summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | tor-chanmgr: implement HTTP CONNECT proxy handshake and wire transportNihal2026-03-182-20/+186
| | | | |
| * | | | tor-chanmgr: add ProxyProtocol::HttpConnect variant and URI parsingNihal2026-03-181-36/+205
| | | | |
* | | | | Merge branch 'chutney-arti-extra' into 'main'Jim Newsome2026-03-186-47/+157
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | chutney test: include arti-extra bin See merge request tpo/core/arti!3772
| * | | | | chutney test: include arti-extra binJim Newsome2026-03-115-20/+81
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Test the arti-extra bin, which includes most of `full` and `experimental` features, too.
| * | | | | network.py: break up construction of configs listJim Newsome2026-03-111-47/+46
| | | | | |
| * | | | | chutney test: don't override CHUTNEY_START_TIMEJim Newsome2026-03-111-3/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The default has been increased to 300, so there's no need to override it here.
| * | | | | chutney ci: convert chutney-script to a normal python moduleJim Newsome2026-03-115-44/+97
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will give us a bit more flexibility, e.g. to pass additional arguments. Now that the python linters understand it, we fix some linting issues. We preserve the ability to run the test on other networks by making the Config.network optional. The new default of `None` means to use the built-in module to create the network. The functionality of the test itself is the same.
* | | | | | Merge branch 'extra-info' into 'main'Clara Engler2026-03-183-1/+138
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | tor-dirclient: Support for extra-info requests See merge request tpo/core/arti!3764
| * | | | | | tor-netdoc: Add TODO wrt double definitionClara Engler2026-03-181-0/+1
| | | | | | |
| * | | | | | tor-dirclient: Add TODO wrt Default for requestsClara Engler2026-03-181-0/+2
| | | | | | |
| * | | | | | tor-netdoc: Properly export ExtraInfoDigestClara Engler2026-03-121-0/+3
| | | | | | |
| * | | | | | tor-dirclient: Add TODO for renamingClara Engler2026-03-121-0/+1
| | | | | | |
| * | | | | | tor-dirclient: No ref semantic in ExtraInfoClara Engler2026-03-121-6/+6
| | | | | | |
| * | | | | | tor-netdoc: Add ExtraInfoDigest type aliasClara Engler2026-03-121-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Accidentally left out in the previous commit.
| * | | | | | tor-dirclient: Small semantic fixupsClara Engler2026-03-121-5/+15
| | | | | | |
| * | | | | | tor-dirclient: Support for extra-info requestsClara Engler2026-03-111-1/+118
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit implements support for extra-info requests in tor-dirclient. It is gated behind the already existing `routerdesc` feature flag, because entities building upon router descriptors most likely also need extra-info, namely directory mirrors and directory authorities. The implementation is largely based upon the existing one for router descriptors, as they are of a very similar request format, most likely due to simply being closely related anyways.
* | | | | | | Merge branch 'ticket2404_01' into 'main'David Goulet2026-03-175-180/+515
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | relay: Crypto task rewrite Closes #2404 See merge request tpo/core/arti!3782
| * | | | | | | relay: Pass now() instead of the runtime in the crypto taskDavid Goulet2026-03-171-37/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This way we get the whole task job to be aligned on one single now value to avoid potential inconsistencies between expiry and key generation. Fixes #2404 Signed-off-by: David Goulet <[email protected]>
| * | | | | | | relay: Add crypto tasks unit testDavid Goulet2026-03-173-1/+245
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Tests the key rotation code. Signed-off-by: David Goulet <[email protected]>
| * | | | | | | relay: Use same wallclock() time when generating keysDavid Goulet2026-03-171-8/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | | | | | relay: Make the crypto tasks use the runtime wallclockDavid Goulet2026-03-172-25/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This way we can unit tests properly. Signed-off-by: David Goulet <[email protected]>
| * | | | | | | relay: Rewrite the rotation key logic in the crypto taskDavid Goulet2026-03-172-163/+252
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is almost a full rewrite of the crypto task which was needed in order to support our relay signing certificate to be put in the keystore which will be needed for the offline key feature. Instead of having rotate_key() do all the things, we now instead do two pass: 1. Remove all expired keys and certs. 2. Generate any missing keys. This still results in using the minimum valid_until of all our keys for the task sleep time. We can know cleanup the local trait used for this gymnastic and trade it for some more KeyMgr gymnastic. Fixes #2404 Signed-off-by: David Goulet <[email protected]>
| * | | | | | | relay: Don't log warn if key already exists when generating oneDavid Goulet2026-03-171-4/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
| * | | | | | | relay: Remove leftover comment from previous code iterationDavid Goulet2026-03-171-4/+0
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
* | | | | | | Merge branch 'expiry_hours' into 'main'David Goulet2026-03-174-34/+86
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cert: Fix minor rounding bug in systemtime-to-expiry conversion Closes #2407 See merge request tpo/core/arti!3787
| * | | | | | cert: Fix minor but annoying bug in cert expiry calculationNick Mathewson2026-03-171-2/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We documented our SystemTime-to-expiry conversion as always rounding _up_, but we did not account for fractional seconds when doing so. Therefore, if the requested expiration was set partway through the first second of an hour, the conversion would round down. This patch fixes that, and adds a regression test. I've confirmed that the test fails without this patch. Closes #2407
| * | | | | | cert: Deduplicate expiry-in-hours logicNick Mathewson2026-03-174-34/+70
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These certificates use a weird expiration format: counting hours since the unix epoch. Previously we had it implemented in two different places. This patch centralizes it, since we are about to become slightly more complicated.
* | | | | | Merge branch 'keymgr-cert-fixes2' into 'main'gabi-2502026-03-172-21/+115
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | | | | | | | | | | | | | keymgr: Use the keypair specifier when generating keys. See merge request tpo/core/arti!3785
| * | | | | keymgr: Remove now-addressed XXXGabriela Moldovan2026-03-171-3/+0
| | | | | |
| * | | | | keymgr: Fix feature-gating in testsGabriela Moldovan2026-03-171-4/+3
| | | | | |
| * | | | | keymgr: Lower get() logic into get_from_store()Gabriela Moldovan2026-03-171-13/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This moves the logic for retrieving a public key from its corresponding keypair into `get_from_store()`. Fixes a bug which made it impossible to retrieve a public key using the key specifier of its keypair type with any function other than `KeyMgr::get()`.
| * | | | | keymgr: Add more tests to reveal the get_*() bug for public keysGabriela Moldovan2026-03-171-1/+65
| | | | | | | | | | | | | | | | | | | | | | | | This will be fixed in the next commit.
| * | | | | keymgr: Pass the item type to entry_descriptor() (fmt)Gabriela Moldovan2026-03-171-1/+5
| | | | | |
| * | | | | keymgr: Pass the item type to entry_descriptor()Gabriela Moldovan2026-03-171-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | I am about to repurpose this test helper for other item types too.
| * | | | | keymgr: Preserve item metadata when converting to TestPublicKey (fmt)Gabriela Moldovan2026-03-171-1/+4
| | | | | |
| * | | | | keymgr: Preserve item metadata when converting to TestPublicKeyGabriela Moldovan2026-03-171-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | This will enable us to test the provenance of public keys.
| * | | | | keymgr: Update cert testsGabriela Moldovan2026-03-171-1/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is needed now that `get_or_generate_key_and_cert()` uses the keypair specifier when generating the subject key. Without this the cert retrieval tests fail because `get_or_generate_key_and_cert()` now requires the subject key specifier to have an associated keypair specifier ("KeyCertificateSpecifier has no keypair specifier for the subject key?"). Note that even with this patch, the `get_cert_entry()` test still fails because of a bug in the `get_*()` family of functions. This will be fixed in a future commit.
| * | | | | keymgr: Use the keypair specifier when generating keys.Gabriela Moldovan2026-03-171-1/+9
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When generating a new keypair, we want to use the keypair specifier of the subject key. Fixes a bug where this code was incorrectly generating a keypair using the specifier of the public key type (the resulting generated key had a `kp_` prefix instead of `ks_`).
* | | | | Merge branch 'ssh-fork' into 'main'gabi-2502026-03-164-15/+15
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | keymgr, key-forge: Use our ssh-* forks See merge request tpo/core/arti!3783
| * | | | | keymgr, key-forge: Use our ssh-* forksGabriela Moldovan2026-03-164-15/+15
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upstream `ssh-key` is missing some important features we need for arti-relay: * a bug fix without which we can't convert deserialized RSA keys to their rsa counterparts: https://github.com/RustCrypto/SSH/pull/318 * @wesleyac 's patch https://github.com/RustCrypto/SSH/pull/412 for allowing insecure (1024 bits long) RSA keys (needed because the relay KS_relayid_rsa identity keys are 1024 bits long) We plan to switch back to mainline `ssh-key` when `ssh-key 0.7.0` comes out. See the discussion in #2398 for more details.
* | | | | Merge branch 'circ-react-logs' into 'main'David Goulet2026-03-162-2/+44
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | proto: Add more logging to the new circuit reactors See merge request tpo/core/arti!3776
| * | | | | proto: Add more logging to the new circuit reactorsGabriela Moldovan2026-03-122-2/+44
| | | | | |
* | | | | | Merge branch 'typos' into 'main'opara2026-03-1646-58/+58
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix various typos See merge request tpo/core/arti!3781
| * | | | | | Fix grammar typosTobias Stoeckmann2026-03-156-9/+9
| | | | | | |
| * | | | | | Fix word duplicate typosTobias Stoeckmann2026-03-1544-50/+50
| | | | | | |
* | | | | | | Merge branch 'rpc-su-v2' into 'main'Nick Mathewson2026-03-1623-74/+543
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | RPC: Provide superuser mode Closes #2285 See merge request tpo/core/arti!3743
| * | | | | | | rpc test: python integration tests for su mode.Nick Mathewson2026-03-164-1/+73
| | | | | | | |
| * | | | | | | python rpc: Add wrapper for prefer-superuser method.Nick Mathewson2026-03-162-0/+22
| | | | | | | |
| * | | | | | | rpc-client: Run cbindgen to regenerate C header.Nick Mathewson2026-03-161-0/+20
| | | | | | | |
| * | | | | | | rpc-client: add support to prefer/require su permissionNick Mathewson2026-03-165-2/+114
| | | | | | | |
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 19:55:23 +0000