aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | | arti: rpc functionality to bootstrap a defer_bootstrapped client.Nick Mathewson2026-06-086-8/+101
| | | | | |
| * | | | | Option to defer bootstrapping at startup.Nick Mathewson2026-06-085-17/+127
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | This option will primarily be used by integrators who want to modify the configuration, either directly or via RPC, before launching Arti completely.
* | | | | Merge branch 'destroy-cell3' into 'main'gabi-2502026-06-089-28/+395
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | proto: Add a new channel -> circuit queue type See merge request tpo/core/arti!4025
| * | | | | proto: Update the tests to use the new CircuitRx{Receiver,Sender}sGabriela Moldovan2026-06-086-16/+17
| | | | | |
| * | | | | proto: Replace CircuitRx{Sender,Receiver} with new channel typeGabriela Moldovan2026-06-083-11/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is needed for relays as part of #2490. Note that changing this type affects the client implementation too (i.e. clients will start prioritizing inbound DESTROY, discarding any queued data without forwarding it to their local streams). But that's okay, because it will generally only affect misbehaving clients, and clients unlucky enough to encounter a hibernating relay.
| * | | | | proto: Remove now-unused importGabriela Moldovan2026-06-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | `CircuitRxSender` is no longer a `Sink`, so we don't need this import anymore.
| * | | | | proto: Add a new channel -> circuit queue typeGabriela Moldovan2026-06-082-0/+372
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds new a `CircuitRxSender`/`CircuitRxReceiver` queue type. The corresponding (`Sink`-link) sender and `Stream` implementations prioritize the delivery of `DESTROY` messages, which get delivered immediately, even if there are other messages queued in the underlying MPSC message queue. We are okay with the resulting data loss, because inbound DESTROY can be indicative of malicious activity on the circuit. We choose to err on the safe side, and free up the resources associated with such circuits as soon as possible. DESTROY messages are also sent by relays when they're about to hibernate, and by clients once they've decided to stop using a circuit. In the latter case, the lack of an `RELAY_COMMAND_END_ACK` does mean that this prioritization can cause data loss in cases where the client closes the circuit immediately after END-ing a stream. However, this is a deficiency in the protocol, and not something we want to fix by implementing custom flushing logic in the reactor. See torspec#196 and the discussion in #2490. Part of #2490
* | | | | | Merge branch 'stream-ctrl-opt' into 'main'gabi-2502026-06-082-17/+28
|\ \ \ \ \ \ | |/ / / / / |/| | | | | | | | | | | | | | | | | proto: Make the ClientDataStreamCtrl optional throughout See merge request tpo/core/arti!4074
| * | | | | proto: Enable the relay exit stream testGabriela Moldovan2026-06-081-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This passes now that we can build a `DataStream` without a `ClientDataStreamCtrl`.
| * | | | | proto: Set the ClientDataStreamCtrl to None for relay streams (fmt)Gabriela Moldovan2026-06-081-5/+7
| | | | | |
| * | | | | proto: Set the ClientDataStreamCtrl to None for relay streamsGabriela Moldovan2026-06-081-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | Previously this would panic.
| * | | | | proto: Make the ClientDataStreamCtrl optional throughoutGabriela Moldovan2026-06-081-12/+22
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We will reuse `DataStream` for relay exit streams, and those aren't going to have a `ClientDataStreamCtrl`. Part of #2557
* | | | | Merge branch 'cargo-audit-proc-macro' into 'main'Nick Mathewson2026-06-081-0/+7
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | maint/cargo-audit: Ignore RUSTSEC-2026-0173 See merge request tpo/core/arti!4075
| * | | | | maint/cargo-audit: Ignore RUSTSEC-2026-0173Gabriela Moldovan2026-06-081-0/+7
|/ / / / / | | | | | | | | | | | | | | | | | | | | `proc-macro-error2` is unmaintained. We depend on it via `getset` and `dynasm`, so we'll this exception until they're updated.
* | | | | Merge branch 'coverage-target-dir' into 'main'Nick Mathewson2026-06-081-3/+5
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | fix coverage_fuzz_corpora to use the target-coverage dir See merge request tpo/core/arti!4071
| * | | | fix coverage_fuzz_corpora to use the target-coverage dir52252252026-06-041-3/+5
|/ / / /
* | | | Merge branch 'tokio-1.47.1' into 'main'Nick Mathewson2026-06-0313-14/+14
|\ \ \ \ | |_|/ / |/| | | | | | | | | | | | | | | | | | | Upgrade tokio to LTS 1.47.1 Closes #2137 See merge request tpo/core/arti!4033
| * | | Upgrade tokio to LTS 1.47.1Neel Chauhan2026-06-0313-14/+14
| | | | | | | | | | | | | | | | Closes #2137.
* | | | Merge branch 'filetime' into 'main'gabi-2502026-06-032-24/+5
|\ \ \ \ | |/ / / |/| | | | | | | | | | | | | | | | | | | Upgrade to filetime 0.2.29 Closes #2562 See merge request tpo/core/arti!4064
| * | | Bump filetime to 0.2.29Gabriela Moldovan2026-06-031-22/+3
| | | | | | | | | | | | | | | | Closes #2562
| * | | CI: bump shadow commitGabriela Moldovan2026-06-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | Needed so we can upgrade to the latest `filetime`. See #2562
* | | | Merge branch 'portpolicy-split-ws' into 'main'Clara Engler2026-06-033-11/+22
|\ \ \ \ | |/ / / |/| | | | | | | | | | | tor-netdoc: Avoid use of string slices in PortPolicy See merge request tpo/core/arti!4062
| * | | tor-netdoc: Test for UTF-8 port policy edge case52252252026-06-033-0/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit adds a tor-netdoc test for checking for an edge case related to UTF-8 symbols found within netdocs. See arti#2566
| * | | tor-netdoc: Avoid use of string slices in PortPolicyClara Engler2026-06-031-11/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit removes the use of string slices in PortPolicy::from_str() by making use of `str::split_once` instead. See arti#2566 Co-authored-by: 5225225 <[email protected]>
* | | | Merge branch 'no-result' into 'main'Clara Engler2026-06-033-38/+37
|\ \ \ \ | |_|/ / |/| | | | | | | | | | | tor-netdoc: No longer import crate::Result in doc::netstatus See merge request tpo/core/arti!4050
| * | | tor-netdoc: netstatus: Abolish StdResult aliasIan Jackson2026-06-022-13/+12
| | | |
| * | | tor-netdoc: netstatus: No longer use crate::ResultIan Jackson2026-06-022-24/+24
| | | |
| * | | tor-netdoc: Change one call to use try_collect()Ian Jackson2026-06-021-1/+1
| | | | | | | | | | | | | | | | This is a clearer.
* | | | Merge branch 'bump-deps' into 'main'Alexander Hansen Færøy2026-06-035-32/+28
|\ \ \ \ | |_|/ / |/| | | | | | | | | | | Bump some deps that have had breaking changes See merge request tpo/core/arti!4053
| * | | dirserver,netdoc: Upgrade to the latest saturating-timeGabriela Moldovan2026-06-033-4/+4
| | | |
| * | | arti: Bump the versions of our opentelemetry depsGabriela Moldovan2026-06-033-28/+24
| | | | | | | | | | | | | | | | Part of #2559
* | | | Merge branch 'rd-misc-fields' into 'main'Clara Engler2026-06-032-0/+36
|\ \ \ \ | |/ / / |/| | | | | | | | | | | Uncontroversial RouterDesc field additions See merge request tpo/core/arti!4006
| * | | tor-netdoc: Add TODO for eventdnsClara Engler2026-06-031-0/+1
| | | |
| * | | tor-netdoc: Change Option<NumericBoolean> to NumericBooleanClara Engler2026-06-031-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | It is weird to have three possible states for truthiness here. This commit removes the Option in favor of the inner type while adding a TODO comment to somehow find a way to skip this during encoding.
| * | | tor-netdoc: Replace some item docs with spec linksClara Engler2026-06-031-6/+3
| | | |
| * | | tor-netdoc: Add TODO for overload_generalClara Engler2026-06-031-0/+1
| | | | | | | | | | | | | | | | Adds a TODO for using ConstantString for overload_general.
| * | | tor-netdoc: Add extra_info_digest to RouterDescClara Engler2026-06-032-0/+9
| | | | | | | | | | | | | | | | This field is taken from the spec.
| * | | tor-netdoc: Add contact to RouterDescClara Engler2026-06-032-0/+9
| | | | | | | | | | | | | | | | This commit adds the contact field to RouterDesc.
| * | | tor-netdoc: Add overload_general to RouterDescClara Engler2026-06-032-0/+9
| | | | | | | | | | | | | | | | This commit adds support for the overload-general field to RouterDesc.
| * | | tor-netdoc: Add hibernating field to RouterDescClara Engler2026-06-032-0/+9
|/ / /
* | | Merge branch 'netdoc-unverified-trait-name' into 'main'Clara Engler2026-06-039-24/+25
|\ \ \ | | | | | | | | | | | | | | | | tor-netdoc Rename NetdocUnverified trait to NetdocParseableUnverified See merge request tpo/core/arti!4043
| * | | tor-netdoc: Add crate:: to docs xrefs to avoid broken linksIan Jackson2026-06-021-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Apparently, it is only correct to write [`NetdocParseableUnverified`](derive_deftly_template_NetdocParseableUnverified), *after* the definition of that template. Before then, the macro isn't in scope. Worse, rustdoc just treats it as a filename and doesn't spot the link, so you don't get any kind of warning. I think this is an upstream bug, https://github.com/rust-lang/rust/issues/157304 I found rustdoc's behaviour capricious. I don't intend to go through the arti tree right now looking for similar patterns. Instead let's hope the upstream bug gets fixed, and in the meantime do this crate:: thing when we notice we need it.
| * | | tor-netdoc: Rename NetdocUnverified trait to NetdocParseableUnverified (fmt)Ian Jackson2026-06-022-6/+6
| | | |
| * | | tor-netdoc: Rename NetdocUnverified trait to NetdocParseableUnverifiedIan Jackson2026-06-029-18/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The NetdocParseableUnverified derive macro implements this trait (amongst other things). Traits and derive macros should have aligned names. This is only used for parsing, so let's keep the "Parseable" part of the name. I don't think the effort of deprecated alias, for downstream compatibility, is worth it, our compatibility policy notwithstanding.
| * | | tor-netdoc: Fix two references to NetdocUnverified d-d templateIan Jackson2026-06-021-2/+2
| |/ / | | | | | | | | | | | | | | | | | | The trait is called NetdocUnverified, but the template is NetdocParseableUnverified. This fixes a dead docs link (which somehow isn't spotted by rustdoc, but is instead taken to refer to a nonexistent file).
* | | Merge branch 'cargo-update' into 'main'Alexander Hansen Færøy2026-06-021-182/+182
|\ \ \ | | | | | | | | | | | | | | | | Run routine cargo update See merge request tpo/core/arti!4045
| * | | Downgrade filetime to 0.2.27Gabriela Moldovan2026-06-021-3/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Without this, the shadow integration tests fail because `touch_instance_dir()` isn't able to set the mtime on the state dir: ``` Err(Error { source: IoError(Os { code: 14, kind: Uncategorized, message: "Bad address" }), action: Initializing, resource: Directory { dir: "./hss/tgen_hs" } }) ``` I suspect switching to the stblib implementation of these functions in https://github.com/alexcrichton/filetime/pull/121 is what broke things for us. The new implementation calls into rust's `set_times()` impl, which calls the `utimensat64` libc function under the hood. I suspect the underlying syscall used by this function is not supported by shadow.
| * | | Run routine cargo updateGabriela Moldovan2026-06-021-201/+182
| |/ / | | | | | | | | | Part of #2599
* | | Merge branch 'ticket2501_01' into 'main'David Goulet2026-06-022-5/+81
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | proto: Fix inverted cert sig and AUTHENTICATE compare Closes #2501 and #2502 See merge request tpo/core/arti!4048
| * | | proto: add regression tests for verify_link_auth_certmoumenalaoui2026-06-021-0/+79
| | | | | | | | | | | | | | | | Signed-off-by: David Goulet <[email protected]>
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 10:53:05 +0000