mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-12-06 19:41:15 +01:00
Merge branch 'maint-0.2.2'
This commit is contained in:
@@ -0,0 +1,7 @@
|
||||
o Security fixes:
|
||||
- Bridge relays now do their directory fetches inside Tor TLS
|
||||
connections, like all the other clients do, rather than connecting
|
||||
directly to the DirPort like public relays do. Removes another
|
||||
avenue for enumerating bridges. Fixes part of bug 4115; bugfix
|
||||
on 0.2.0.35.
|
||||
|
||||
+1
-2
@@ -828,8 +828,7 @@ directory_command_should_use_begindir(const or_options_t *options,
|
||||
return 0; /* We don't know an ORPort -- no chance. */
|
||||
if (!anonymized_connection)
|
||||
if (!fascist_firewall_allows_address_or(addr, or_port) ||
|
||||
directory_fetches_from_authorities(options) ||
|
||||
(server_mode(options) && !options->Address))
|
||||
directory_fetches_from_authorities(options))
|
||||
return 0; /* We're firewalled or are acting like a relay -- also no. */
|
||||
if (!options->TunnelDirConns &&
|
||||
router_purpose != ROUTER_PURPOSE_BRIDGE)
|
||||
|
||||
Reference in New Issue
Block a user