summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'api-surface-may-fail' into 'main'arti-v2.5.0Nick Mathewson2026-06-301-0/+2
|\ | | | | | | | | CI; Mark check-api-surface as may-fail See merge request tpo/core/arti!4185
| * CI; Mark check-api-surface as may-failNick Mathewson2026-06-301-0/+2
| | | | | | | | See #2616.
* | Appease update-md-links.Nick Mathewson2026-06-301-1/+1
| |
* | Merge remote-tracking branch 'origin/mr/4184'Nick Mathewson2026-06-301-2/+9
|\ \
| * | Small link syntax fix in CHANGELOG.mdClara Engler2026-06-301-1/+1
| | |
| * | Link to #2601 in CHANGELOG.mdClara Engler2026-06-301-0/+2
| | |
| * | TROVE-2026-027 in CHANGELOG.mdClara Engler2026-06-301-2/+7
| | |
* | | Merge branch 'version-bumps'Nick Mathewson2026-06-3081-844/+843
|\ \ \ | |_|/ |/| |
| * | Cargo update in hashx/equixNick Mathewson2026-06-302-83/+81
| | |
| * | Version bumps for 2.5.0Nick Mathewson2026-06-3079-761/+761
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Closes #2617. We've lucked out this time, and it turns out that every one of our published crates gets a minor bump. So this was generated with: ``` for cr in $(./maint/list-crates); do cargo set-version -p $cr --bump minor done ```
* | | Merge branch 'ff-20260630' into 'main'Nick Mathewson2026-06-303-4/+7
|\ \ \ | |_|/ |/| | | | | | | | Run "fixup-features" and clean up the result. See merge request tpo/core/arti!4180
| * | Run cargo sort in arti-relay.Nick Mathewson2026-06-301-4/+3
| | |
| * | arti-relay: Make "metrics" experimentalNick Mathewson2026-06-301-2/+0
| | | | | | | | | | | | | | | It was both in "metrics" and in "experimental"; I think the latter was intended.
| * | Run "fixup-features".Nick Mathewson2026-06-303-0/+6
| | |
* | | Merge branch 'changelog-2.5.0' into 'main'Nick Mathewson2026-06-301-0/+316
|\ \ \ | | | | | | | | | | | | | | | | Update changelog for Arti 2.5.0 See merge request tpo/core/arti!4179
| * | | Update changelog for Arti 2.5.0Clara Engler2026-06-301-0/+316
| | |/ | |/|
* | | Merge branch 'update-release' into 'main'Nick Mathewson2026-06-301-1/+1
|\ \ \ | |/ / |/| | | | | | | | Update release date for 2.5.0 See merge request tpo/core/arti!4183
| * | Update release date for 2.5.0Nick Mathewson2026-06-301-1/+1
|/ /
* / protover: Use a faster check for unrecognized protocol uniqueness.Nick Mathewson2026-06-301-9/+13
|/ | | | | | | | | | Instead of doing an O(n) check every time we add an unrecognized protocol, we just scan the list of unrecognized protocols after we sort them. Closes #2601. Resolves TROVE-2026-027.
* Merge branch 'fix/add-warning-windows' into 'main'Jim Newsome2026-06-291-8/+41
|\ | | | | | | | | Add Windows compatibility for maint/add_warning See merge request tpo/core/arti!4084
| * Add Windows compatibility for maint/add_warningpryty262026-06-291-8/+41
| |
* | Merge branch 'sni' into 'main'opara2026-06-291-2/+5
|\ \ | | | | | | | | | | | | tor-basic-utils: Don't include '-' in random hostnames See merge request tpo/core/arti!4178
| * | tor-basic-utils: don't include '-' in random hostnamesSteven Engler2026-06-291-2/+5
|/ /
* | Merge branch 'audit' into 'main'opara2026-06-291-2/+2
|\ \ | | | | | | | | | | | | deps: Upgrade anyhow in 'Cargo.lock' (RUSTSEC-2026-0190) See merge request tpo/core/arti!4174
| * | deps: upgrade anyhow in 'Cargo.lock'Steven Engler2026-06-291-2/+2
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | This resolves unsoundness in anyhow (RUSTSEC-2026-0190). https://rustsec.org/advisories/RUSTSEC-2026-0190.html > Affected versions of this crate violate borrow rules, resulting in > undefined behavior, when the user adds context to an error via > `Error::context` and then later calls `Error::downcast_mut` on the > returned `Error`. I don't see us calling `downcast_mut()` on any errors. It's possible something outside of the arti code base is calling it, but I think it's unlikely.
* | Merge branch 'more-eq' into 'main'Clara Engler2026-06-296-12/+16
|\ \ | | | | | | | | | | | | Derive more Eq in tor-cert and tor-netdoc See merge request tpo/core/arti!4150
| * | tor-netdoc: Derive Eq on RouterDescSignaturesClara Engler2026-06-292-1/+2
| | |
| * | tor-netdoc: Derive Eq on RouterDescClara Engler2026-06-292-1/+2
| | |
| * | tor-netdoc: Derive Eq on (embedded) certificate typesClara Engler2026-06-293-2/+3
| | |
| * | tor-cert: Derive PartialEq and Eq on core typesClara Engler2026-06-292-8/+9
| | | | | | | | | | | | | | | | | | | | | | | | This commit derives PartialEq and Eq on the "core" certificate types in lib.rs, i.e. the Ed25519 certificates and its adjacent data types. We will need this for proper PartialEq and Eq handling in tor-netdoc at one point.
* | | Merge branch 'proto-incoming-2' into 'main'gabi-2502026-06-2911-199/+294
|\ \ \ | |/ / |/| | | | | | | | | | | | | | arti-relay: Set incoming stream filters via the CREATE handler Closes #2582 and #2577 See merge request tpo/core/arti!4145
| * | arti-relay: Link IncomingStreamRequestFilter in RequestFilterGabriela Moldovan2026-06-291-1/+2
| | | | | | | | | | | | | | | Suggested by opara in https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/4145#note_3430815
| * | proto: Remove confusing blurb about IncomingStream handlingGabriela Moldovan2026-06-291-3/+5
| | |
| * | proto: Clarify wording in relay reactor constructorGabriela Moldovan2026-06-291-1/+5
| | |
| * | proto: Say why INCOMING_BUFFER is set to STREAM_READER_BUFFERGabriela Moldovan2026-06-291-0/+5
| | |
| * | proto: Add expect(unused) where neededGabriela Moldovan2026-06-292-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now that relays no longer use `CtrlCmd::AwaitStreamRequests`, some of these fields are unused. I'm leaving them in for now, but we should remove them if they're still unused after we finish the circ reactor impl. I'm not removing `AwaitStreamRequests`, because it will be needed by onion services, when we replace the old client circuit reactor with the new one.
| * | proto: Remove RelayCirc::allow_stream_requests()Gabriela Moldovan2026-06-291-141/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We don't need it anymore now that `RelayCirc`s always allow incoming stream requests. The previous design, where you could build a `RelayCirc` that didn't allow stream requests, was a leftover from the onion service `ClientCirc` implementation that this was inspired from (onion services *do* need the two to be decoupled, because incoming stream requests are only allowed on the virtual hop, after it's established). Closes #2582
| * | proto: Pass an IncomingStreamRequestFilter factory to the create handlerGabriela Moldovan2026-06-295-3/+48
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This implements what we discussed in `doc/dev/notes/relay-streams.md` (lines 218-234): > Currently, to allow incoming stream requests on a circuit, > you first need to call `RelayCirc::allow_stream_requests()` > to install a `CmdChecker` and `IncomingStreamRequestFilter`. > This is not ideal, because `allow_stream_requests()` will need to be > called unconditionally, on each `RelayCirc`, > right after it's created in the `CreateHandler` impl > (which in turn, would mean making `handle_create()` async too, > because `allow_stream_requests()` is async, which wouldn't be great). > > So, the first step here is to rework the `RelayCirc` API to make relay circuits > be constructable with a list of allowed `RelayCmd`s and `IncomingStreamRequestFilter` > from the get-go ([#2582]), and to get rid of `allow_stream_requests()`, > which will enable the `CREATE*` handler to remain non-`async`. > > In any case, the `CREATE*` handler will still require some changes, > because it needs to be initialized with an `IncomingStreamRequestFilter`, I am not sure using an `IncomingStreamRequestFilter` "factory" is necessarily the right approach here, but the circuit `Reactor`'s constructor needs to take an `IncomingStreamRequestFilter`, and `IncomingStreamRequestFilter` is not `Clone` (and FWIW, I think it's better if we don't make it `Clone`). One obvious limitation is that the `IncomingStreamRequestFilter` of the circuit reactor is fixed for the entire lifetime of the circuit. In practice, I don't think this is going to be a problem, because the arti-relay `IncomingStreamRequestFilter` is only going be used for * preventing single-hop exit streams * per-circuit rate-limiting. Both of these checks will require the filter to have access to a recent `NetDir`, which is straightforward if the filter has an Arc<dyn NetDirProvider> (as mentioned in doc/dev/notes/relay-streams.md, `NetDirProvider` has a handy non-async `timely_netdir()` function we can use). And since these checks are based on consensus params, we don't really need to ever update an already-built circuit with a new `IncomingStreamRequestFilter` (because all `IncomingStreamRequestFilter` will have the ability to obtain a fresh `NetDir` as needed). Nevertheless, I left a TODO about this, because I expect this type to change once we figure out all the other pieces needed for #1448.
| * | proto: Return IncomingStreams stream from relay reactor constructor (fmt)Gabriela Moldovan2026-06-291-4/+4
| | |
| * | proto: Return IncomingStreams stream from relay reactor constructorGabriela Moldovan2026-06-292-52/+122
| | | | | | | | | | | | Part of #2582
| * | proto: Support passing a stream request filter to the reactorGabriela Moldovan2026-06-293-4/+83
| | | | | | | | | | | | | | | | | | | | | | | | | | | Relay circuits always need a filter, so it's best to set it via the constructor. Part of #2582 Closes #2577
| * | arti-relay: Add an unimplemented stream request filterGabriela Moldovan2026-06-292-0/+24
|/ / | | | | | | | | | | This is currently just a placeholder that accepts all stream requests. It will be fleshed out later, as part of #1448
* | Merge branch 'fix-ntor-range' into 'main'Ian Jackson2026-06-291-12/+5
|\ \ | | | | | | | | | | | | tor-netdoc: Fix Ed25519NtorCrossCert range See merge request tpo/core/arti!4173
| * | tor-netdoc: Remove redundant .clone() callClara Engler2026-06-291-1/+1
| | | | | | | | | | | | No longer required because it implements Copy.
| * | tor-netdoc: Fix Ed25519NtorCrossCert rangeClara Engler2026-06-291-11/+4
|/ / | | | | | | | | | | | | | | | | | | This commit fixes the range to NOT include SystemTime::UNIX_EPOCH. This is because TimerangeBound makes a difference between a lower bound being Some or None. This was discovered later during test and is crucial to properly detect a minimum in the yet-to-be-merged .verify() method for router descriptors.
* | Merge branch 'prefix-4137' into 'main'Ian Jackson2026-06-291-5/+1
|\ \ | | | | | | | | | | | | removed unnecessary PinBox wrapper See merge request tpo/core/arti!4172
| * | removed unnecessary PinBox wrapperpryty262026-06-241-5/+1
| | |
* | | Merge branch 'expanded-keypair-ntor' into 'main'Ian Jackson2026-06-292-3/+4
|\ \ \ | | | | | | | | | | | | | | | | tor-netdoc: ExpandedKeypair for Ed25519NtorCrossCert::new_signed() See merge request tpo/core/arti!4155
| * | | tor-netdoc: ExpandedKeypair for Ed25519NtorCrossCert::new_signed()Clara Engler2026-06-252-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit changes Ed25519NtorCrossCert::new_signed() to accept an ExpandedKeypair instead of a Keypair, because when converting the ntor key using convert_curve25519_to_ed25519_public(), only the ExpandedKeypair is returned, which is a one-way conversion from Keypair.
* | | | Merge branch 'expanded-keypair-public-key' into 'main'Ian Jackson2026-06-292-0/+7
|\| | | | | | | | | | | | | | | | | | | tor-llcrypto: Implement Ed25519PublicKey for ExpandedKeypair See merge request tpo/core/arti!4154
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-26 16:22:34 +0000