irl/terraform-provider-tor
1
0
Fork 0
forked from ops/terraform-provider-tor
Code Pull requests Activity

Update obfs4 e2e test to include new ED25519 Tor format and RSA hashed fingerprint outputs

Browse source
This commit is contained in:
Abel Luck 2025-09-10 14:06:28 +02:00
parent f1cccbe22b
commit 43c442ad20
1 changed files with 23 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

23
e2e-tests/obfs4/main.tf
View file

@ -26,6 +26,13 @@ resource "tor_obfs4_state" "bridge" {
ed25519_identity_private_key = tor_relay_identity_ed25519.bridge.private_key_pem ed25519_identity_private_key = tor_relay_identity_ed25519.bridge.private_key_pem
} }
# Alternative: obfs4 state could also use Tor format keys (demonstration only)
# resource "tor_obfs4_state" "bridge_alt" {
# rsa_identity_private_key = tor_relay_identity_rsa.bridge.private_key_pem
# ed25519_identity_private_key = tor_relay_identity_ed25519.bridge.private_key_pem
# # Note: private_key_tor could be used here as well for ed25519 keys
# }
# Generate bridge line for client distribution # Generate bridge line for client distribution
data "tor_obfs4_bridge_line" "bridge" { data "tor_obfs4_bridge_line" "bridge" {
ip_address = "203.0.113.1" ip_address = "203.0.113.1"
@ -46,11 +53,27 @@ output "rsa_fingerprint_sha256" {
value = tor_relay_identity_rsa.bridge.public_key_fingerprint_sha256 value = tor_relay_identity_rsa.bridge.public_key_fingerprint_sha256
} }
output "rsa_fingerprint_sha1_hashed" {
description = "RSA identity fingerprint (SHA1) hashed for privacy"
value = tor_relay_identity_rsa.bridge.public_key_fingerprint_sha1_hashed
}
output "ed25519_fingerprint_sha256" { output "ed25519_fingerprint_sha256" {
description = "Ed25519 identity fingerprint (SHA256)" description = "Ed25519 identity fingerprint (SHA256)"
value = tor_relay_identity_ed25519.bridge.public_key_fingerprint_sha256 value = tor_relay_identity_ed25519.bridge.public_key_fingerprint_sha256
} }
output "ed25519_private_key_tor" {
description = "Ed25519 private key in Tor binary format (base64)"
value = tor_relay_identity_ed25519.bridge.private_key_tor
sensitive = true
}
output "ed25519_public_key_tor" {
description = "Ed25519 public key in Tor binary format (base64)"
value = tor_relay_identity_ed25519.bridge.public_key_tor
}
output "obfs4_certificate" { output "obfs4_certificate" {
description = "obfs4 certificate for bridge line" description = "obfs4 certificate for bridge line"
value = tor_obfs4_state.bridge.certificate value = tor_obfs4_state.bridge.certificate