aboutsummaryrefslogtreecommitdiff
path: root/Cargo.lock
Commit message (Collapse)AuthorAgeFilesLines
...
* | Upgrade rand dependency to 0.9.Nick Mathewson2025-03-181-58/+108
| | | | | | | | | | | | (Per discussion at #1774, we think the changes are acceptable.) This commit won't compile on its own; subsequent commits will fix it.
* | netdoc: Reject BOMs and NULs.Nick Mathewson2025-03-171-0/+1
|/ | | | | | | | | | | | Per <https://spec.torproject.org/dir-spec/netdoc.html>, our netdocs never have a BOM, and never have internal NULs. This makes Arti reject such documents. For arguments on why it's okay to increase parser strictness, see the (forthcoming) proposal 356 at torspec!342, and see older discussion at torspec#296. Closes #1739.
* cargo_audit: Bump ring to 0.17.13.Gabriela Moldovan2025-03-101-2/+2
| | | | | | | | | | | | | | | `ring` versions < 0.17.12 are affected by [RUSTSEC-2025-0009] (potential panic when overflow checks are enabled). I don't believe we are affected, because * we don't use `ring::aead::quic::HeaderProtectionKey::new_mask` * operations using `ring::aead::{AES_128_GCM, AES_256_GCM}` can panic only in very specific circumstances, namely when encrypting/decrypting 64 gigabytes of data in one go, if overflow checks are enabled (and Arti never buffers that much data) [RUSTSEC-2025-0009]: https://rustsec.org/advisories/RUSTSEC-2025-0009
* sqlite: Handle vanished blobs during consensus loadingNick Mathewson2025-03-051-0/+1
| | | | | | | | | Here we move the responsibility for removing ExtDoc entries for vanished blobs into the _caller_ of read_blob(): we want to tidy all such entries in one go. Unlike a (reverted) previous approach, this time we don't need a retry loop.
* Merge branch 'x509-signature-yeet' into 'main'Nick Mathewson2025-03-051-43/+146
|\ | | | | | | | | | | | | Switch from x509-signature to rustls-webpki when using rustls. Closes #1824 and #1854 See merge request tpo/core/arti!2816
| * Require rustls 0.23.20Nick Mathewson2025-03-041-0/+139
| | | | | | | | | | This is the version that introduces `root_hint_subjects()`, which we want our ServerCertVerifier to override.
| * rustls.rs: Replace x509-signature with rustls-webpkiNick Mathewson2025-03-041-43/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The x509-signature crate is archived, and won't see any more releases. Using it is tying us to ring 0.16 internally, which means we depend on two ring versions. Fortunately, rustls-webpki relaxes some of the earlier restrictions from the vanilla webpki crate, which means that its certificate parser now accepts C tor's oddball x509 certificates as valid. With this change, we can delegate to rustls's built-in signature-checking code, and we only have to override its certificate validation. (We still override it with a pile of comments about how we don't validate link certificates much.) I've had to include a few certificates: two are for tests, but one is needed as a placeholder, since we can't construct a rustls certificate validator without a root cert, even if we'll never use it. Closes #1824. Closes #1854.
* | tor-rtmocK; Detect wrong-context blocking_io and spawn_threadIan Jackson2025-03-041-0/+1
|/
* tor-congestion: remove crateSteven Engler2025-03-031-4/+0
|
* Bump arti to 1.4.1Nick Mathewson2025-03-031-1/+1
|
* Bump minor versions in tor-*, arti-*.Nick Mathewson2025-03-031-46/+46
|
* Bump patchlevel for safelog, retry-error, test-temp-dir.Nick Mathewson2025-03-031-3/+3
| | | | | These crates have upgraded to a newer derive_more, and have had no other changes.
* cargo: run 'cargo update' in preparation for releaseSteven Engler2025-02-271-112/+127
|
* Merge branch 'sync_datastream' into 'main'Nick Mathewson2025-02-271-0/+1
|\ | | | | | | | | | | | | Make DataStream, and its members, implement Sync. Closes #1859 See merge request tpo/core/arti!2808
| * Make DataStream, and its members, implement Sync.Nick Mathewson2025-02-261-0/+1
| | | | | | | | | | | | | | Also, use static_assertions to enforce that that they _stay_ Send+Sync. Closes #1859.
* | Merge branch 'reactor-confluxation' into 'main'gabi-2502025-02-271-0/+1
|\ \ | | | | | | | | | | | | tor-proto: Add ConfluxSet type in the reactor See merge request tpo/core/arti!2804
| * | tor-proto: Add a ConfluxSet type.Gabriela Moldovan2025-02-251-0/+1
| |/
* | Upgraede to der-parser 10Nick Mathewson2025-02-261-7/+7
| |
* | Upgrade to directories 6Nick Mathewson2025-02-261-3/+3
| |
* | Upgrade to derive_more 2Nick Mathewson2025-02-261-6/+6
| | | | | | | | | | This took a little refactoring, since derive_more::Foo no longer re-exports std::ops::Foo.
* | Upgrade to notify 8.Nick Mathewson2025-02-261-14/+11
|/
* Update to derive-deftly 1.0Ian Jackson2025-02-121-52/+93
| | | | | | | | | This is released now. Prepared with: cargo upgrade -i -p derive-deftly There is some new duplication now I think mostly because pwd-grp uses old derive-deftly.
* arti: upgrade 'hickory-proto' to 0.24.3Steven Engler2025-02-101-8/+8
| | | | This resolves RUSTSEC-2025-0006, which arti is not affected by.
* Bump minor version of fs-mistrustIan Jackson2025-02-071-1/+1
| | | | Fixes #1841.
* Merge branch 'versions' into 'main'Ian Jackson2025-02-061-47/+47
|\ | | | | | | | | Version bumps for 1.4.0 See merge request tpo/core/arti!2773
| * Version bumps to 0.27.0Ian Jackson2025-02-061-45/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | See Release.md. maint/list_crates | grep -P '^tor-|^arti-' | xargs -n1 nailing-cargo -Eu set-version --bump minor -p This completes the version bumps. The report of changed crates, before I started the release work, is: $ maint/changed_crates -v "arti-v$LAST_VERSION" oneshot-fused-workaround: No change. slotmap-careful: No change. test-temp-dir: No change. fslock-guard: No change. hashx: No change. equix: No change. tor-basic-utils: No change. caret: No change. fs-mistrust safelog: No change. retry-error: No change. tor-error tor-general-addr: No change. tor-geoip: No change. tor-rtcompat tor-rtmock tor-async-utils tor-config tor-config-path tor-rpc-connect tor-log-ratelim: No change. tor-rpcbase tor-memquota: No change. tor-units tor-llcrypto: No change. tor-protover: No change. tor-bytes tor-checkable: No change. tor-cert tor-key-forge tor-hscrypto: No change. tor-socksproto: No change. tor-linkspec: No change. tor-cell: No change. tor-proto tor-netdoc: No change. tor-consdiff: No change. tor-netdir tor-relay-selection: No change. tor-persist tor-chanmgr tor-ptmgr: No change. tor-guardmgr: No change. tor-circmgr tor-dirclient: No change. tor-dirmgr: No change. tor-keymgr tor-hsclient tor-hsservice tor-hsrproxy: No change. tor-relay-crypto arti-client arti-relay arti-rpcserver arti arti-rpc-client-core $
| * Bump arti crate version to 1.4.0Ian Jackson2025-02-061-1/+1
| | | | | | | | | | | | And the in-tree dependencies. cargo set-version --offline --bump minor -p fs-mistrust
| * fs-mistrust: bump minor version, and in-tree depsIan Jackson2025-02-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | There are new features. cargo set-version --offline --bump minor -p fs-mistrust Actually, I have discovered by diffing that some methods now take `&self` where previously they took `self`. This will need a further bump to the fs-mistrust version and a fix to the changelog. I will do that. Filed blocker ticket #1841 for it.
* | tor-keymgr: Define the test key constants using a macro.Gabriela Moldovan2025-02-061-0/+1
|/ | | | Closes #1396
* Upgrade to dirs 6Ian Jackson2025-02-051-12/+44
| | | | No code changes needed.
* Upgrade to axum 8Ian Jackson2025-02-051-8/+7
| | | | We use this in an example only.
* Upgrade to downcast-rs 2Ian Jackson2025-02-051-2/+2
| | | | No code changes needed.
* Routine cargo updateIan Jackson2025-02-051-267/+302
|
* Rewrite download manager exampletidely2025-02-041-12/+32
|
* fix RUSTSEC-2025-0004Dimitris Apostolou2025-02-031-4/+4
|
* rpc: Strengthen guarantees from Cancel.Nick Mathewson2025-01-161-0/+1
| | | | | | | | | | | Cancellation is now fallable, which allows us to detect attempts to cancel which cannot work. We now guarantee that when you try to cancel a `Cancel<F>` future, either the cancel operation will succeed, or the future will return (or will have already returned) Ok(), but not both, and not neither. Closes #818.
* Bring back tor-congestion empty with a tombstoneDavid Goulet2025-01-161-0/+4
| | | | Signed-off-by: David Goulet <[email protected]>
* congestion: Make the cc_alg values a caret_int for better code semanticDavid Goulet2025-01-161-0/+1
| | | | Signed-off-by: David Goulet <[email protected]>
* circmgr: Modify CircParameters for congestion controlDavid Goulet2025-01-161-0/+1
| | | | | | | | | | | | | | The congestion control parameters are created from the consensus parameters (netparams) and then put into the CircParameters object that is then passed down the tor-proto crate. Because different parameters are selected depending on the circuit type (onion vs exit vs sbws), a CircuitType enum is introduced for the sole purpose of being used to select the right parameters. Related #534 Signed-off-by: David Goulet <[email protected]>
* crates: Remove tor-congestionDavid Goulet2025-01-161-10/+0
| | | | | | | | | Crate is unused and most of its code will be reworked and folded into tor-proto in the future commit with the Congestion Control work. Related #534 Signed-off-by: David Goulet <[email protected]>
* Merge branch 'rpc-cookie' into 'main'Nick Mathewson2025-01-151-0/+5
|\ | | | | | | | | | | | | RPC: Implement cookie authentication Closes #1529 See merge request tpo/core/arti!2702
| * arti-rpcserver: Tell connections what kind of auth to expect.Nick Mathewson2025-01-151-0/+1
| |
| * tor-rpc-connect: Cryptographic support for cookie auth.Nick Mathewson2025-01-151-0/+4
| | | | | | | | Conforms to rpc-cookie-sketch.md.
* | tor-proto: Remove dependency on tor-netdir.Gabriela Moldovan2025-01-151-2/+1
| | | | | | | | | | | | | | | | This moves the `NetParameters -> KistParams` conversion to `tor-chanmgr`. Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2706#note_3147557
* | tor-proto: Replace constants with caret_int.Gabriela Moldovan2025-01-151-0/+1
| |
* | tor-rtcompat: Implement StreamOps for Framed.Gabriela Moldovan2025-01-151-0/+1
| |
* | tor-proto: Add KistParams type built from NetParameters.Gabriela Moldovan2025-01-151-0/+2
|/ | | | | | | | Note: this commit makes `tor-proto` depend on `tor-netdir` (because it adds a `KistParams` type that is buildable from `NetParameters`, which is defined in `tor-netdir`). Closes #1729
* tor-proto: Add traced_test to test casesIan Jackson2025-01-151-0/+1
| | | | (We don't add it to the handful of unit tests that don't use an executor.)
* tor-relay-crypto: Implement ToEncodableCert for the relay cert types.Gabriela Moldovan2025-01-131-0/+2
| | | | Closes #1777
* tor-key-forge: Fill out the InvalidCertError type.Gabriela Moldovan2025-01-131-0/+1
| | | | We'll soon use this.
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 15:13:39 +0000