1628af235e
Merge branch 'maint-0.3.5' into release-0.3.5
2022-01-24 10:49:41 -05:00
ef17aa0d8d
release: ChangeLog and ReleaseNotes for 0.3.5.18
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2022-01-24 10:48:55 -05:00
28881d0a92
fallbackdir: Update list generated on January 24, 2022
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2022-01-24 10:35:18 -05:00
324ded93be
geoip: Update to match ipfire location db, 2022/01/24.
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2022-01-24 10:31:43 -05:00
ef6568b832
Merge branch 'maint-0.3.5' into release-0.3.5
2022-01-18 13:15:29 -05:00
e523480691
Merge branch 'tor-gitlab/mr/510' into maint-0.3.5
2022-01-18 13:15:23 -05:00
5c575c6f92
Merge branch 'maint-0.3.5' into release-0.3.5
2022-01-18 13:07:30 -05:00
b9c06718a8
main: Update a dead URL in a log notice
...
Change https://www.torproject.org/download/download#warning to
https://support.torproject.org/faq/staying-anonymous/
Closes #40544
Signed-off-by: David Goulet <dgoulet@torproject.org >
2022-01-18 12:51:52 -05:00
72041c6306
relay: Don't advertise HSv2 protocol version
...
We removed HSIntro=3 and HSDir=1 that are v2 specific. Since 0.3.5.17,
we do not support introducing or being a directory for onion service v2.
Closes #40509
Signed-off-by: David Goulet <dgoulet@torproject.org >
2022-01-18 12:39:06 -05:00
ea4bc55f2e
Merge branch 'maint-0.3.5' into release-0.3.5
2021-11-08 14:16:18 +00:00
cee6e7d9e1
Give an error message if LibreSSL's TLSv1.3 APIs aren't what we need
...
From LibreSSL versions 3.2.1 through 3.4.0, our configure script
would conclude that TLSv1.3 as supported, but it actually wasn't.
This led to annoying breakage like #40128 and #40445 .
Now we give an error message if we try to build with one of those
versions.
Closes #40511 .
2021-11-06 11:04:08 -04:00
8beb560bfd
Reverse the direction of the test for openssl 3.0.0
...
Previously the logic was reversed, and always gave the wrong answer.
This has no other effect than to change whether we suppress
deprecated API warnings.
Fixes #40429 ; bugfix on 0.3.5.13.
2021-11-05 13:23:05 -04:00
f439d0fe44
Merge branch 'maint-0.3.5' into release-0.3.5
2021-10-29 09:20:21 -04:00
92fedb9f44
changes: Add file for ticket 26299
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-10-29 09:19:21 -04:00
5aa7bd4308
changelog: Changelog for 0.3.5.17
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-10-25 10:43:33 -04:00
c0c3400499
Merge branch 'maint-0.3.5' into release-0.3.5
2021-10-21 10:01:38 -04:00
66e8e0f71b
fallbackdir: Regenerate the list for October 2021
...
Closes #40493
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-10-21 09:13:40 -04:00
2a247f4255
Merge branch 'maint-0.3.5' into release-0.3.5
2021-10-20 21:44:56 +00:00
7372739765
Announce URL to bridge status page when starting Tor as a bridge relay.
...
This patch makes Tor announce the relay specific bridge status page URL
when Tor is starting up before bootstrap occours.
See: tor#30477
2021-10-20 21:44:45 +00:00
46de5eb054
Merge branch 'maint-0.3.5' into release-0.3.5
2021-10-20 17:36:06 +00:00
db112329a0
Merge remote-tracking branch 'tor-gitlab/mr/369' into maint-0.3.5
2021-10-20 17:35:35 +00:00
a9913435bc
Merge branch 'maint-0.3.5' into release-0.3.5
2021-10-19 10:24:24 -04:00
18b5630a7c
changes: Add file for ticket 40476
...
Closes #40476
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-10-19 09:51:24 -04:00
5c520d5f0d
Changelog for 0.3.5.16
...
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-08-13 09:39:43 -04:00
f55edf5b34
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-12 12:13:25 -04:00
eca5b62213
Update GeoIP files to match IPFire location DB as per 2021/08/12.
2021-08-12 15:38:11 +00:00
a141b355a1
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-11 13:15:58 +00:00
7e0971d868
Merge remote-tracking branch 'tor-gitlab/mr/417' into maint-0.3.5
2021-08-11 13:15:35 +00:00
ae6ab63f24
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-11 13:14:26 +00:00
fe5a9db1e6
Disable ed25519-donna's batch verification.
...
Fixes bug 40078.
As reported by hdevalence our batch verification logic can cause an assert
crash.
The assert happens because when the batch verification of ed25519-donna fails,
the code in `ed25519_checksig_batch()` falls back to doing a single
verification for each signature.
The crash occurs because batch verification failed, but then all signatures
individually verified just fine.
That's because batch verification and single verification use a different
equation which means that there are sigs that can pass single verification
but fail batch verification.
Fixing this would require modding ed25519-donna which is not in scope for
this ticket, and will be soon deprecated in favor of arti and
ed25519-dalek, so my branch instead removes batch verification.
2021-08-11 13:14:05 +00:00
0e60b65f6c
fallbackdir: Regenerate list
...
New list for all stable releases.
Closes #40447
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-08-11 09:07:05 -04:00
9c52846fe5
Merge branch 'maint-0.3.5' into release-0.3.5
2021-08-11 12:52:08 +00:00
399518da02
relay: Reduce streaming compression ratio from HIGH to LOW
...
Fixes #40301
Signed-off-by: David Goulet <dgoulet@torproject.org >
2021-08-11 12:51:32 +00:00
31b55c14ca
Backport changelog entries
2021-06-10 13:14:29 -04:00
e2138627f9
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-10 12:30:29 -04:00
f57b5c48e0
Fix TROVE-2021-006: Out-of-bounds read on v3 desc parsing
2021-06-10 12:11:10 -04:00
b5eb1ba722
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-10 08:53:07 -04:00
adb248b6d6
TROVE-2021-003: Check layer_hint before half-closed end and resolve cells
...
This issue was reported by Jann Horn part of Google's Project Zero.
Jann's one-sentence summary: entry/middle relays can spoof RELAY_END cells on
half-closed streams, which can lead to stream confusion between OP and
exit.
Fixes #40389
2021-06-10 08:50:05 -04:00
62128193e2
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-10 08:42:14 -04:00
d71bf986b4
Merge branch 'bug40391_035' into maint-0.3.5
2021-06-10 08:41:59 -04:00
7fdfc2ea54
Merge branch 'bug40390_035_squashed' into maint-0.3.5
2021-06-10 08:34:25 -04:00
c0aa9e0a1b
Assert on _all_ failures from RAND_bytes().
...
Previously, we would detect errors from a missing RNG
implementation, but not failures from the RNG code itself.
Fortunately, it appears those failures do not happen in practice
when Tor is using OpenSSL's default RNG implementation. Fixes bug
40390; bugfix on 0.2.8.1-alpha. This issue is also tracked as
TROVE-2021-004. Reported by Jann Horn at Google's Project Zero.
2021-06-10 08:33:57 -04:00
c5922244e2
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-10 08:32:12 -04:00
9ceb2c317b
Merge remote-tracking branch 'tor-gitlab/mr/386' into maint-0.3.5
2021-06-10 08:31:54 -04:00
d6e2516031
Merge branch 'maint-0.3.5' into release-0.3.5
2021-06-10 08:21:47 -04:00
520d5c108f
Update geoip files to match ipfire location db, 2021/06/10.
2021-06-10 08:20:13 -04:00
60070546a7
remove rolled-up changes file.
2021-06-07 15:02:55 -04:00
a4e8624db1
Merge branch 'maint-0.3.5' into release-0.3.5
2021-05-25 13:25:23 +00:00
42ba87d964
Remove the function tor_tls_assert_renegotiation_unblocked.
...
It was used nowhere outside its own unit tests, and it was causing
compilation issues with recent OpenSSL 3.0.0 alphas.
Closes ticket 40399.
2021-05-25 07:38:31 -04:00
4c06c619fa
Use a more secure hash function for the circuitmux hashtable.
...
Fixes bug 40931; bugfix on 0.2.4.4-alpha. Also tracked as
TROVE-2021-005.
This issue was reported by Jann Horn from Google's Project Zero.
2021-05-18 08:40:09 -04:00
David Goulet
Alexander Færøy
Nick Mathewson
George Kadianakis