fc6d1c97b9
Fix TLS error logging
...
svn:r458
2003-09-15 18:37:49 +00:00
7c8e07722c
Log protocol errors
...
svn:r457
2003-09-15 18:18:37 +00:00
4581f5f166
bugfix: onion pending queue now works
...
and fixed recent memory leak
svn:r456
2003-09-14 08:17:14 +00:00
b45569bc4a
finally tracked down the seg fault
...
svn:r455
2003-09-14 06:43:18 +00:00
cb5d22f97f
fix the cpuworker circ-had-vanished bug (maybe)
...
still several (many) tls-related bugs outstanding.
svn:r454
2003-09-14 02:58:50 +00:00
fb2a464434
let tor compile with tls on rh9
...
nick: is this the right way to do the autoconf stuff? what happens when
/usr/kerberos/include/ doesn't exist?
an alternate way is to add `pkg-config --cflags openssl` to CFLAGS, but
it seems that command only works on rh9. yay portability issues.
svn:r453
2003-09-14 01:44:44 +00:00
6f41b06b4b
fix two more bugs
...
svn:r452
2003-09-13 21:53:38 +00:00
0cc888cdb3
reshuffle functions for cleaner organization
...
svn:r451
2003-09-12 22:45:31 +00:00
c0c31d3524
tls works between routers now too
...
things are still a bit shaky
svn:r450
2003-09-12 06:50:21 +00:00
7b73cf1319
tls works with onion proxies now.
...
svn:r449
2003-09-12 06:20:36 +00:00
b5a9a1925a
serious bug in cpuworker. need to think about redesign or how to handle it.
...
svn:r448
2003-09-12 06:18:38 +00:00
9d582789a6
Fix bugs in certificate generation and SSL context creation. Both seem to work now.
...
svn:r447
2003-09-11 23:26:31 +00:00
ffffc0b9ea
update onion router configs for tls
...
svn:r446
2003-09-11 22:20:16 +00:00
d0e4879da6
check for funny business from the remote peer
...
svn:r445
2003-09-11 22:19:48 +00:00
807307101c
Non-debugging messages are nice to log too
...
svn:r444
2003-09-11 22:13:13 +00:00
4432bd17aa
Resolve XXXXs in tortls.c
...
svn:r443
2003-09-11 21:38:57 +00:00
d852a4b64b
Simplify some code paths in TLS; cut down on memory leaks; use
...
reasonable ciphers if not everyone has OpenSSL 0.9.7.
svn:r442
2003-09-11 21:12:39 +00:00
093a9392bc
Add router_get_by_pk function; use in connection_tls_finish_handshake.
...
svn:r441
2003-09-11 20:32:15 +00:00
6987a738e4
fix typo that's been bugging me
...
svn:r440
2003-09-11 20:10:39 +00:00
ad17de1001
collect info from peer we just handshaked with
...
svn:r439
2003-09-11 20:06:55 +00:00
bfd9ef03cb
Add certificate verification functions
...
svn:r438
2003-09-10 00:47:39 +00:00
445f6cdff1
Make crypto structures private to crypto.c
...
svn:r437
2003-09-10 00:47:24 +00:00
272593ba39
Add prototypes for functions to check whether the peer certificate is
...
valid (if it is present); and to get a public key from a peer
certificate (in order to identify the peer).
svn:r436
2003-09-10 00:10:37 +00:00
d357430274
fix confirmed win32 bug
...
svn:r435
2003-09-08 23:10:24 +00:00
b3343385bb
tls infrastructure now in place, give or take
...
svn:r434
2003-09-08 10:59:00 +00:00
7438e169f4
another wishlist function for the tls interface
...
svn:r433
2003-09-08 10:46:19 +00:00
2dc14afe8a
add CertFile, Nickname
...
write new certfile if you don't have one already
set up a tls context on startup
svn:r432
2003-09-08 06:26:38 +00:00
5367c2ee09
hide the global tls context inside tortls.c
...
svn:r431
2003-09-08 06:22:19 +00:00
697905858d
clean up config.c so it doesn't expose as much
...
svn:r430
2003-09-08 05:16:18 +00:00
310ce8bd70
more futzing towards tls
...
not there yet
svn:r429
2003-09-07 10:24:40 +00:00
637c9f993e
clean read_to_buf more
...
svn:r428
2003-09-05 11:25:24 +00:00
4d01191f5f
fill in a gap in the spec
...
svn:r427
2003-09-05 06:46:39 +00:00
b36aa75feb
general cleanup and reabstraction, to prepare for tls
...
svn:r426
2003-09-05 06:04:03 +00:00
b7b76c84da
move variable declarations to top of function
...
svn:r425
2003-09-05 05:58:21 +00:00
d5cc410e32
Add initial interfaces and code for TLS support. Interfaces are right; code needs work and testing.
...
svn:r424
2003-09-04 16:05:08 +00:00
6a664d81eb
update the TODO
...
svn:r423
2003-08-31 00:11:01 +00:00
8b499c83bd
point out why router_forget_router probably doesn't work
...
svn:r422
2003-08-29 21:50:53 +00:00
c4e3e30112
Fix memory leaks in directory parsing
...
svn:r421
2003-08-28 04:21:57 +00:00
f89ea2641f
remove op_port from the spec also
...
svn:r420
2003-08-27 22:45:10 +00:00
970f7d462f
router formats don't include op_port now either
...
svn:r419
2003-08-27 22:42:39 +00:00
0e30000908
remove last vestiges of op_port
...
svn:r418
2003-08-27 22:42:10 +00:00
ed7833e827
note an assert bug that's still around
...
svn:r417
2003-08-25 22:02:42 +00:00
1766f04f0e
make the conn->package_window bug go away.
...
not resolved, but at least the servers will stop crashing.
svn:r416
2003-08-25 21:43:51 +00:00
69a450f8d5
Attempt to track down bug in conn->package_window
...
svn:r415
2003-08-25 20:57:23 +00:00
76974b732f
Correct description of extracting Kf and Kb from g^xy.
...
svn:r414
2003-08-25 18:50:29 +00:00
e37153b17e
remove bandwidth negotation from the code
...
we still use bandwidth on a per-connection basis for rate
limiting. but it's unclear if we need this infrastructure in
addition to the total-bandwidth rate limiting that we also do.
i'll leave both infrastructures in, and we'll remove the
per-connection one if it starts rotting too much.
svn:r413
2003-08-25 08:28:34 +00:00
f9e1e9a017
remove bandwidth from handshake negotiations
...
replace too-prescriptive link throttling spec with handwavy one
svn:r412
2003-08-25 08:26:34 +00:00
b6470939cd
fix formatting in crypto.c for my sanity
...
svn:r411
2003-08-25 07:06:12 +00:00
253b2763ad
fix a mild memory leak (10 bytes each time an OR connected to an OR)
...
svn:r410
2003-08-25 06:24:17 +00:00
f05a40266c
add router twins to the spec
...
svn:r409
2003-08-25 03:00:31 +00:00
Nick Mathewson
Roger Dingledine