use derive_builder::Builder;
use serde::{Deserialize, Serialize};
use tor_config::{define_list_builder_helper, impl_standard_builder, ConfigBuildError};
use tor_llcrypto::pk::rsa::RsaIdentity;
#[derive(Debug, Clone, Builder, Eq, PartialEq)]
#[builder(build_fn(error = "ConfigBuildError"))]
#[builder(derive(Debug, Serialize, Deserialize))]
pub struct Authority {
#[builder(setter(into))]
name: String,
#[cfg(not(feature = "experimental-api"))]
pub(crate) v3ident: RsaIdentity,
#[cfg(feature = "experimental-api")]
pub v3ident: RsaIdentity,
}
impl_standard_builder! { Authority: !Default }
pub(crate) type AuthorityList = Vec<Authority>;
define_list_builder_helper! {
pub(crate) struct AuthorityListBuilder {
authorities: [AuthorityBuilder],
}
built: AuthorityList = authorities;
default = default_authorities();
}
pub(crate) fn default_authorities() -> Vec<AuthorityBuilder> {
fn auth(name: &str, key: &str) -> AuthorityBuilder {
let v3ident =
RsaIdentity::from_hex(key).expect("Built-in authority identity had bad hex!?");
let mut auth = AuthorityBuilder::new();
auth.name(name).v3ident(v3ident);
auth
}
vec![
auth("bastet", "27102BC123E7AF1D4741AE047E160C91ADC76B21"),
auth("dannenberg", "0232AF901C31A04EE9848595AF9BB7620D4C5B2E"),
auth("dizum", "E8A9C45EDE6D711294FADF8E7951F4DE6CA56B58"),
auth("Faravahar", "EFCBE720AB3A82B99F9E953CD5BF50F7EEFC7B97"),
auth("gabelmoo", "ED03BB616EB2F60BEC80151114BB25CEF515B226"),
auth("longclaw", "23D15D965BC35114467363C165C4F724B64B4F66"),
auth("maatuska", "49015F787433103580E3B66A1707A00E60F2D15B"),
auth("moria1", "D586D18309DED4CD6D57C18FDB97EFA96D330566"),
auth("tor26", "14C131DFC5C6F93646BE72FA1401C02A8DF2E8B4"),
]
}
impl AuthorityBuilder {
pub fn new() -> Self {
Self::default()
}
}
#[cfg(test)]
mod test {
#![allow(clippy::unwrap_used)]
use super::*;
use tor_netdoc::doc::authcert::AuthCertKeyIds;
impl Authority {
fn matches_keyid(&self, id: &AuthCertKeyIds) -> bool {
self.v3ident == id.id_fingerprint
}
}
#[test]
fn authority() {
let key1: RsaIdentity = [9_u8; 20].into();
let key2: RsaIdentity = [10_u8; 20].into();
let auth = Authority::builder()
.name("example")
.v3ident(key1)
.build()
.unwrap();
assert_eq!(&auth.v3ident, &key1);
let keyids1 = AuthCertKeyIds {
id_fingerprint: key1,
sk_fingerprint: key2,
};
assert!(auth.matches_keyid(&keyids1));
let keyids2 = AuthCertKeyIds {
id_fingerprint: key2,
sk_fingerprint: key2,
};
assert!(!auth.matches_keyid(&keyids2));
}
#[test]
fn auth() {
let dflt = AuthorityListBuilder::default().build().unwrap();
assert_eq!(&dflt[0].name[..], "bastet");
assert_eq!(
&dflt[0].v3ident.to_string()[..],
"$27102bc123e7af1d4741ae047e160c91adc76b21"
);
}
}