Roger Dingledine
161ca100a6
fold in recent changes entries
2012-10-19 14:43:21 -04:00
Roger Dingledine
55cae7dbf1
Merge branch 'maint-0.2.3' into release-0.2.3
2012-10-19 14:30:58 -04:00
Nick Mathewson
1cc06bd35e
Merge branch 'block_renegotiate_023' into maint-0.2.3
2012-10-19 14:30:31 -04:00
Nick Mathewson
b6931b0105
Merge branch 'bug7149' into maint-0.2.3
2012-10-19 03:02:57 -04:00
Robert Ransom
d3bfdd6108
Don't serve or accept v2 HS descs over a DirPort
...
(changes file tweaked by nickm)
2012-10-19 02:56:25 -04:00
Nick Mathewson
a0e9dc9f55
Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3
2012-10-19 00:58:33 -04:00
Nick Mathewson
8743080a28
Disable TLS Session Tickets, which we were apparently getting for free
...
OpenSSL 1.0.0 added an implementation of TLS session tickets, a
"feature" that let session resumption occur without server-side state
by giving clients an encrypted "ticket" that the client could present
later to get the session going again with the same keys as before.
OpenSSL was giving the keys to decrypt these tickets the lifetime of
the SSL contexts, which would have been terrible for PFS if we had
long-lived SSL contexts. Fortunately, we don't. Still, it's pretty
bad. We should also drop these, since our use of the extension stands
out with our non-use of session cacheing.
Found by nextgens. Bugfix on all versions of Tor when built with
openssl 1.0.0 or later. Fixes bug 7139.
2012-10-19 00:54:51 -04:00
Nick Mathewson
f357ef9dcc
Discard extraneous renegotiation attempts in the v3 link protocol
...
Failure to do so left us open to a remotely triggerable assertion
failure. Fixes CVE-2012-2249; bugfix on 0.2.3.6-alpha. Reported by
"some guy from France".
2012-10-17 19:18:16 -04:00
Roger Dingledine
60d0964c9a
slight tweak, and also reformat
2012-10-13 21:06:13 -04:00
Nick Mathewson
e26630d091
Expand 0.2.3 dedication paragaph to full version of latest draft
...
We should still make sure mlp approves it.
2012-10-13 19:39:59 -04:00
Roger Dingledine
f33b65393b
fold in the changes files so far
2012-10-13 19:25:58 -04:00
Roger Dingledine
09633dd07c
correct a point about logging
2012-10-13 19:25:42 -04:00
Roger Dingledine
286cbeac84
start at an 0.2.3 release notes
2012-10-13 18:47:05 -04:00
Roger Dingledine
f52fd41842
Merge branch 'maint-0.2.3' into release-0.2.3
2012-10-13 18:35:05 -04:00
Nick Mathewson
e2549c3b74
Merge branch 'bug7014_023_squashed' into maint-0.2.3
2012-10-09 23:46:56 -04:00
George Kadianakis
721f99e495
Don't call fmt_addr() twice in a parameter list.
2012-10-09 23:46:04 -04:00
Nick Mathewson
0a3dfd0423
Merge remote-tracking branch 'arma/bug7037' into maint-0.2.3
2012-10-04 12:46:33 -04:00
Roger Dingledine
e50fa0d6cb
Refuse extra create cells with reason "resource limit"
...
In the past we had used reason "internal", which is more vague than
it needs to be. Resolves bug 7037.
2012-10-03 20:17:37 -04:00
Roger Dingledine
b1971d89c8
properly free the return values of rate_limit_log()
...
resolves bug 7022.
2012-10-03 13:15:27 -04:00
Roger Dingledine
c88a4c51b4
add faravahar as our ninth v3 dir auth
2012-09-22 09:10:37 -04:00
Nick Mathewson
b9c86948e4
Clarify that hidden services are TCP only
...
Also remove some trailing whitespace.
Patch from maker; fixes bug 6024.
2012-09-19 08:19:21 -04:00
Nick Mathewson
aca325eb0c
Whitespace fixes
2012-09-18 16:16:17 -04:00
Mike Perry
4bfed4378d
Bug 6866: Convert pathbias asserts into log messages.
...
Asserts were hit by Tor2Web mode.
2012-09-17 18:25:28 -07:00
Nick Mathewson
b1447a4312
Use file-size-fixup code on cygwin too.
...
We already had code on windows to fix our file sizes when we're
reading a file in text mode and its size doesn't match the size from
fstat. But that code was only enabled when _WIN32 was defined, and
Cygwin defines __CYGWIN__ instead.
Fixes bug 6844; bugfix on 0.1.2.7-alpha.
2012-09-14 12:39:18 -04:00
Robert Ransom
909691f1ae
Fix man page typo
2012-09-13 23:25:03 -07:00
Nick Mathewson
1e68c213a2
mention the bug number in the 6827 changes file
2012-09-13 10:07:06 -04:00
Robert Ransom
0a6480cdd0
Avoid undefined behaviour when parsing HS protocol versions
...
Fixes bug 6827; bugfix on c58675ca72
(when the v2 HS desc parser was implemented).
Found by asn.
2012-09-13 07:48:21 -04:00
Nick Mathewson
45439bfced
Revert "6819: typo in torrc.sample.in"
...
This reverts commit 4aff97cfc7 .
We don't actually want to be changing the torrc.sample on stable or
near-stable stuff, since doing so makes pointless busywork for debian
users.
2012-09-12 15:37:47 -04:00
Nick Mathewson
1f5a7917f5
Merge remote-tracking branch 'public/bug6341_a_v2' into maint-0.2.3
2012-09-12 11:10:59 -04:00
Nick Mathewson
4aff97cfc7
6819: typo in torrc.sample.in
2012-09-12 11:08:30 -04:00
Roger Dingledine
213ba1a70b
bump to 0.2.3.22-rc
tor-0.2.3.22-rc
2012-09-11 14:44:10 -04:00
Roger Dingledine
e2fd67fc56
move 0.2.2.39 changelog forward
2012-09-11 14:30:11 -04:00
Roger Dingledine
de3cd99240
fold in 0.2.3.22-rc changes
2012-09-11 14:26:30 -04:00
Roger Dingledine
57f05c318d
Merge branch 'maint-0.2.3' into release-0.2.3
2012-09-11 14:18:14 -04:00
Nick Mathewson
5833861f62
Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3
...
Conflicts:
src/test/test_util.c
2012-09-11 13:20:15 -04:00
Nick Mathewson
84f47ffc46
Merge branch 'timegm_assert_v3_squashed' into maint-0.2.2
2012-09-11 13:14:43 -04:00
Nick Mathewson
973c18bf0e
Fix assertion failure in tor_timegm.
...
Fixes bug 6811.
2012-09-11 13:13:07 -04:00
Nick Mathewson
8731a4e148
Avoid segfault when reading state file from ancient tor
...
If s_values is null in rep_hist_load_bwhist_state_section, we would
call smartlist_len() on it, and die.
Fixes bug 6801.
2012-09-10 10:35:18 -04:00
Roger Dingledine
139a81c96d
fold in last changes file
tor-0.2.3.21-rc
2012-09-05 17:22:23 -04:00
Roger Dingledine
59deac92a1
Merge branch 'maint-0.2.3' into release-0.2.3
2012-09-05 16:46:23 -04:00
Roger Dingledine
97dbff51e6
Update the minimum bandwidth for a public relay
...
The current cutoff is 30KB, but in reality a useful cutoff is probably
more like 50KB or 100KB.
2012-09-05 16:40:57 -04:00
Nick Mathewson
9d9ca264ec
Avoid segfault if EntryGuardPathBias precedes EntryGuard
...
Fix for bug 6774; bugfix on 0.2.3.17-beta.
2012-09-05 13:27:54 -04:00
Roger Dingledine
5ee0fdafff
one more changes file
2012-09-04 20:16:59 -04:00
Roger Dingledine
5d672c1b71
Merge branch 'maint-0.2.3' into release-0.2.3
2012-09-04 20:15:58 -04:00
Roger Dingledine
0eaebaeb63
bump to 0.2.3.21-rc
2012-09-04 19:55:59 -04:00
Roger Dingledine
2946a8087b
fold in recent 0.2.3 changes files
2012-09-04 19:54:01 -04:00
Roger Dingledine
33c82ebf51
Merge branch 'maint-0.2.3' into release-0.2.3
2012-09-04 19:05:31 -04:00
Nick Mathewson
acfd487e7d
Merge remote-tracking branch 'arma/bug6743' into maint-0.2.3
2012-09-04 18:33:56 -04:00
Roger Dingledine
4bd90e20b9
fix whitespace and trivial typo
2012-09-03 02:09:39 -04:00
Roger Dingledine
eb3d079667
Make begindir_cutoff the same as general_cutoff
...
Allow one-hop directory fetching circuits the full "circuit build timeout"
period, rather than just half of it, before failing them and marking
the relay down. This fix should help reduce cases where clients declare
relays (or worse, bridges) unreachable because the TLS handshake takes
a few seconds to complete.
Fixes bug 6743 (one piece of bug 3443); bugfix on 0.2.2.2-alpha, where
we changed the timeout from a static 30 seconds.
2012-09-01 01:25:17 -04:00