| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
|
|
| |
This renames "client auth" to "restricted discovery" where appropriate.
Closes #1476
|
| |
|
|
| |
Closes #1283
|
| |
|
|
|
| |
We changed all key paths to be lowercased a while ago, but forgot to
update this document.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We will soon remove the `KeyMgr::*_with_derived()` functions, so we need
to rewrite `maybe_generate_hsid` using `KeyMgr::get` and
`KeyMgr::generate`.
An important point to note is that `maybe_generate_hsid` no longer
stores the `KP_hs_id` in the key store. The reason we originally put the
`KP_hs_id` in the keystore in the first place was to support offline
HsId mode. However, offline HsId mode was never fully implemented
(#1194), and the decision to put the public part of the HsId in the
keystore is controversial (#1195). We can revisit this decision when we
implement #1194, but for now, we don't need a separate `KP_hs_Id` entry
in the keystore.
|
| |
|
|
|
|
|
|
|
|
|
| |
The onion service keys now live in the `hss/<nickname>` subdirectory
within the keystore.
This layout change is **not** backwards-compatible, so if you want to
use your existing hidden service keys, you will need to manually move
them to `<keystore_root>/hss`.
Closes #1260
|
| |
|
|
|
|
| |
We are about to replace `ArtiPathComponent` with `Slug`, but `Slug`s
don't support `.`, so let's strip the `.onion` suffix before encoding it
in the `ArtiPath`.
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
There are 2 reasons to make this change:
* because having the word `private` in the extension will make it more
difficult to accidentally misuse or misplace a private key (see
https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/1618#note_2947461)
* because `Keystore`s will soon grow a `list()` function returning all
`(ArtiPath, KeyType)`s in the keystore, and in order for
`ArtiNativeKeystore` to implement this function, it will need to be
able to reverse the `KeyType -> file extension` mapping (if two
different `KeyType`s are mapped to the same extension,
`ArtiNativeKeystore`s won't be able to reverse the mapping)
|
| |
|
