summaryrefslogtreecommitdiff
path: root/Cargo.lock
Commit message (Collapse)AuthorAgeFilesLines
...
* cargo_audit: Bump ring to 0.17.13.Gabriela Moldovan2025-03-101-2/+2
| | | | | | | | | | | | | | | `ring` versions < 0.17.12 are affected by [RUSTSEC-2025-0009] (potential panic when overflow checks are enabled). I don't believe we are affected, because * we don't use `ring::aead::quic::HeaderProtectionKey::new_mask` * operations using `ring::aead::{AES_128_GCM, AES_256_GCM}` can panic only in very specific circumstances, namely when encrypting/decrypting 64 gigabytes of data in one go, if overflow checks are enabled (and Arti never buffers that much data) [RUSTSEC-2025-0009]: https://rustsec.org/advisories/RUSTSEC-2025-0009
* sqlite: Handle vanished blobs during consensus loadingNick Mathewson2025-03-051-0/+1
| | | | | | | | | Here we move the responsibility for removing ExtDoc entries for vanished blobs into the _caller_ of read_blob(): we want to tidy all such entries in one go. Unlike a (reverted) previous approach, this time we don't need a retry loop.
* Merge branch 'x509-signature-yeet' into 'main'Nick Mathewson2025-03-051-43/+146
|\ | | | | | | | | | | | | Switch from x509-signature to rustls-webpki when using rustls. Closes #1824 and #1854 See merge request tpo/core/arti!2816
| * Require rustls 0.23.20Nick Mathewson2025-03-041-0/+139
| | | | | | | | | | This is the version that introduces `root_hint_subjects()`, which we want our ServerCertVerifier to override.
| * rustls.rs: Replace x509-signature with rustls-webpkiNick Mathewson2025-03-041-43/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The x509-signature crate is archived, and won't see any more releases. Using it is tying us to ring 0.16 internally, which means we depend on two ring versions. Fortunately, rustls-webpki relaxes some of the earlier restrictions from the vanilla webpki crate, which means that its certificate parser now accepts C tor's oddball x509 certificates as valid. With this change, we can delegate to rustls's built-in signature-checking code, and we only have to override its certificate validation. (We still override it with a pile of comments about how we don't validate link certificates much.) I've had to include a few certificates: two are for tests, but one is needed as a placeholder, since we can't construct a rustls certificate validator without a root cert, even if we'll never use it. Closes #1824. Closes #1854.
* | tor-rtmocK; Detect wrong-context blocking_io and spawn_threadIan Jackson2025-03-041-0/+1
|/
* tor-congestion: remove crateSteven Engler2025-03-031-4/+0
|
* Bump arti to 1.4.1Nick Mathewson2025-03-031-1/+1
|
* Bump minor versions in tor-*, arti-*.Nick Mathewson2025-03-031-46/+46
|
* Bump patchlevel for safelog, retry-error, test-temp-dir.Nick Mathewson2025-03-031-3/+3
| | | | | These crates have upgraded to a newer derive_more, and have had no other changes.
* cargo: run 'cargo update' in preparation for releaseSteven Engler2025-02-271-112/+127
|
* Merge branch 'sync_datastream' into 'main'Nick Mathewson2025-02-271-0/+1
|\ | | | | | | | | | | | | Make DataStream, and its members, implement Sync. Closes #1859 See merge request tpo/core/arti!2808
| * Make DataStream, and its members, implement Sync.Nick Mathewson2025-02-261-0/+1
| | | | | | | | | | | | | | Also, use static_assertions to enforce that that they _stay_ Send+Sync. Closes #1859.
* | Merge branch 'reactor-confluxation' into 'main'gabi-2502025-02-271-0/+1
|\ \ | | | | | | | | | | | | tor-proto: Add ConfluxSet type in the reactor See merge request tpo/core/arti!2804
| * | tor-proto: Add a ConfluxSet type.Gabriela Moldovan2025-02-251-0/+1
| |/
* | Upgraede to der-parser 10Nick Mathewson2025-02-261-7/+7
| |
* | Upgrade to directories 6Nick Mathewson2025-02-261-3/+3
| |
* | Upgrade to derive_more 2Nick Mathewson2025-02-261-6/+6
| | | | | | | | | | This took a little refactoring, since derive_more::Foo no longer re-exports std::ops::Foo.
* | Upgrade to notify 8.Nick Mathewson2025-02-261-14/+11
|/
* Update to derive-deftly 1.0Ian Jackson2025-02-121-52/+93
| | | | | | | | | This is released now. Prepared with: cargo upgrade -i -p derive-deftly There is some new duplication now I think mostly because pwd-grp uses old derive-deftly.
* arti: upgrade 'hickory-proto' to 0.24.3Steven Engler2025-02-101-8/+8
| | | | This resolves RUSTSEC-2025-0006, which arti is not affected by.
* Bump minor version of fs-mistrustIan Jackson2025-02-071-1/+1
| | | | Fixes #1841.
* Merge branch 'versions' into 'main'Ian Jackson2025-02-061-47/+47
|\ | | | | | | | | Version bumps for 1.4.0 See merge request tpo/core/arti!2773
| * Version bumps to 0.27.0Ian Jackson2025-02-061-45/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | See Release.md. maint/list_crates | grep -P '^tor-|^arti-' | xargs -n1 nailing-cargo -Eu set-version --bump minor -p This completes the version bumps. The report of changed crates, before I started the release work, is: $ maint/changed_crates -v "arti-v$LAST_VERSION" oneshot-fused-workaround: No change. slotmap-careful: No change. test-temp-dir: No change. fslock-guard: No change. hashx: No change. equix: No change. tor-basic-utils: No change. caret: No change. fs-mistrust safelog: No change. retry-error: No change. tor-error tor-general-addr: No change. tor-geoip: No change. tor-rtcompat tor-rtmock tor-async-utils tor-config tor-config-path tor-rpc-connect tor-log-ratelim: No change. tor-rpcbase tor-memquota: No change. tor-units tor-llcrypto: No change. tor-protover: No change. tor-bytes tor-checkable: No change. tor-cert tor-key-forge tor-hscrypto: No change. tor-socksproto: No change. tor-linkspec: No change. tor-cell: No change. tor-proto tor-netdoc: No change. tor-consdiff: No change. tor-netdir tor-relay-selection: No change. tor-persist tor-chanmgr tor-ptmgr: No change. tor-guardmgr: No change. tor-circmgr tor-dirclient: No change. tor-dirmgr: No change. tor-keymgr tor-hsclient tor-hsservice tor-hsrproxy: No change. tor-relay-crypto arti-client arti-relay arti-rpcserver arti arti-rpc-client-core $
| * Bump arti crate version to 1.4.0Ian Jackson2025-02-061-1/+1
| | | | | | | | | | | | And the in-tree dependencies. cargo set-version --offline --bump minor -p fs-mistrust
| * fs-mistrust: bump minor version, and in-tree depsIan Jackson2025-02-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | There are new features. cargo set-version --offline --bump minor -p fs-mistrust Actually, I have discovered by diffing that some methods now take `&self` where previously they took `self`. This will need a further bump to the fs-mistrust version and a fix to the changelog. I will do that. Filed blocker ticket #1841 for it.
* | tor-keymgr: Define the test key constants using a macro.Gabriela Moldovan2025-02-061-0/+1
|/ | | | Closes #1396
* Upgrade to dirs 6Ian Jackson2025-02-051-12/+44
| | | | No code changes needed.
* Upgrade to axum 8Ian Jackson2025-02-051-8/+7
| | | | We use this in an example only.
* Upgrade to downcast-rs 2Ian Jackson2025-02-051-2/+2
| | | | No code changes needed.
* Routine cargo updateIan Jackson2025-02-051-267/+302
|
* Rewrite download manager exampletidely2025-02-041-12/+32
|
* fix RUSTSEC-2025-0004Dimitris Apostolou2025-02-031-4/+4
|
* rpc: Strengthen guarantees from Cancel.Nick Mathewson2025-01-161-0/+1
| | | | | | | | | | | Cancellation is now fallable, which allows us to detect attempts to cancel which cannot work. We now guarantee that when you try to cancel a `Cancel<F>` future, either the cancel operation will succeed, or the future will return (or will have already returned) Ok(), but not both, and not neither. Closes #818.
* Bring back tor-congestion empty with a tombstoneDavid Goulet2025-01-161-0/+4
| | | | Signed-off-by: David Goulet <[email protected]>
* congestion: Make the cc_alg values a caret_int for better code semanticDavid Goulet2025-01-161-0/+1
| | | | Signed-off-by: David Goulet <[email protected]>
* circmgr: Modify CircParameters for congestion controlDavid Goulet2025-01-161-0/+1
| | | | | | | | | | | | | | The congestion control parameters are created from the consensus parameters (netparams) and then put into the CircParameters object that is then passed down the tor-proto crate. Because different parameters are selected depending on the circuit type (onion vs exit vs sbws), a CircuitType enum is introduced for the sole purpose of being used to select the right parameters. Related #534 Signed-off-by: David Goulet <[email protected]>
* crates: Remove tor-congestionDavid Goulet2025-01-161-10/+0
| | | | | | | | | Crate is unused and most of its code will be reworked and folded into tor-proto in the future commit with the Congestion Control work. Related #534 Signed-off-by: David Goulet <[email protected]>
* Merge branch 'rpc-cookie' into 'main'Nick Mathewson2025-01-151-0/+5
|\ | | | | | | | | | | | | RPC: Implement cookie authentication Closes #1529 See merge request tpo/core/arti!2702
| * arti-rpcserver: Tell connections what kind of auth to expect.Nick Mathewson2025-01-151-0/+1
| |
| * tor-rpc-connect: Cryptographic support for cookie auth.Nick Mathewson2025-01-151-0/+4
| | | | | | | | Conforms to rpc-cookie-sketch.md.
* | tor-proto: Remove dependency on tor-netdir.Gabriela Moldovan2025-01-151-2/+1
| | | | | | | | | | | | | | | | This moves the `NetParameters -> KistParams` conversion to `tor-chanmgr`. Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2706#note_3147557
* | tor-proto: Replace constants with caret_int.Gabriela Moldovan2025-01-151-0/+1
| |
* | tor-rtcompat: Implement StreamOps for Framed.Gabriela Moldovan2025-01-151-0/+1
| |
* | tor-proto: Add KistParams type built from NetParameters.Gabriela Moldovan2025-01-151-0/+2
|/ | | | | | | | Note: this commit makes `tor-proto` depend on `tor-netdir` (because it adds a `KistParams` type that is buildable from `NetParameters`, which is defined in `tor-netdir`). Closes #1729
* tor-proto: Add traced_test to test casesIan Jackson2025-01-151-0/+1
| | | | (We don't add it to the handful of unit tests that don't use an executor.)
* tor-relay-crypto: Implement ToEncodableCert for the relay cert types.Gabriela Moldovan2025-01-131-0/+2
| | | | Closes #1777
* tor-key-forge: Fill out the InvalidCertError type.Gabriela Moldovan2025-01-131-0/+1
| | | | We'll soon use this.
* tor-keymgr: Fix cert handling tests.Gabriela Moldovan2025-01-131-0/+2
| | | | | | This updates and reenables the cert management tests. Part of #1768
* tor-keymgr: Add cert parse error variant.Gabriela Moldovan2025-01-131-0/+2
| | | | | | | This will soon be used, when we modify the `ArtiNativeKeystore` cert lookup code to actually parse certificates before returning them. Part of #1768