127cb39ffc
Rate-limit "No circuits are opened" message to once-per-hour
...
mr-4 reports on #7799 that he was seeing it several times per second,
which suggests that things had gone very wrong.
This isn't a real fix, but it should make Tor usable till we can
figure out the real issue.
2012-12-26 10:05:45 -05:00
885e8d35c7
Merge remote-tracking branch 'mikeperry/209-path-bias-changes'
2012-12-25 23:30:28 -05:00
0c4210fb65
Directory guard implementation.
...
Implements proposal 207; ticket 6526.
2012-12-25 23:14:43 -05:00
25afecdbf9
Make ECDHE group configurable: 224 for public, 256 for bridges (default)
2012-12-25 20:22:46 -05:00
2f8fd53750
Add benchmark for DH handshake and ECDH-P-224/56 handshake
2012-12-25 20:14:07 -05:00
175b2678d7
Let servers choose better ciphersuites when clients support them
...
This implements the server-side of proposal 198 by detecting when
clients lack the magic list of ciphersuites that indicates that
they're lying faking some ciphers they don't really have. When
clients lack this list, we can choose any cipher that we'd actually
like. The newly allowed ciphersuites are, currently, "All ECDHE-RSA
ciphers that openssl supports, except for ECDHE-RSA-RC4".
The code to detect the cipher list relies on on (ab)use of
SSL_set_session_secret_cb.
2012-12-25 20:14:07 -05:00
a1e2232ed1
fold in changes files so far
2012-12-24 04:01:44 -05:00
7a99d26c79
Add packaged cell fullness to the heartbeat message.
...
This is an attempt to diagnose the severity of bug 7743.
2012-12-18 15:16:35 -05:00
4a07ea4a8c
Drop the maximum attempts to get a virtual address to 1000.
...
This is good enough to give P_success >= 999,999,999/1,000,000,000 so
long as the address space is less than 97.95 full. It'd be ridiculous
for that to happen for IPv6, and usome reasonable assumptions, it
would also be pretty silly for IPv4.
2012-12-17 14:51:31 -05:00
40a9842090
Describe IPv6 automap changes
2012-12-17 14:51:31 -05:00
593b235cc9
changes entry for disabling cache usage by default
2012-12-17 14:50:05 -05:00
522e90d661
Changes file for new DNS caching options
2012-12-17 14:49:38 -05:00
cfa07f397d
Note that fallback_dirsource was proposal 206, bug 572.
2012-12-13 12:47:46 -05:00
01ac961ca1
Merge branch 'fallback_dirsource_v3'
2012-12-13 12:42:29 -05:00
21b5d76aa5
Mention that dist-geoip6 was bug 7655
2012-12-11 18:11:49 -05:00
08da247042
Update changes file.
2012-12-09 23:58:01 -08:00
f215d19105
Add a changes file for bug7157.
2012-12-07 15:28:37 -08:00
3fa9151f26
Merge branch 'win64-7260'
...
Conflicts:
src/or/dns.c
2012-12-07 14:12:17 -05:00
f366b0112e
Merge remote-tracking branch 'karsten/task-6266'
2012-12-07 11:39:56 -05:00
81fcebcd05
Merge branch 'bug7306'
2012-12-07 11:11:26 -05:00
025dc19b63
Merge remote-tracking branch 'public/bug6887'
2012-12-07 11:02:27 -05:00
42e3c04a7a
Bug 3443: Don't count ORconn setup in circuit build time.
...
Also, add a hack Roger suggested where we're more patient if no circuits are
opened yet.
2012-12-07 10:34:09 -05:00
f742b33d85
Drop FallbackNetworkstatusFile; it never worked.
2012-12-06 11:28:49 -05:00
90f6071d8d
New FallbackDir option to add extra directories for bootstraping
...
This replaces the old FallbackConsensus notion, and should provide a
way -- assuming we pick reasonable nodes! -- to give clients
suggestions of placs to go to get their first consensus.
2012-12-06 11:28:49 -05:00
ded70363a7
Rename DirServer to DirAuthority
2012-12-06 11:23:43 -05:00
b326e76144
Use FreeLibrary, not CloseHandle, for library in test_util.c
...
Fix for bug 7306. Bugfix on 0.2.2.17-alpha.
2012-12-06 10:59:02 -05:00
c718921d34
Update to the December 2012 GeoIP database.
2012-12-06 11:29:47 +01:00
190c1d4981
Merge branch 'bug7013_take2_squashed'
2012-11-27 22:18:16 -05:00
f88c303869
Add a torrc option to specify the bind address of managed proxies.
2012-11-27 22:18:08 -05:00
35d09dd6ac
Update to the November 2012 GeoIP database.
2012-11-27 21:26:52 -05:00
2bf195d0ce
Add script to fix "A1" entries in geoip file.
...
Fixes #6266 .
2012-11-27 21:24:07 -05:00
267c0e5aa1
Make sure that the error in ADDRMAP events is well-formed
...
"error=Unable to launch resolve request" is not a nice thing to tell
the controller. Bugfix on 0.2.0.19-alpha (c11c48fc
2012-11-23 11:36:44 -05:00
864e15cd1c
In comments and logs, say "UTC" not "GMT"
...
Fix for #6113 .
Note that the RFC1123 times we generate still all say 'GMT'. I'm
going to suggest this is not worth changing.
2012-11-23 10:05:16 -05:00
b1ad84dce6
Add a changes file for IPv6 exits
2012-11-14 23:35:55 -05:00
7908ab2093
Move address map into its own file.
2012-11-14 23:16:20 -05:00
2cb82c33bc
Merge branch 'bug7267' of ssh://git-rw.torproject.org/user/andrea/tor
2012-11-13 18:54:24 -08:00
02a43e5eb6
Merge remote-tracking branch 'public/bug7059'
2012-11-13 21:50:07 -05:00
b17aa28e46
Actually distribute the geoip6 file.
...
Fixes a bug (with no ticket) on 0.2.4.6-alpha.
2012-11-13 21:24:28 -05:00
3b517ea5f4
Add changes file for bug 7267
2012-11-13 13:46:36 -08:00
713b5eb31c
fold in changes files
2012-11-12 23:51:47 -05:00
a90affa84b
Merge branch 'maint-0.2.3'
2012-11-12 23:49:37 -05:00
88bb48e785
use a more logical operator
...
Fix a harmless bug when opting against publishing a relay descriptor
because DisableNetwork is set.
Fixes bug 7464; bugfix on 0.2.3.9-alpha.
2012-11-12 23:47:21 -05:00
f473d83dea
Possible fix for bug 7212
...
This is the simplest possible workaround: make it safe to call
circuit_cell_queue_clear() on a non-attached circuit, and make it
safe-but-a-LD_BUG-warning to call update_circuit_on_cmux() on a
non-attached circuit.
LocalWords: unstage src Untracked
2012-11-12 08:28:09 -05:00
0523c8de7d
Merge branch 'check_for_orconn_on_close_squashed' of ssh://git-rw.torproject.org/user/andrea/tor
2012-11-10 03:24:41 -08:00
fc1a9a13cf
Add changes file for connection_mark_for_close()/connection_mark_and_flush() or_connection_t checking
2012-11-10 02:38:40 -08:00
713736a6a7
Fix a memory leak in handling errors on CERTS cells. bug 7422
2012-11-08 23:01:39 -05:00
81deddb08c
Merge remote-tracking branch 'origin/maint-0.2.3'
...
Conflicts:
src/common/crypto.c
src/or/rendservice.c
2012-11-08 16:48:04 -05:00
49dd5ef3a3
Add and use and unlikely-to-be-eliminated memwipe()
...
Apparently some compilers like to eliminate memset() operations on
data that's about to go out-of-scope. I've gone with the safest
possible replacement, which might be a bit slow. I don't think this
is critical path in any way that will affect performance, but if it
is, we can work on that in 0.2.4.
Fixes bug 7352.
2012-11-08 16:44:50 -05:00
9f3f5372b8
Merge branch 'bug7350' of ssh://git-rw.torproject.org/user/andrea/tor
2012-11-07 11:43:04 -08:00
3b270e86be
Add changes file for bug7350
2012-11-07 11:39:49 -08:00
Nick Mathewson
Roger Dingledine
Mike Perry
Karsten Loesing
George Kadianakis
Andrea Shepard