aboutsummaryrefslogtreecommitdiff
path: root/src/or/routerkeys.c
AgeCommit message (Collapse)Author
2018-04-06crypto: Refactor (P)RNG functionality into new crypto_rand module.Isis Lovecruft
* ADD new /src/common/crypto_rand.[ch] module. * ADD new /src/common/crypto_util.[ch] module (contains the memwipe() function, since all crypto_* modules need this). * FIXES part of #24658: https://bugs.torproject.org/24658
2018-01-31Merge branch 'maint-0.3.2'Nick Mathewson
2018-01-26When a tor_cert_T check fails, log the reason why.Nick Mathewson
Diagnostic attempt for 24972.
2017-12-05New accessors for keydir/cachedir accessNick Mathewson
This patch is a result of auditing all of our uses of get_datadir_fname() and its kin, and dividing them into cache vs keys vs other data. The new get_keydir_fname() and get_cachedir_fname() functions don't actually do anything new yet.
2017-12-05Extract common code for creating the keys directory.Nick Mathewson
This had somehow gotten duplicated between router.c and routerkeys.c
2017-09-15Run our #else/#endif annotator on our source code.Nick Mathewson
2017-08-25Merge branch 'maint-0.3.1'Nick Mathewson
2017-08-25Merge branch 'bug19418_029' into maint-0.3.1Nick Mathewson
2017-08-09Make sure we always wind up checking i2d_*'s output.Nick Mathewson
The biggest offender here was sometimes not checking the output of crypto_pk_get_digest. Fixes bug 19418. Reported by Guido Vranken.
2017-08-03routerkeys: Add cmdline option for learning signing key expiration.Isis Lovecruft
* CLOSES #17639. * ADDS new --key-expiration commandline option which prints when the signing key expires.
2017-06-06Merge branch 'maint-0.3.0'Nick Mathewson
2017-06-06Repair the unit test behavior of my fix for 22508.Nick Mathewson
Apparently, the unit tests relied on being able to make ed->x509 link certs even when they hadn't set any server flags in the options. So instead of making "client" mean "never generate an ed->x509 cert", we'll have it mean "it's okay not to generate an ed->x509 cert". (Going with a minimal fix here, since this is supposed to be a stable version.)
2017-06-06Merge branch 'maint-0.3.0'Nick Mathewson
2017-06-06Make generate_ed_link_cert() a no-op on clients.Nick Mathewson
Fixes bug 22508; bug not in any released Tor.
2017-06-05Merge branch 'maint-0.3.0'Nick Mathewson
2017-06-05Merge branch 'bug22460_030_01' into maint-0.3.0Nick Mathewson
2017-06-05Merge branch 'bug22466_diagnostic_030'Nick Mathewson
2017-06-05Merge branch 'maint-0.3.0'Nick Mathewson
2017-06-01Regenerate RSA->ed25519 identity crosscertificate as neededNick Mathewson
2017-06-01Use tor_assert_nonfatal() to try to detect #22466Nick Mathewson
2017-05-31Bugfix: Regenerate more certificates when appropriateNick Mathewson
Previously we could sometimes change our signing key, but not regenerate the certificates (signing->link and signing->auth) that were signed with it. Also, we would regularly replace our TLS x.509 link certificate (by rotating our TLS context) but not replace our signing->link ed25519 certificate. In both cases, the resulting inconsistency would make other relays reject our link handshakes. Fixes two cases of bug 22460; bugfix on 0.3.0.1-alpha.
2017-03-15Run the copyright update script.Nick Mathewson
2017-01-30Merge branch 'combined-fuzzing-v4'Nick Mathewson
2017-01-30Make a bunch of signature/digest-checking functions mockableNick Mathewson
2017-01-17relay: Honor DataDirectoryGroupReadable at key initDavid Goulet
Our config code is checking correctly at DataDirectoryGroupReadable but then when we initialize the keys, we ignored that option ending up at setting back the DataDirectory to 0700 instead of 0750. Patch by "redfish". Fixes #19953 Signed-off-by: David Goulet <dgoulet@torproject.org>
2016-12-08Merge branch 'feature15056_v1_squashed'Nick Mathewson
2016-12-08Add a function to check whether a given ed id key is oursNick Mathewson
2016-12-01Fix compilationNick Mathewson
2016-11-27Improve log messages related to identity keys7r
Improve the messages logged when Tor wants or needs to load the master ed25519 identity key so the user is explicitly informed when further action is required or not. Fixes ticket #20650.
2016-11-03whitespace fixesNick Mathewson
2016-11-03Merge branch 'feature_15055_v2'Nick Mathewson
2016-11-03Mark some functions as needing documentation in src/or/routerkeys.c.Isis Lovecruft
2016-11-03Document two additional functions in src/or/routerkeys.c.Isis Lovecruft
Adds docstrings for generate_ed_link_cert() and should_make_new_ed_keys().
2016-11-03Unit tests for cert-chain-processing, including failed casesNick Mathewson
Check out the coverage!
2016-11-03For testing: function to construct (but not save) Ed keys and certsNick Mathewson
2016-11-03Free rsa_ed_crosscert at exit.Nick Mathewson
Fixes bug 17779; bugfix on 0.2.7.2-alpha.
2016-10-24Module-document dnsserv.c, policies.c, routerkeys.cNick Mathewson
2016-10-11Fix spurious compiler warning in do_getpass().Nick Mathewson
Some compilers apparently noticed that p2len was allowed to be equal to msg, and so maybe we would be doing memset(prompt2, ' ', 0), and decided that we probably meant to do memset(prompt2, 0, 0x20); instead. Stupid compilers, doing optimization before this kind of warning! My fix is to just fill the entire prompt2 buffer with spaces, because it's harmless. Bugfix on e59f0d4cb964387c5, not in any released Tor.
2016-10-10Fix non-triggerable heap corruption at do_getpass().George Kadianakis
2016-07-28Fix a huge pile of -Wshadow warnings.Nick Mathewson
These appeared on some of the Jenkins platforms. Apparently some GCCs care when you shadow globals, and some don't.
2016-07-28Fix all -Wshadow warnings on LinuxNick Mathewson
This is a partial fix for 18902.
2016-06-25Fix a typo in the getting passphrase prompt for the ed25519 identity keyPeter Palfrader
2016-04-01Merge branch 'bug18133_027' into maint-0.2.8Nick Mathewson
2016-04-01fix indentationNick Mathewson
2016-03-26Do not treat "DOCDOC" as doxygen.Nick Mathewson
2016-03-21Log a better message when OfflineMasterKey is set.Nick Mathewson
Fixes bug 18133; bugfix on 0.2.7.2-alpha.
2016-02-27Update the copyright year.Nick Mathewson
2016-02-27Make sure that every module in src/or has a brief description.Nick Mathewson
2016-02-10Rename crypto_digest_all, and digests_t.Nick Mathewson
They are no longer "all" digests, but only the "common" digests. Part of 17795. This is an automated patch I made with a couple of perl one-liners: perl -i -pe 's/crypto_digest_all/crypto_common_digests/g;' src/*/*.[ch] perl -i -pe 's/\bdigests_t\b/common_digests_t/g;' src/*/*.[ch]
2015-10-21Fix a memory leak in reading an expired ed signing key.Nick Mathewson
Closes 17403.
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion