux 0.8.1Clara Engler2026-02-081-1/+1
| | | | | | | | | | | | | | | We had to do a quick emergency release due to a bug that made it impossible to run it on mainline Linux kernels.
* | | Merge branch 'shellexpand' into 'main'opara2026-02-231-2/+2
|\ \ \ | | | | | | | | | | | | | | | | Update shellexpand to fix nightly build failure See merge request tpo/core/arti!3709
| * | | Update shellexpand to fix nightly build failureIan Jackson2026-02-231-2/+2
|/ / / | | | | | | | | | | | | | | | | | | This brings https://gitlab.com/ijackson/rust-shellexpand/-/merge_requests/20 into arti.git and should fix at least one of the current CI failures on main, arti#2370.