summaryrefslogtreecommitdiff
path: root/crates
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | keymgr: Abolish KeyCertificateSpecifier::signing_key_specifier()Gabriela Moldovan2026-03-125-61/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | We need to be able to parse KeyPaths into KeyCertificateSpecifier, and we can't do that if the signing key is part of the cert specifier (because the signing key doesn't get encoded in the key path, unlike the subject key, which does)
* | | | keymgr: Add a new trait for cert specifier patternsGabriela Moldovan2026-03-122-0/+31
|/ / / | | | | | | | | | | | | These are significantly different from `KeySpecifierPattern`s, so it's best to have a separate trait.
* | | Merge branch 'flags-url' into 'main'Clara Engler2026-03-121-0/+3
|\ \ \ | | | | | | | | | | | | | | | | tor-netdir: Add spec link to flag descriptions See merge request tpo/core/arti!3768
| * | | tor-netdir: Add spec link to flag descriptionsIan Jackson2026-03-111-0/+3
| |/ /
* | | cert-x509: Generate TLS certs with RSA2048 subject keysNick Mathewson2026-03-111-4/+20
| | | | | | | | | | | | | | | | | | | | | We'd rather use p256, but unfortunately C tor has a bug when TLS cert subject keys are not RSA: see tor#41226. Closes #2403.
* | | Merge branch 'anon-request' into 'main'Ian Jackson2026-03-111-3/+44
|\ \ \ | | | | | | | | | | | | | | | | tor-dirclient: Attempt to explain AnonymizedRequest See merge request tpo/core/arti!3767
| * | | tor-dirclient: Use US spellingIan Jackson2026-03-111-6/+6
| | | |
| * | | tor-dirclient: Attempt to explain AnonymizedRequestIan Jackson2026-03-111-3/+44
| |/ /
* | | Merge branch 'cert-denotators2' into 'main'Ian Jackson2026-03-114-30/+143
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | keymgr: Update cert ArtiPath building to use denotator sets Closes #2377 See merge request tpo/core/arti!3754
| * | | keymgr: Do not elide leading empty denotator groupsGabriela Moldovan2026-03-051-2/+5
| | | | | | | | | | | | | | | | Addresses https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/3754#note_3361904
| * | | keymgr: Replace literal value with constantGabriela Moldovan2026-03-051-1/+1
| | | |
| * | | keymgr: Add test for paths with empty denotator groups (fmt)Gabriela Moldovan2026-03-051-1/+4
| | | |
| * | | keymgr: Add test for paths with empty denotator groupsGabriela Moldovan2026-03-051-0/+12
| | | |
| * | | keymgr: Add more tests for cert ArtiPath construction (fmt)Gabriela Moldovan2026-03-052-9/+9
| | | |
| * | | keymgr: Add more tests for cert ArtiPath constructionGabriela Moldovan2026-03-051-2/+17
| | | | | | | | | | | | | | | | | | | | This commit is intentionally misindented to make reviewing the diff a bit easier.
| * | | keymgr: Update cert ArtiPath building to use denotator groupsGabriela Moldovan2026-03-051-7/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In a certificate's `ArtiPath`, the `ArtiPath` of the subject key is now separated from the certificate denotators by `@`. This will enable us to derive the subject key `ArtiPath` from the `ArtiPath` of its certificate. In practice, this change is a no-op for the relay implementation, because none of our certificates have certificate denotators. For instance, the `ArtiPath` of the for the `KP_relaysign_ed` certificate (`KP_relaysign_ed` signed with `KS_relayid_ed`) is of the form `relay/relaysign_ed+<valid_until>` (the only denotators here are the denotators of the subject key). It's important to note that the certifying key is not encoded in the `ArtiPath` of the certificate. The implication is that if we'll ever need to have multiple certs for the same subject key, signed with different with different certifying keys, those certificates will be distinguished by their certificate denotator group. So if we ever need a second certificate for `KP_relaysign_ed`, certified with something other than `KP_relaysign_ed`, it will need to be of the form `relay/relaysign_ed+<valid_until>@<CERT_DENOS>`, where `<CERT_DENOS>` is a list of `+`-separated certificate denotators. Closes #2377
| * | | keymgr: Support having multiple denotator groups within an ArtiPathGabriela Moldovan2026-03-052-4/+14
| | | | | | | | | | | | | | | | | | | | | | | | This will enable us to parse certificate paths that consist of the `ArtiPath` of the subject key, followed by the denotator group of the certificate.
| * | | keymgr: Move denotator group validation to a separate functionGabriela Moldovan2026-03-051-3/+10
| | | |
| * | | keymgr: Update ArtiPath docs with the new denotator rulesGabriela Moldovan2026-03-051-3/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This introduces the concept of a "denotator group", and new syntax for separating denotator groups within an ArtiPath. The implementation will follow in a separate commit.
| * | | keymgr: Implement KeySpecifier for KeyCertificateSpecifiersGabriela Moldovan2026-03-052-5/+39
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | `KeyCertificateSpecifiers` have an `ArtiPath`, so it's only natural to retrieve it via this new `KeySpecifier` implementation. This replaces the old, ad-hoc `ArtiPath` building from the `KeyMgr` implementation: IMO, the `KeyMgr` impl is the wrong place to build these `ArtiPath`s (ideally they should remain opaque to the `KeyMgr`).
* | | | Merge branch 'netdir-exit-flag' into 'main'Ian Jackson2026-03-111-0/+4
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | tor-netdir: Add is_flagged_exit() to RelayDetails See merge request tpo/core/arti!3752
| * | | | tor-netdir: Simply exit documentationClara Engler2026-03-091-7/+0
| | | | | | | | | | | | | | | | | | | | No need to over-engineer this, let's keep it simple.
| * | | | tor-netdir: Add is_flagged_exit() to RelayDetailsClara Engler2026-03-051-0/+11
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit adds a method called `is_flagged_exit` to `RelayDetails` in order to check whether the node is considered to be usable as an exit or not. In the Tor VPN app, we need this feature for generating a list of exit relays (per country). Right now, we do this in an incorrect way by only checking on whether port 443 is in the exit policy, which is not a sufficient criteria.
* | | | Merge branch 'rpc_stop_writing' into 'main'Ian Jackson2026-03-111-0/+4
|\ \ \ \ | |_|/ / |/| | | | | | | | | | | rpc: Fix a bug related to stop_writing See merge request tpo/core/arti!3762
| * | | rpc: Actually call the stop_writing method when data is all written!Nick Mathewson2026-03-101-0/+4
| | | | | | | | | | | | | | | | | | | | Without this, the poll() method wouldn't actually perform as advertised.
* | | | Merge branch 'keymgr-test-cleanup' into 'main'David Goulet2026-03-101-212/+182
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | keymgr: Test helper cleanup See merge request tpo/core/arti!3761
| * | | | keymgr: Remove unnecessary TestItem building (fmt)Gabriela Moldovan2026-03-101-1/+4
| | | | |
| * | | | keymgr: Remove unnecessary TestItem buildingGabriela Moldovan2026-03-101-4/+1
| | | | |
| * | | | keymgr: Remove unnecessary parenthesesGabriela Moldovan2026-03-101-1/+1
| | | | | | | | | | | | | | | | | | | | Resolves a clippy warning.
| * | | | keymgr: Replace .find(...).is_some() with .any() (fmt)Gabriela Moldovan2026-03-101-9/+4
| | | | |
| * | | | keymgr: Replace .find(...).is_some() with .any()Gabriela Moldovan2026-03-101-3/+2
| | | | | | | | | | | | | | | | | | | | Resolves a clippy warning.
| * | | | keymgr: Replace Result<> with type alias (fmt)Gabriela Moldovan2026-03-101-5/+5
| | | | |
| * | | | keymgr: Replace match with if letGabriela Moldovan2026-03-101-4/+1
| | | | | | | | | | | | | | | | | | | | As suggested by clippy
| * | | | keymgr: Replace Result<> with type alias (fmt)Gabriela Moldovan2026-03-101-3/+5
| | | | |
| * | | | keymgr: Replace Result<> with type aliasGabriela Moldovan2026-03-101-1/+1
| | | | |
| * | | | keymgr: Remove unnecessary type annotationGabriela Moldovan2026-03-101-4/+1
| | | | |
| * | | | keymgr: Replace macro-generated Keystore impls with a single Keystore type (fmt)Gabriela Moldovan2026-03-101-162/+156
| | | | |
| * | | | keymgr: Replace macro-generated Keystore impls with a single Keystore typeGabriela Moldovan2026-03-101-33/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This doesn't really need to be macro-generated, because these impls only differ in the `KeystoreId`. The code is intentionally misindented to make reviewing the diff a bit easier. A future commit will reformat it all.
| * | | | keymgr: Move unrecognized entry building logic out of macro (fmt)Gabriela Moldovan2026-03-101-22/+14
| | | | |
| * | | | keymgr: Move unrecognized entry building logic out of macroGabriela Moldovan2026-03-101-29/+34
| | |/ / | |/| | | | | | | | | | | | | | I am about to remove this macro altogether and simplify the keystore impls, so I am preemptively moving this into a separate function.
* | | | tor-dirserver: Require AuthCerts to make progressClara Engler2026-03-091-37/+54
| | | | | | | | | | | | | | | | | | | | | | | | This commit changes the functionality of the AuthCerts state to only report a success when at least a single certificate was included in the response.
* | | | tor-dirserver: Add retry logic POC TODOClara Engler2026-03-091-0/+4
| | | | | | | | | | | | | | | | | | | | Adds a small TODO with regard to a potentially broken retry logic in the proof-of-concept.
* | | | tor-dirserver: SQL comment for unsigned hashesClara Engler2026-03-091-0/+11
| | | | | | | | | | | | | | | | | | | | This commit documents why and how we use the `unsigned_` fields in the `consensus_router_descriptor_member` table alongside SQL limitations.
* | | | tor-dirserver: Move POC to own moduleClara Engler2026-03-092-73/+91
| | | | | | | | | | | | | | | | | | | | This commit moves dirserver POC code to an own module to semantically indicate it is not production ready.
* | | | tor-dirserver: Document stream dropClara Engler2026-03-091-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | This commit documents why we drop the HTTP TCP stream and why this is fine, namely because this is compliant HTTP/1.0 behavior where there is no connection reuse.
* | | | tor-dirserver: Link to discussion regarding TODOClara Engler2026-03-091-0/+3
| | | | | | | | | | | | | | | | | | | | This commit links the discussion for the TODO for the dirmirror's handling of forward compatibility with netdocs.
* | | | parse2: Add TODO for netstatus traitClara Engler2026-03-091-0/+5
| | | | | | | | | | | | | | | | | | | | This commit adds a TODO to implement a trait combining the common fields in a network status documents.
* | | | tor-dirserver: Use collect instead of mutable forClara Engler2026-03-091-18/+9
| | | |
* | | | tor-dirserver: Remove fiddly SQL CHECKClara Engler2026-03-091-5/+1
| | | |
* | | | tor-dirserver: Use tor-llcrypto for digestsClara Engler2026-03-092-7/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit replaces the uses of sha1, sha2, and sha3 with their respective pedants from tor-llcrypto for better consistency. Internally, they still use the same logic and underlying crates but let's use this encapsulation nonetheless.
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 17:03:27 +0000