mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-09-22 22:14:58 +02:00
b560f852f2
Add experimental OnionServiceSingleHopMode and OnionServiceNonAnonymousMode options. When both are set to 1, every hidden service on a tor instance becomes a non-anonymous Single Onion Service. Single Onions make one-hop (direct) connections to their introduction and renzedvous points. One-hop circuits make Single Onion servers easily locatable, but clients remain location-anonymous. This is compatible with the existing hidden service implementation, and works on the current tor network without any changes to older relays or clients. Implements proposal #260, completes ticket #17178. Patch by teor & asn. squash! fixup! fixup! fixup! fixup! fixup! fixup! fixup! fixup! fixup! fixup! fixup! fixup! fixup! Implement Prop #260: Single Onion Services Redesign single onion service poisoning. When in OnionServiceSingleHopMode, each hidden service key is poisoned (marked as non-anonymous) on creation by creating a poison file in the hidden service directory. Existing keys are considered non-anonymous if this file exists, and anonymous if it does not. Tor refuses to launch in OnionServiceSingleHopMode if any existing keys are anonymous. Similarly, it refuses to launch in anonymous client mode if any existing keys are non-anonymous. Rewrite the unit tests to match and be more comprehensive. Adds a bonus unit test for rend_service_load_all_keys().
59 lines
2.3 KiB
C
59 lines
2.3 KiB
C
/* Copyright (c) 2001 Matej Pfajfar.
|
|
* Copyright (c) 2001-2004, Roger Dingledine.
|
|
* Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson.
|
|
* Copyright (c) 2007-2016, The Tor Project, Inc. */
|
|
/* See LICENSE for licensing information */
|
|
|
|
/**
|
|
* \file rendclient.h
|
|
* \brief Header file for rendclient.c.
|
|
**/
|
|
|
|
#ifndef TOR_RENDCLIENT_H
|
|
#define TOR_RENDCLIENT_H
|
|
|
|
#include "rendcache.h"
|
|
|
|
void rend_client_purge_state(void);
|
|
|
|
void rend_client_introcirc_has_opened(origin_circuit_t *circ);
|
|
void rend_client_rendcirc_has_opened(origin_circuit_t *circ);
|
|
int rend_client_introduction_acked(origin_circuit_t *circ,
|
|
const uint8_t *request,
|
|
size_t request_len);
|
|
void rend_client_refetch_v2_renddesc(rend_data_t *rend_query);
|
|
int rend_client_fetch_v2_desc(rend_data_t *query, smartlist_t *hsdirs);
|
|
void rend_client_cancel_descriptor_fetches(void);
|
|
void rend_client_purge_last_hid_serv_requests(void);
|
|
|
|
int rend_client_report_intro_point_failure(extend_info_t *failed_intro,
|
|
rend_data_t *rend_query,
|
|
unsigned int failure_type);
|
|
|
|
int rend_client_rendezvous_acked(origin_circuit_t *circ,
|
|
const uint8_t *request,
|
|
size_t request_len);
|
|
int rend_client_receive_rendezvous(origin_circuit_t *circ,
|
|
const uint8_t *request,
|
|
size_t request_len);
|
|
void rend_client_desc_trynow(const char *query);
|
|
|
|
void rend_client_note_connection_attempt_ended(const rend_data_t *rend_data);
|
|
|
|
extend_info_t *rend_client_get_random_intro(const rend_data_t *rend_query);
|
|
int rend_client_any_intro_points_usable(const rend_cache_entry_t *entry);
|
|
|
|
int rend_client_send_introduction(origin_circuit_t *introcirc,
|
|
origin_circuit_t *rendcirc);
|
|
int rend_parse_service_authorization(const or_options_t *options,
|
|
int validate_only);
|
|
rend_service_authorization_t *rend_client_lookup_service_authorization(
|
|
const char *onion_address);
|
|
void rend_service_authorization_free_all(void);
|
|
|
|
int rend_client_allow_non_anonymous_connection(const or_options_t *options);
|
|
int rend_client_non_anonymous_mode_enabled(const or_options_t *options);
|
|
|
|
#endif
|
|
|