Add v3 onion support to tor-hidden-services ansible role#4652

Merged

conorsch merged 46 commits intodevelopfrom onion_onion_and_more_onions

Aug 22, 2019

+497-46

Commits on Aug 22, 2019

Adds group_vars for tor v3 onion services

kushaldas
authored and
Conor Schaefer
committed
Adds generation of v3 onion keys if required

kushaldas
authored and
Conor Schaefer
committed
Adds the initial ansible role update for v3 onion addresses

kushaldas
authored and
Conor Schaefer
committed
Updates with tor v3 files

kushaldas
authored and
Conor Schaefer
committed
Marks only v2 service based tasks

kushaldas
authored and
Conor Schaefer
committed
Adds proper v3 services for source,journalist and ssh

kushaldas
authored and
Conor Schaefer
committed
Creates 3 keys for the install command

kushaldas
authored and
Conor Schaefer
committed
Gernarates 3 different keysets and saves them accordingly

kushaldas
authored and
Conor Schaefer
committed
Updates cryptography to 2.7 for Tor key pair generation

kushaldas
authored and
Conor Schaefer
committed
Fixes code formatting for flake8 and yaml

kushaldas
authored and
Conor Schaefer
committed
Uses more explicit var names in v3 keygen
Conor Schaefer
committed
Terser v3 key munging tasks
Conor Schaefer
committed
Adds generate-tor-v3-keypairs script

kushaldas
authored and
Conor Schaefer
committed
v3 onions: remove additional standalone script

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: remove magic number for removing base32 padding characters

redshiftzero
authored and
Conor Schaefer
committed
make: pin pip version (fix bug 4667 due to pip/pip-tools divergence)

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: use cryptography>=2.7

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: move onion services default values to group vars

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: set v3_onion_services to True for staging

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: loop over all Tor services since source is excluded

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: gitignore v3 JSON file

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: add subcommand, run in ansible task

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: suppress output containing private information using no_log

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: register restart tor handler after final v3 auth tasks

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: testinfra - tor_services duplicated from app-staging

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: testinfra - add v3 interfaces to app-staging sdvars

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: testinfra updates for test_tor_hidden_services

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: add admin requirements to develop requirements

redshiftzero
authored and
Conor Schaefer
committed
makefile: update-pip-requirements should also update python 2 requirements

redshiftzero
authored and
Conor Schaefer
committed
Supports Python 2 & 3 in v3 keygen logic
Conor Schaefer
committed
Makes v3 keygen play nicely with install action
Conor Schaefer
committed
v3 onions: fix testinfra tor tests

redshiftzero
authored and
Conor Schaefer
committed
Fixes tor v3 ssh service for Monitor Server
Conor Schaefer
committed
v3 onion: fix linting issues, add test for generate_new_v3_keys

redshiftzero
authored and
Conor Schaefer
committed
Formats v3 client auth files in restrict-direct-access
Conor Schaefer
committed
v3 onions: gitignore new v3 *ths files

redshiftzero
authored and
Conor Schaefer
committed
ci: bump staging job timeout to 25 minutes

redshiftzero
authored and
Conor Schaefer
committed
v3 onion: remove get_v3_keys, add remaining unit test coverage

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: update syscheck configuration for new service directories

redshiftzero
authored and
Conor Schaefer
committed
v3 onions: move v2/v3 default vars to role-level defaults

redshiftzero
authored and
Conor Schaefer
committed
Updates v3 client-auth templates with final filename
Conor Schaefer
committed
Don't clobber v3 client auth info
Conor Schaefer
committed
Updated v3 auth filenames to use .auth_private extension

zenmonkeykstop
authored and
Conor Schaefer
committed
Updates v3 fail-fast logic for admins
Conor Schaefer
committed
Updates fail-fast logic for v2 -> v3 transition
Conor Schaefer
committed
Supports SSH-over-LAN in v2->v3 Onion migration
Conor Schaefer
committed