| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | rpc-connect: remove todo; confirm that we do want to mkdir. | Nick Mathewson | 2025-01-27 | 1 | -1/+1 | |
| | | ||||||
| * | rpc-connect: Detect and decline connpts with invalid "auth" feields | Nick Mathewson | 2025-01-27 | 3 | -20/+18 | |
| | | ||||||
| * | rpc-connect: Abort on misformed cookie file, and explain why. | Nick Mathewson | 2025-01-27 | 1 | -6/+3 | |
| | | ||||||
| * | rpc-connect: Use file_access() API, and permit symlinks. | Nick Mathewson | 2025-01-27 | 2 | -17/+20 | |
| | | ||||||
| * | Merge branch 'rpc-connect-clarify' into 'main' | Nick Mathewson | 2025-01-16 | 1 | -0/+9 | |
| |\ | | | | | | | | | | | | | rpc: Clarify and fix some issues surrounding relative paths. Closes #1748 and #1749 See merge request tpo/core/arti!2712 | |||||
| | * | rpc: Reject relative unix paths. | Nick Mathewson | 2025-01-15 | 1 | -0/+9 | |
| | | | ||||||
| * | | rpc: Document windows USER_DEFAULT connect point. | Nick Mathewson | 2025-01-15 | 1 | -1/+0 | |
| | | | ||||||
| * | | rpc: Expose Cookie::load unconditionally. | Nick Mathewson | 2025-01-15 | 1 | -2/+0 | |
| | | | ||||||
| * | | rpc: Use symbolic constants for nonce/mac lengths. | Nick Mathewson | 2025-01-15 | 1 | -7/+14 | |
| | | | ||||||
| * | | rpc: Tests for cookie nonce/mac encoding/decoding. | Nick Mathewson | 2025-01-15 | 1 | -2/+46 | |
| | | | | | | | | | Also fix a bug in decoding, where we accepted too-short strings. | |||||
| * | | rpc: Refactor Cookie and UnloadedCookie into a single type. | Nick Mathewson | 2025-01-15 | 3 | -18/+33 | |
| | | | ||||||
| * | | rpc: consolodate naming of "inherent" auth. | Nick Mathewson | 2025-01-15 | 3 | -4/+5 | |
| | | | | | | | | | | | | | | | | | | | We don't want to call this "unix path" anywhere, since it corresponds to _any_ case where the ability to negotiate a successful connection means that the client is authorized. We also don't want to call it "none": The authentication is inherent to the connection, not nonexistent. | |||||
| * | | rpc: Tweak cookie protocol to bind both nonces. | Nick Mathewson | 2025-01-15 | 1 | -2/+8 | |
| | | | | | | | | | | | | | | | | | | | | | Previously participants in the cookie protocol only bound the peer nonce in their MACs. With this change, they bind both nonces. This change is _probably_ not necessary for security, but it can't hurt. It follows a general principle that Adam Langley told me a long time ago: you won't regret binding more, but you might regret binding less. | |||||
| * | | rpc: Keep Cookie in an Arc. | Nick Mathewson | 2025-01-15 | 2 | -3/+9 | |
| | | | | | | | | | | | Since this is a secret value, it's probably best not to copy it all over the place. | |||||
| * | | arti-rpcserver: Server side of cookie auth. | Nick Mathewson | 2025-01-15 | 1 | -2/+25 | |
| | | | ||||||
| * | | tor-rpc-connect: Cryptographic support for cookie auth. | Nick Mathewson | 2025-01-15 | 2 | -5/+216 | |
| | | | | | | | | | Conforms to rpc-cookie-sketch.md. | |||||
| * | | tor-rpc-connect: defer loading auth cookies on the client side. | Nick Mathewson | 2025-01-15 | 3 | -6/+37 | |
| | | | | | | | | | | | We want to load cookies only after we've connected and gotten a banner. | |||||
| * | | tor-rpc-connect: move cookie auth support to its own module. | Nick Mathewson | 2025-01-15 | 5 | -171/+172 | |
| |/ | ||||||
| * | Bump versions of internal arti crates for Arti 1.3.2 | Nick Mathewson | 2025-01-07 | 1 | -5/+5 | |
| | | | | | | | | | | | | | | The affected crates follow our regular versioning. They all get bumped to 0.26.0. Done with ``` for crate in $(./maint/list_crates |grep '^arti-\|tor-' ); do cargo set-version --bump minor -p $crate; done ``` | |||||
| * | Merge branch 'mod-module-files' into 'main' | Nick Mathewson | 2025-01-07 | 1 | -0/+1 | |
| |\ | | | | | | | | | clippy: deny `mod_module_files` See merge request tpo/core/arti!2689 | |||||
| | * | clippy: deny `mod_module_files` | Steven Engler | 2025-01-06 | 1 | -0/+1 | |
| | | | | | | | | | | | | | Denies 'mod.rs' files for consistency. https://rust-lang.github.io/rust-clippy/master/index.html#mod_module_files | |||||
| * | | fix: fix typos | Dimitris Apostolou | 2025-01-06 | 1 | -1/+1 | |
| | | | ||||||
| * | | Merge branch 'bug1776' into 'main' | Nick Mathewson | 2025-01-06 | 1 | -1/+0 | |
| |\ \ | |/ |/| | | | | | | | | | rpc-connect: Remove cfg(unix) of SYSTEM_DEFAULT_CONNECT_POINT Closes #1776 See merge request tpo/core/arti!2667 | |||||
| | * | rpc-connect: Remove cfg(unix) of SYSTEM_DEFAULT_CONNECT_POINT | Nick Mathewson | 2024-12-11 | 1 | -1/+0 | |
| | | | | | | | | | | | | | | | When we switched this definition to use `cfg_if`, we overlooked the `#[cfg(unix)]`. Fixes #1776. | |||||
| * | | Run "fixup-features" in preparation for release. | Nick Mathewson | 2025-01-06 | 1 | -1/+1 | |
| | | | ||||||
| * | | Rename Guard=>ListenerGuard. | Nick Mathewson | 2024-12-19 | 1 | -4/+4 | |
| | | | ||||||
| * | | rpc-connect: Explain locking rationale better. | Nick Mathewson | 2024-12-19 | 1 | -3/+12 | |
| | | | ||||||
| * | | rpc-connect: Use try_lock when acquiring fslock | Nick Mathewson | 2024-12-19 | 2 | -1/+9 | |
| | | | | | | | | | | | This lets us bail when another process has bound to our connect point, rather than blocking indefinitely. | |||||
| * | | connpt: Make unix socket handling more robust. | Nick Mathewson | 2024-12-19 | 4 | -21/+70 | |
| | | | | | | | | | | | | | | | | | | | | | Grab an associated lock file... - ... then delete the socket file (if it's present) ... - ... then bind to it. On exit: - remove the socket - then drop the lock. | |||||
| * | | rpc-connect: Make LoadOptions buildable. | Nick Mathewson | 2024-12-19 | 2 | -1/+3 | |
| | | | ||||||
| * | | rpc-connect: fix another very typoed line | Nick Mathewson | 2024-12-19 | 1 | -1/+1 | |
| |/ | ||||||
| * | connpt: note an opportunity to save some fds. | Nick Mathewson | 2024-12-09 | 1 | -0/+3 | |
| | | ||||||
| * | connpt: use cfg-if to declare connect point defaults. | Nick Mathewson | 2024-12-09 | 2 | -20/+28 | |
| | | ||||||
| * | connpts: duplicate socket before returning. | Nick Mathewson | 2024-12-09 | 1 | -15/+24 | |
| | | | | | | (We want a separate read and write socket before we return, and once we've done the type-erasure, we can't do try_clone().) | |||||
| * | connpts: Add default connect points as constants. | Nick Mathewson | 2024-12-09 | 1 | -0/+60 | |
| | | ||||||
| * | add_warnings, *: Allow clippy::needless_lifetimes | Nick Mathewson | 2024-12-03 | 1 | -0/+1 | |
| | | | | | | | | | In 1.83, this warning triggers on many of our crates. We're thinking of fixing them all, but for now, we're going to disable the warning. This is part of #1765. | |||||
| * | Bump all the unstable tor- and arti- crates to 0.25.0. | Gabriela Moldovan | 2024-12-02 | 1 | -5/+5 | |
| | | | | | | | | | | | Done using: ``` for crate in $(./maint/list_crates | rg '^(tor|arti-)'); do cargo set-version -p $crate 0.25.0 done ``` | |||||
| * | Bump the versions of the non-{arti-,tor-} crates. | Gabriela Moldovan | 2024-12-02 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The non-{arti-,tor-} crates are: ``` ./maint/list_crates | rg -v '^(tor|arti)' oneshot-fused-workaround slotmap-careful test-temp-dir fslock-guard hashx equix caret fs-mistrust safelog retry-error ``` We split them in the following categories: * crates with no changes (no version bumps): ``` maint/changed_crates -v "arti-v$LAST_VERSION" 2>&1 >/dev/null | grep -i "no change" | grep -v '\(tor\|arti\)-' oneshot-fused-workaround: No change. test-temp-dir: No change. caret: No change. ``` * crates that only have non-functional changes (bump the patch version): - slotmap-careful - fslock-guard - hashx - equix - fs-mistrust - safelog - retry-error * crates where APIs were broken (bump minor): None The bumps from this commit were created using this script: ``` PATCH=" slotmap-careful fslock-guard hashx equix fs-mistrust safelog retry-error " for crate in $PATCH; do cargo set-version --bump patch -p $crate; done ``` | |||||
| * | Fix several Cargo.tomls to satisfy cargo-sort. | Gabriela Moldovan | 2024-12-02 | 1 | -1/+1 | |
| | | ||||||
| * | Run fixup-features in preparation for release (fmt). | Gabriela Moldovan | 2024-12-02 | 1 | -1/+10 | |
| | | ||||||
| * | Run fixup-features in preparation for release. | Gabriela Moldovan | 2024-12-02 | 1 | -1/+1 | |
| | | ||||||
| * | tor-rpc-connect: Bump thiserror to 2. | Gabriela Moldovan | 2024-11-28 | 1 | -1/+1 | |
| | | ||||||
| * | connect point: Use new CfgPathResolver api. | Nick Mathewson | 2024-11-19 | 1 | -12/+22 | |
| | | ||||||
| * | connect point: handle unrecognized auth variants. | Nick Mathewson | 2024-11-19 | 3 | -6/+39 | |
| | | ||||||
| * | Connect point: Improve robustness against new SocketAddr variants | Nick Mathewson | 2024-11-19 | 1 | -2/+10 | |
| | | ||||||
| * | connect point: add a test for ConflictingMembers. | Nick Mathewson | 2024-11-19 | 1 | -0/+13 | |
| | | ||||||
| * | connect-point: Rename Reps to Addresses. | Nick Mathewson | 2024-11-19 | 1 | -7/+7 | |
| | | ||||||
| * | connect point: Add server support. | Nick Mathewson | 2024-11-19 | 2 | -0/+71 | |
| | | | | | | ("Server support" here means binding to a socket and reading a cookie file.) | |||||
| * | connect point: Add client support. | Nick Mathewson | 2024-11-19 | 3 | -0/+182 | |
| | | | | | | ("Client support" here means connecting to a socket and reading a cookie file.) | |||||
| * | connect point: Treat unrecognized auth types as Decline. | Nick Mathewson | 2024-11-19 | 1 | -0/+9 | |
| | | ||||||
