Commit Graph
5379 Commits
Author SHA1 Message Date
Nick Mathewson 9b87cfbdf8 r19723@catbus: nickm | 2008-05-13 08:41:40 -0400
Bump version and update authority keys affected by Debian OpenSSL bug (See CVE-2008-0166 or http://lists.debian.org/debian-security-announce/2008/msg00152.html )


svn:r14600
2008-05-13 12:42:25 +00:00
Nick Mathewson 0fa5a9de05 r19713@catbus: nickm | 2008-05-12 17:10:37 -0400
Bugfix: an authority signature is "unrecognized" if we lack a dirserver entry for it, even if we have an older cached certificate that says it is recognized.  This affects clients who remove entries from their dirserver list without clearing their certificate cache.


svn:r14596
2008-05-12 21:12:01 +00:00
Nick Mathewson 040754b3a0 r19707@catbus: nickm | 2008-05-12 11:42:05 -0400
Backport: Actually load the legacy key, not just the authority key twice.


svn:r14595
2008-05-12 15:42:18 +00:00
Nick Mathewson 029a897634 r19696@catbus: nickm | 2008-05-12 00:22:25 -0400
Backport: Add unit tests for last patch; make it more testable; fix a bug or two.


svn:r14587
2008-05-12 04:29:07 +00:00
Nick Mathewson befa56c72e r19691@catbus: nickm | 2008-05-11 22:13:41 -0400
Backport: Implement a proposal to let a directory authority migrate its identity key without ceasing to sign consensuses.


svn:r14585
2008-05-12 02:14:15 +00:00
Roger Dingledine 4833d1a30a tone down some of the log severities
svn:r14441
2008-04-24 05:17:58 +00:00
Nick Mathewson e14725a577 r15309@tombo: nickm | 2008-04-23 16:47:17 -0400
Backport: Free baddir and badexit policy lists on exit.  fixes bug 672. only affects authorities.


svn:r14432
2008-04-23 20:48:14 +00:00
Nick Mathewson 5dfd0c354f r15303@tombo: nickm | 2008-04-23 16:29:45 -0400
Embarassing.  I had apparently broken OSX and Freebsd by not initializing threading before we initialize the logging system.  This patch should do so, and fix bug 671.  Forward-port candidate.


svn:r14429
2008-04-23 20:32:09 +00:00
Roger Dingledine a4b4ae3e46 Take lefkada out of the list of v3 directory authorities, since
it has been down for months.
Set up dizum (run by Alex de Joode) as the new sixth v3 directory
authority.


svn:r14421
2008-04-23 00:18:07 +00:00
Nick Mathewson ede6ac7c9d r15288@tombo: nickm | 2008-04-22 17:09:36 -0400
Backport: Periodically launch requests for server/authority.z when it might help us learn our IP.  Fix for bug 652.


svn:r14419
2008-04-22 21:11:00 +00:00
Nick Mathewson 2e0bf9d8bf r15284@tombo: nickm | 2008-04-22 13:44:22 -0400
Backport: Correctly notify one-hop connections when a circuit build has failed. possible fix for bug 669. found by lodger.


svn:r14416
2008-04-22 17:44:36 +00:00
Nick Mathewson a041553e21 r15279@tombo: nickm | 2008-04-22 13:21:01 -0400
Backport: Apply patch from mwenge to fix bug 646: makes stream events for dns requests get generated more consistently.


svn:r14414
2008-04-22 17:21:26 +00:00
Nick Mathewson 2fd8c928b3 r15274@tombo: nickm | 2008-04-22 12:32:48 -0400
Backport: apply patch from lodger: reject requests for reverse-dns lookup of names in private address space.  make non-exits reject all dns requests.  Fixes bug 619.


svn:r14411
2008-04-22 16:33:06 +00:00
Nick Mathewson a25b424d4b r15270@tombo: nickm | 2008-04-22 12:23:39 -0400
Backport: Fix bug 663: warn less verbosely about clock skew from netinfo cells


svn:r14409
2008-04-22 16:23:51 +00:00
Nick Mathewson 68b2a57ffd r15239@tombo: nickm | 2008-04-17 16:22:50 -0400
Backport: Do not allocate excess space for named_flag and unnamed_flag in dirvote.c.  Fixes bug 662.  Not a dangerous bug: sizeof(int*) is at least as big as sizeof(int) everywhere.


svn:r14392
2008-04-17 20:23:24 +00:00
Roger Dingledine fbb0c6eec3 Fix a dumb bug that was preventing us from knowing that we should
preemptively build circuits to handle expected directory requests.
Fixes bug 660. Bugfix on 0.1.2.x.


svn:r14375
2008-04-16 00:07:18 +00:00
Roger Dingledine 28c802b5fd Avoid a rare assert that can trigger when Tor doesn't have much
directory information yet and it tries to fetch a v2 hidden
service descriptor. Fixes bug 651, reported by nwf.


svn:r14373
2008-04-15 23:05:44 +00:00
Nick Mathewson d3b6da8178 r19269@catbus: nickm | 2008-04-09 14:24:36 -0400
Backport r14212: Free some static hashtables and the log mutex on exit.


svn:r14333
2008-04-09 18:24:55 +00:00
Nick Mathewson 27ddacce62 r19268@catbus: nickm | 2008-04-09 14:20:54 -0400
Backport 14205: Free authority certificates on exit, so they dont look like memory leaks.


svn:r14332
2008-04-09 18:24:50 +00:00
Nick Mathewson ae0d14d346 r19267@catbus: nickm | 2008-04-09 14:19:17 -0400
Backport 14204: start policy reference counts at 1, not 2.


svn:r14331
2008-04-09 18:24:48 +00:00
Roger Dingledine ec673cf9ae backport r14281/r14297 plus a changelog entry
svn:r14311
2008-04-08 00:53:34 +00:00
Peter Palfrader cb59d39e6f Merge r14277 and r14278: When opening a logfile fails, tell us why
svn:r14282
2008-04-02 22:10:05 +00:00
Nick Mathewson f571799a67 r19153@catbus: nickm | 2008-03-30 23:20:48 -0400
Backport: Make unit tests pass again after Link protocol list change.


svn:r14255
2008-03-31 03:21:01 +00:00
Nick Mathewson f219ebed3e r19141@catbus: nickm | 2008-03-30 14:13:52 -0400
Backport: Note in our router descriptors that we actually support link protocol version 2, now that it seems to work.


svn:r14248
2008-03-30 18:15:01 +00:00
Nick Mathewson f58d16ed9e r19101@catbus: nickm | 2008-03-27 12:56:29 -0400
Backport r14214.  This is not 100% trivial, options_init_from_torrc() got cleaned up a lot.  The fact that it was much easier to do in trunk probably means that the cleanups were the right thing to do.


svn:r14219
2008-03-27 16:56:36 +00:00
Nick Mathewson 83825b4883 r19099@catbus: nickm | 2008-03-27 12:52:19 -0400
Backport adding an initializer for policy_root.


svn:r14217
2008-03-27 16:56:32 +00:00
Nick Mathewson 18c2beec07 r19069@catbus: nickm | 2008-03-26 13:25:11 -0400
Backport fix so dmalloc can work again.


svn:r14200
2008-03-26 17:25:28 +00:00
Roger Dingledine 981ad6021d backport r14162-r14164
svn:r14167
2008-03-24 19:14:48 +00:00
Roger Dingledine 77302e3578 touch up the comment too
svn:r14115
2008-03-18 23:11:52 +00:00
Roger Dingledine fc3f30c95e Stop using encrypted dir connections for direct dir requests when you're
acting like a dir mirror. This should reduce load on the directory
authorities, and also will remove the ugly "We just marked ourself as
down" warnings my authorities keep getting.


svn:r14114
2008-03-18 22:54:37 +00:00
Roger Dingledine 6c37f1e309 an elaborate no-op. i hope.
svn:r14113
2008-03-18 21:17:15 +00:00
Nick Mathewson 0be0f230ee r18942@catbus: nickm | 2008-03-18 15:00:09 -0400
Backport: Likely fix for bug 632: do not call start_reading on a placeholder connection.


svn:r14110
2008-03-18 19:00:31 +00:00
Nick Mathewson a258f9b594 r18938@catbus: nickm | 2008-03-18 14:51:30 -0400
Backport: Fix the other lingering part of bug 617: make ClientDNSRejectInternalAddresses actually work.


svn:r14108
2008-03-18 18:51:42 +00:00
Nick Mathewson 726141b4da r18915@catbus: nickm | 2008-03-18 10:48:18 -0400
Fix unittests and router generation behavior on 0.2.0 branch. backport of r14084. fixes bug 631.


svn:r14095
2008-03-18 14:48:30 +00:00
Nick Mathewson 5109f64107 r18898@catbus: nickm | 2008-03-17 16:25:58 -0400
Partial backport: Fix bug in earlier bugfix.  Disallow empty exit policies in router descriptors.


svn:r14083
2008-03-17 20:26:00 +00:00
Nick Mathewson 5e63abc20b r18892@catbus: nickm | 2008-03-17 13:21:04 -0400
Backport: Patch from Sebastian Hahn: give an error message on "error replacing old router store."


svn:r14081
2008-03-17 17:21:22 +00:00
Nick Mathewson 7f61a72111 r18881@catbus: nickm | 2008-03-17 12:51:33 -0400
Backport: Fix policy-related crash bug found by lodger.


svn:r14078
2008-03-17 16:52:01 +00:00
Nick Mathewson c33722b5c0 r18874@catbus: nickm | 2008-03-17 00:07:41 -0400
Backport: Only dump all guard node status to the log when the guard node status actually changes.  Downgrade the 4 most common remaining INFO log messages to DEBUG.


svn:r14071
2008-03-17 04:08:04 +00:00
Nick Mathewson 8785759e0d r18863@catbus: nickm | 2008-03-16 23:37:39 -0400
{in 0.2.0} Part of fix for bug 617: do not mark-for-close on invalid .in-addr.arpa DNSPort request, since it would be a duplicate mark.


svn:r14067
2008-03-17 03:37:59 +00:00
Peter Palfrader 1126cf41f2 backport: Use proper log levels in the testsuite call of get_interface_address6().
svn:r14009
2008-03-13 16:56:36 +00:00
Nick Mathewson 2c66c7d1e0 r18729@catbus: nickm | 2008-03-11 00:44:53 -0400
Fix the SVK version detection logic to work right on a branch: tolerate multiple "copied from" tags and only look at the first.


svn:r13960
2008-03-11 04:47:12 +00:00
Nick Mathewson 5c6d0919ba r18725@catbus: nickm | 2008-03-11 00:29:57 -0400
Backport to 0.2.0.x branch: Fix bug spotted by mwenge: a server_event should not be a sever_event.  Not backporting to 0.1.2.x.


svn:r13958
2008-03-11 04:30:22 +00:00
Roger Dingledine d8651d1072 Enable encrypted directory connections by default, so censor
tools that block Tor directory connections based on their plaintext
patterns will no longer work. This means Tor works in certain
censored countries by default again.


svn:r13934
2008-03-10 07:49:20 +00:00
Roger Dingledine 80ac7afb2e If we set RelayBandwidthRate and RelayBandwidthBurst very high but
left BandwidthRate and BandwidthBurst at the default, we would be
silently limited by those defaults. Now raise them to match the
RelayBandwidth* values.


svn:r13926
2008-03-10 05:17:46 +00:00
Roger Dingledine 37f2f548bf We were sometimes miscounting the number of bytes read from the
network, causing our rate limiting to not be followed exactly. 
Bugfix on 0.2.0.16-alpha. Reported by lodger.


svn:r13799
2008-03-02 07:11:09 +00:00
Roger Dingledine a52c215dd1 make complaint about not having the v1 directory quieter. nobody cares.
svn:r13792
2008-03-01 09:37:59 +00:00
Roger Dingledine 4c7e515a40 The control port should declare that it requires password auth
when HashedControlSessionPassword is set too. Patch from Matt Edman;
bugfix on 0.2.0.20-rc. Fixes bug 615.


svn:r13777
2008-02-29 01:43:44 +00:00
Nick Mathewson b229154fa8 r18463@catbus: nickm | 2008-02-27 14:19:21 -0500
Backport: Add better warnings for the error that produced bug 614, and downgrade from a tor_assert() to a tor_fragile_assert().


svn:r13753
2008-02-27 19:19:38 +00:00
Roger Dingledine e7f3d6f76c fix most of pnx's warnings on irix64
svn:r13706
2008-02-24 23:39:53 +00:00
Nick Mathewson 3452486ac6 r14422@tombo: nickm | 2008-02-24 17:09:56 -0500
Whitespace fixes


svn:r13700
2008-02-24 22:11:18 +00:00