| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
| |
Typos found with codespell
|
| |
|
|
|
|
|
|
|
| |
This way we get the whole task job to be aligned on one single now value
to avoid potential inconsistencies between expiry and key generation.
Fixes #2404
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
|
|
| |
Tests the key rotation code.
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
| |
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
|
|
| |
This way we can unit tests properly.
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This is almost a full rewrite of the crypto task which was needed in
order to support our relay signing certificate to be put in the keystore
which will be needed for the offline key feature.
Instead of having rotate_key() do all the things, we now instead do two
pass:
1. Remove all expired keys and certs.
2. Generate any missing keys.
This still results in using the minimum valid_until of all our keys for
the task sleep time.
We can know cleanup the local trait used for this gymnastic and trade it
for some more KeyMgr gymnastic.
Fixes #2404
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
| |
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
| |
Signed-off-by: David Goulet <[email protected]>
|
| | |
|
| |
|
|
|
|
|
| |
Before this commit, we would use the RsaIdentity which is a SHA1 digest.
We do the same for the peer RSA key.
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
| |
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
|
|
| |
No need to pass from the arti relay binary our addresses when handling
an incoming channel, use the one in the channel builder that an
initiator channel uses.
|
| |
|
|
| |
Signed-off-by: David Goulet <[email protected]>
|
| | |
|
| | |
|
| |
|
|
| |
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
| |
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
| |
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
| |
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
| |
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
|
|
|
| |
This required to add a slight helper to our tor-key-forge RSA key d-d
macro to access the inner keypair. This avoids a clone.
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
|
|
|
| |
Move rotating keys into a function so we can use it in
try_generate_keys() that is used at startup.
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
This task crypto module has a rotate key task that is in charge of
rotating keys from our KeyMgr based on the valid until.
To do so, we add a RotatableKeySpec trait to help us specify our to
rotate a specific key. Allows us to have a generic rotate/generate
function for all our keys.
Task runs every 60 seconds. Taken from C-tor.
Signed-off-by: David Goulet <[email protected]>
|
| |
|
|
| |
See https://gitlab.torproject.org/tpo/core/arti/-/issues/2329
|
| |
|
|
| |
The code here is still WIP, no need to apply the lint yet.
|
| |\
| |
| |
| |
| | |
proto: Implement relay responder handshake and finalize it for both handshakes
See merge request tpo/core/arti!3596
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
We need the advertised addresses for the NETINFO cell when opening a
relay channel. Keep them in the TorRelay object so we can pass them to
the ChanMgr channel handler.
This will also help with config reload where only the local values in
TorRelay will need to be updated.
Signed-off-by: David Goulet <[email protected]>
|
| |/ |
|
| | |
|
| |
|
|
|
| |
For incoming connections, wrap the peer address in `Sensitive` as it
could be a client.
|
| |
|
|
|
| |
This does not yet get the OR port from the config, and the channel
manager doesn't yet do anything with the incoming connection.
|
| | |
|
|
|
This is a background task in charge of expiring closing channels and
future work is to also prune duplicate channels.
This is not used nor called at this commit, next commit will add the
task handling.
Part of #2217
Signed-off-by: David Goulet <[email protected]>
|