David Goulet 07b3028db7 Prohibit the use of one entry node with an HS ...

In a nutshell, since a circuit can not exit at its entry point, it's very
easy for an attacker to find the hidden service guard if only one EntryNodes
is specified since for that guard, the HS will refuse to build a rendezvous
circuit to it.

For now, the best solution is to stop tor to allow a single EntryNodes for
an hidden service.

Fixes #14917

Signed-off-by: David Goulet <dgoulet@ev0ke.net>

2015-09-02 10:47:20 -04:00

..

.dummy

Add a .dummy file in the changes directory to stop git from removing it

2015-05-11 11:41:48 -04:00

16679_16685_etc

changes file for ed25519_keygen branch

2015-08-19 13:36:51 -04:00

autodetect-chutney-path

Autodetect CHUTNEY_PATH if chutney is next to tor

2015-08-27 10:31:35 +10:00

bug14917

Prohibit the use of one entry node with an HS

2015-09-02 10:47:20 -04:00

bug16274

Set the open file limit to the current value before changing it

2015-08-05 13:17:33 -04:00

bug16286

Improve log messages for problems about ed25519 keypinning

2015-07-31 10:47:39 -04:00

bug16389

Add changes file for #16389

2015-08-13 15:09:35 +02:00

bug16524

Make HSDir depend on Running/Valid again.

2015-08-11 08:42:19 -04:00

bug16539

Fix a memory leak when adding an ri with expired ed certs

2015-08-12 12:27:45 -04:00

bug16644

Switch order of unblocking threads and releasing the mutex.

2015-08-04 13:35:02 -04:00

bug16697

Add get_max_sockets() and remove dead code

2015-07-30 15:21:12 -04:00

bug16741

Check for EINTR correctly on windows

2015-08-07 09:12:33 -04:00

bug16742

Increase AccountingMax example value to 40 GB.

2015-08-14 09:54:29 -04:00

bug16901

Fail in configure when openssl is too old. #16901.

2015-09-01 09:02:12 -04:00

bug16913

Remove -F from tor-resolve(1) usage message.

2015-08-30 21:57:24 +03:00

bug16924

properly delete current channel in channel_free_list

2015-09-01 15:10:10 +02:00

bug16929

Include doc/TUNING in our release tarballs

2015-09-01 09:15:11 -04:00

bug16964

Let bridge authorities run under the sandbox

2015-09-02 09:59:22 -04:00

bug16965

Let recent relays run with the chutney sandbox.

2015-09-02 09:59:50 -04:00

callgraph

changes file for callgraph scripts

2015-07-30 12:35:52 -04:00

chutney-coverage

When building with coverage, run chutney with coverage

2015-08-03 13:23:58 -04:00

decouple_control_events

Refactor our logic for sending events to controllers

2015-08-18 08:55:28 -04:00

decouple_dir_all_unreachable

Decouple the backend for directory_all_unreachable to simplify our CFG

2015-08-12 11:02:20 -04:00

decouple_init_keys

Split the client-only parts of init_keys() into a separate function

2015-08-11 10:41:20 -04:00

decouple_lost_owner

Change lost_owning_controller() to call activate_signal().

2015-08-13 09:17:41 -04:00

decouple_retry_directory

Decouple routerlist_retry_directory_downloads() from the blob

2015-08-13 09:45:30 -04:00

decouple-write-handle_write

Do not autoflush control connections as their outbufs get big

2015-07-30 13:31:27 -04:00

early-check-paths

Improved targets for "run all the tests, no, all of them."

2015-08-03 13:03:58 -04:00

feature14175-chutney-performance

Add chutney performance testing support to src/test/test-network.sh

2015-07-06 16:59:15 +10:00

feature14882-TestingDirAuthVoteIsStrict

New TestingDirAuthVote{Exit,Guard,HSDir}IsStrict flags

2015-08-18 14:51:57 +10:00

feature16533

Use ed25519-donna's batch verification support when applicable.

2015-08-12 16:01:28 +00:00

feature16535

Enable ed25519-donna's SSE2 code when possible for 32 bit x86.

2015-08-17 18:41:41 +00:00

geoip-july2015

Update geoip and geoip6 to the July 8 2015 database.

2015-07-29 15:49:04 +02:00

malformed-hostname-safe-logging

Expand changes file

2015-08-25 09:37:52 -04:00

microdesc_cycle

Remove a 9-function strongly connected component of tor's callgraph.

2015-08-10 15:00:17 -04:00

move_formatting_functions

whoops; add a stale changes file

2015-08-12 12:31:03 -04:00

pullup_nulterm

Remove the unused "nulterminate" option to buf_pullup()

2015-09-01 14:36:25 -04:00

test-full

Improved targets for "run all the tests, no, all of them."

2015-08-03 13:03:58 -04:00

test-network-bridges-hs

Test bridges and hidden services in make test-network

2015-09-02 00:52:30 +10:00

test-workqueue-windows

Let's try to get test_workqueue working on windows

2015-08-05 10:34:46 -04:00

ticket13338

Remove tor-fw-helper code

2015-07-14 14:48:22 -04:00

ticket15254-hs-stats-default

Enable hidden service statistics by default

2015-09-02 13:53:36 +02:00

ticket16831_part1

Adding changes file.

2015-08-23 16:06:41 +03:00

windows_only_files

Wrap windows-only C files in #ifdef _WIN32

2015-07-30 11:14:15 -04:00

workqueue_reply_t

Ensure worker threads actually exit when it is time

2015-08-21 10:36:53 -04:00