summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | | Merge branch 'release-3' into 'main'Nick Mathewson2025-10-282-1/+6
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | Add missing semver breaking changes See merge request tpo/core/arti!3402
| * | | | tor-dirserver: add missing semver breaking changesSteven Engler2025-10-281-0/+3
| | | | |
| * | | | tor-linkspec: add missing semver breaking changesSteven Engler2025-10-281-1/+3
|/ / / /
* | | | Merge branch 'less_complexity' into 'main'Ian Jackson2025-10-282-2/+0
|\ \ \ \ | |/ / / |/| | | | | | | | | | | | | | | | | | | arti: Remove now-needless cognitive_complexity exceptions Closes #2226 See merge request tpo/core/arti!3397
| * | | arti: Remove now-needless cognitive_complexity exceptionsNick Mathewson2025-10-282-2/+0
|/ / / | | | | | | | | | | | | | | | | | | Apparently the http_connect refactoring made these no longer trigger. Closes #2226
* | | Merge branch 'http_connect_v2' into 'main'Nick Mathewson2025-10-2812-962/+1892
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Implement HTTP CONNECT proxy support in Arti. Closes #2221 See merge request tpo/core/arti!3391
| * | | http_connect: Remove (most) X- prefixes.Nick Mathewson2025-10-282-32/+44
| | | | | | | | | | | | | | | | | | | | | | | | We can't remove them all, since X-Tor-Stream-Isolation is recognized by C-Tor. I've added a non-deprecated Tor-Stream-Isolation that works indepenently.
| * | | http_connect: write our own hyper-futures replacementNick Mathewson2025-10-283-18/+80
| | | |
| * | | http_connect: Forbid non-empty OPTIONS bodies.Nick Mathewson2025-10-281-0/+8
| | | |
| * | | http_connect: validate casei behavior of HeaderMap.Nick Mathewson2025-10-281-0/+36
| | | |
| * | | proxy: Revise rpc docs so they are not SOCKS-specificNick Mathewson2025-10-281-14/+20
| | | |
| * | | http_connect: Advertise listener capabilities to RPCNick Mathewson2025-10-282-7/+25
| | | |
| * | | http_connect: Declare that error messages are text/plain.Nick Mathewson2025-10-281-1/+1
| | | |
| * | | http_connect: Reject OPTIONS requests with bodiesNick Mathewson2025-10-281-2/+11
| | | |
| * | | http_connect: Implement stream isolationNick Mathewson2025-10-284-5/+85
| | | |
| * | | http_connect: implement rpc supportNick Mathewson2025-10-281-6/+76
| | | |
| * | | http-connect: Implement X-Tor-Family-PreferenceNick Mathewson2025-10-281-5/+79
| | | |
| * | | TorAddr: Add function to inspect the host as an IpAddr, if it is one.Nick Mathewson2025-10-281-0/+8
| | | |
| * | | http_connect: Use consts for headers.Nick Mathewson2025-10-281-4/+16
| | | |
| * | | http_connect: Generate an X-Tor-Request-Failed header.Nick Mathewson2025-10-281-2/+20
| | | |
| * | | http_connect: Provide better status codes for ErrorKinds.Nick Mathewson2025-10-282-4/+77
| | | |
| * | | arti: Implement a "bilingual" HTTP CONNECT proxy.Nick Mathewson2025-10-285-9/+351
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With his commit, our SOCKS ports now accept both SOCKS and HTTP CONNECT requests, per proposal 365. There are still some infelicities, marked with "XXXX" or "TODO". I've tested this with curl, though, and it works. :) Typo-fixes-by: Gabriela Moldovan <[email protected]>
| * | | arti: Detect proxy protocol _before_ starting SOCKS.Nick Mathewson2025-10-285-27/+90
| | | | | | | | | | | | | | | | | | | | This will let us speak HTTP CONNECT as well; there is a stub for initiating an http proxy.
| * | | Reformat arti/Cargo.tomlNick Mathewson2025-10-281-27/+22
| | | |
| * | | arti: Pass a buffered stream to handle_socks_connNick Mathewson2025-10-282-3/+15
| | | | | | | | | | | | | | | | This will let us implement bilingual HTTP proxies.
| * | | arti: Renaming around socks/generic proxiesNick Mathewson2025-10-283-40/+43
| | | | | | | | | | | | | | | | This is _all_ renaming and comment adjustments.
| * | | arti: Split socks-specific parts out of handle_socks_connNick Mathewson2025-10-282-448/+475
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We want to abstract every part of this code that knows that it's speaking SOCKS, so that we can in turn add a new proxy type. Note that several methods and types here have names that are no longer appropriate for their functionality. I'll revise those in a later commit.
| * | | arti::proxy: Small reformats.Nick Mathewson2025-10-281-5/+7
| | | | | | | | | | | | | | | | | | | | (I'm not sure why this wasn't already done, but let's do it as a separate MR.)
| * | | Rename "arti::socks" to "arti::proxy".Nick Mathewson2025-10-283-3/+3
| | | | | | | | | | | | | | | | I'm about to add another proxy type.
* | | | Merge branch 'ci-needs-for-all-jobs' into 'main'wesleyac2025-10-271-3/+30
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | ci: Add needs to almost all jobs. See merge request tpo/core/arti!3370
| * | | | ci: Add needs to almost all jobs.Wesley Aptekar-Cassels2025-10-271-3/+30
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This also updates some needs statements that existed to order jobs that did not actually have a dependency on each other. The idea here is to run everything with as much parallelism as possible, and if that parallelism causes problems, we should ideally solve it by adding more runner capacity, or taking a closer look at what the actual problem is.
* | | | Merge branch 'ci-arti-extra-opentelemetry' into 'main'wesleyac2025-10-271-1/+1
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | ci: Enable opentelemetry feature in arti-extra build. See merge request tpo/core/arti!3392
| * | | | ci: Enable opentelemetry feature in arti-extra build.Wesley Aptekar-Cassels2025-10-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | I am interested in enabling opentelemetry in chutney tests to enable easier debugging of failures that pop up in CI.
* | | | | Merge branch 'tunnel-id-no-more' into 'main'David Goulet2025-10-271-3/+3
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | proto: Avoid identifying relay circuits using TunnelId See merge request tpo/core/arti!3395
| * | | | | proto: Avoid identifying relay circuits using TunnelIdGabriela Moldovan2025-10-271-3/+3
|/ / / / / | | | | | | | | | | | | | | | We replaced TunnelId with UniqId in the relay code a while ago.
* | | | | Merge branch 'relay-bin-4' into 'main'David Goulet2025-10-275-10/+18
|\ \ \ \ \ | |_|/ / / |/| | | | | | | | | | | | | | arti-relay: Use `Void` for `TorRelay::run` See merge request tpo/core/arti!3394
| * | | | arti-relay: use `Void` for `TorRelay::run`Steven Engler2025-10-275-10/+18
|/ / / /
* | | | Merge branch 'ticket1597_09' into 'main'David Goulet2025-10-2312-28/+447
|\ \ \ \ | |/ / / |/| | | | | | | | | | | relay: Channel initiator authentication code See merge request tpo/core/arti!3389
| * | | relay: Move crate around Cargo.toml for check_toposortDavid Goulet2025-10-231-3/+3
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | proto: Remove relay ChannelAuthenticationData builderDavid Goulet2025-10-233-82/+51
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | proto: Feature flag some relay specific codeDavid Goulet2025-10-232-8/+15
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | proto: Add relay todos for the handshakeDavid Goulet2025-10-231-0/+2
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | proto: Use Arc for relay identities objectDavid Goulet2025-10-233-5/+7
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | proto: Remove LOG_PREFIX in relay handshakeDavid Goulet2025-10-231-5/+1
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | proto: Re-arrange some importsDavid Goulet2025-10-231-3/+1
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | proto: Add a note about channel canonicityDavid Goulet2025-10-231-0/+5
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | proto: Compute authenticate data after validating certificatesDavid Goulet2025-10-234-15/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is only done if we kept the AUTH_CHALLENGE cell and we have relay identities. In other words, this is only when the UnverifiedChannel was created from a RelayInitiatorHandshake. Note: The check_internal() function is too large and should be refactored in smaller pieces. Note: It is also likely that we need to split UnverifiedChannel and VerifiedChannel as it is getting client or relay members. Not great. Signed-off-by: David Goulet <[email protected]>
| * | | proto: Add a relay channel builderDavid Goulet2025-10-233-2/+37
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The client and relay channel builder don't share anything and return different objects hence the seperation. Furthermore, this seperation avoids having the client ChanMgr ability to launch relay channels. Signed-off-by: David Goulet <[email protected]>
| * | | proto: Add RelayIdentities object holding our keysDavid Goulet2025-10-233-1/+63
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a intermediary object between tor-chanmgr and tor-proto that is when building a relay channel, those keys/certs need to be set in the ChannelBuilder so the tor-proto can use them to authenticate. We avoid that way making tor-proto depending on tor-keymgr for the ultimate goal to avoid tor-proto to have access to all the keys in the KeyMgr. Future commits will introduce a relay channel builder which will use that object to set the keys. Signed-off-by: David Goulet <[email protected]>
| * | | proto: Add the channel authentication dataDavid Goulet2025-10-235-2/+161
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit only adds a struct holding all the authentication data that needs to be built during the verification process after all handshake cells needed for authentication have been sent. It lives in the VerifiedChannel struct so it can be used to build the AUTHENTICATE cell and be sent before the NETINFO. Signed-off-by: David Goulet <[email protected]>
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 16:52:49 +0000