aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-11-03Send and receive AUTHENTICATE cells correctly with ED keys.Nick Mathewson
Includes updated test for authchallenge cells
2016-11-03Increase TLS RSA link key length to 2048 bitsNick Mathewson
Oddly, nothing broke. Closes ticket 13752.
2016-11-03Verify ed25519 link handshake certificatesNick Mathewson
This code stores the ed certs as appropriate, and tries to check them. The Ed25519 result is not yet used, and (because of its behavior) this will break RSA authenticate cells. That will get fixed as we go, however. This should implement 19157, but it needs tests, and it needs to get wired in.
2016-11-03Add "Ed ID" arguments to a bunch of connection-ID-related fns.Nick Mathewson
In particular, these functions are the ones that set the identity of a given connection or channel, and/or confirm that we have learned said IDs. There's a lot of stub code here: we don't actually need to use the new keys till we start looking up connections/channels by Ed25519 IDs. Still, we want to start passing the Ed25519 IDs in now, so it makes sense to add these stubs as part of 15055.
2016-11-03Handle u32 overflow in ed25519 cert expiration time.Nick Mathewson
The impact here isn't too bad. First, the only affected certs that expire after 32-bit signed time overflows in Y2038. Second, it could only make it seem that a non-expired cert is expired: it could never make it seem that an expired cert was still live. Fixes bug 20027; bugfix on 0.2.7.2-alpha.
2016-11-03Fix a misfeature with the Ed cert expiration APINick Mathewson
The batch-verification helper didn't expose the expiration time, which made it pretty error-prone. This closes ticket 15087.
2016-11-03Make the current time an argument to x509 cert-checking functionsNick Mathewson
This makes the code a bit cleaner by having more of the functions be pure functions that don't depend on the current time.
2016-11-03Add function to check RSA->Ed cross-certificationsNick Mathewson
Also, adjust signing approach to more closely match the signing scheme in the proposal. (The format doesn't quite match the format in the proposal, since RSA signatures aren't fixed-length.) Closes 19020.
2016-11-03Refactor RSA certificate checking into its own function.Nick Mathewson
2016-11-03Free rsa_ed_crosscert at exit.Nick Mathewson
Fixes bug 17779; bugfix on 0.2.7.2-alpha.
2016-11-03Migrate certificates into a sub-structure of or_handshake_stateNick Mathewson
This will help us do cert-checking in the background in the future, perhaps.
2016-11-03Refactor ...compute_authenticate_cell_body() to return a var_cell_t.Nick Mathewson
This means we don't need to precompute the length. Helps simplify the implementation of 19156.
2016-11-03Code to send correct authentication data when we are using AUTHTYPE>2Nick Mathewson
Implements the major part of 19156, except doesn't actually send the new cell type yet.
2016-11-03New authentication types to use RFC5705.Nick Mathewson
See proposal 244. This feature lets us stop looking at the internals of SSL objects, *and* should let us port better to more SSL libraries, if they have RFC5705 support. Preparatory for #19156
2016-11-03Send ed25519 certificates in certs cell, when we have them.Nick Mathewson
Implements 19155 (send CERTS cells correctly for Ed25519) Also send RSA->Ed crosscert
2016-11-03Refactor connection_or_send_certs_cell() to use trunnelNick Mathewson
We no longer generate certs cells by pasting the certs together one by one. Instead we use trunnel to generate them. Preliminary work for 19155 (send CERTS cell with ed certs)
2016-11-03When parsing certs cells, allow more certs typesNick Mathewson
Implements the parsing part of #19157
2016-09-09make check-spacesNick Mathewson
2016-09-09Fix a coupole of coverity complaints.Nick Mathewson
2016-09-09Fix cases where the tests were doing closesocket() on a non-socketNick Mathewson
These seem to have caused warnings on windows. Hmmm.
2016-09-09Oh dear, I was missing an extern.Nick Mathewson
2016-09-09Make a couple more tests run faster.Nick Mathewson
The point of diminishing returns has been reached.
2016-09-09Disable a single pbkdf2 test vectorNick Mathewson
The other test vectors are pretty complete, and get full coverage, I believe. This one test vector accounted for half the time spent in test-slow. "Now that's slow!"
2016-09-09Chop another ~93 RSA key generations out of the unit testsNick Mathewson
We have a mock for our RSA key generation function, so we now wire it to pk_generate(). This covers all the cases that were not using pk_generate() before -- all ~93 of them.
2016-09-09Move the donna-fuzzing tests into test_slow.Nick Mathewson
This shaves another 3-4 seconds off the main-path tests for me, which is again worth it, according to XKCD#1204.
2016-09-09Re-enable RSA cacheing in tests, with a better design.Nick Mathewson
This makes tests faster and saves about 6 seconds for me, which makes it worth it, according to https://xkcd.com/1205.
2016-09-08Reinstate a couple of teardown_capture_of_logs that I missedNick Mathewson
Patch from rubiate. See #19999
2016-09-08Placate "make check-spaces"Nick Mathewson
2016-09-08Fix remaining test warnings. (in test_relay.c)Nick Mathewson
2016-09-08Fix typo error in bug warning in relay.cNick Mathewson
2016-09-08capture and detect expected BUG messages in shared-random testsNick Mathewson
2016-09-08Simplify log_test_helpers interfaceNick Mathewson
Previously, you needed to store the previous log severity in a local variable, and it wasn't clear if you were allowed to call these functions more than once.
2016-09-08Resolve more BUG warnings in the unit testsNick Mathewson
2016-09-08Fix bug warnings in test_circuitlist.Nick Mathewson
2016-09-08Treat all nonfatal assertion failures as unit test failures.Nick Mathewson
Part of 19999.
2016-09-08Tolerate another failure mode of get_if_addres6_list in testsNick Mathewson
2016-09-08more consistent use of expect_log_msg_containingNick Mathewson
2016-09-08Suppress a really impressive pile of warnings in conection/.. testsNick Mathewson
2016-09-08Fix a bug in connection/download_status.. testsNick Mathewson
2016-09-08Revise log-testing macros to dump the actual log contents on failureNick Mathewson
2016-09-08Remove redundant definitions of expect_{no_,}log_msg()Nick Mathewson
2016-09-08Fix libevent linking on openbsd.Nick Mathewson
Closes ticket 19902; bugfix on 0.2.9.1-alpha; patch from rubiate
2016-09-08Disable -Wthread-safety.Nick Mathewson
See changes file; closes ticket 20110.
2016-09-08Unit test fix: windows should be able to handle DNSPort just fine.Nick Mathewson
2016-09-08Patch from rubiate: disable openbsd memory protections in test-memwipeNick Mathewson
Test-memwipe is *supposed* to invoke undefined behavior, alas. Closes 20066.
2016-09-07set the "addr" field in the dir_handle_get tests, to resolve bug warnings.Nick Mathewson
2016-09-07Remove the useless (and uninitialized) MOCK_TOR_ADDR in test_dir_handle_get.cNick Mathewson
2016-09-07Merge branch 'maint-0.2.8'Nick Mathewson
2016-09-07Merge branch 'maint-0.2.7' into maint-0.2.8Nick Mathewson
2016-09-07Merge branch 'maint-0.2.6' into maint-0.2.7Nick Mathewson
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion