Nick Mathewson 34a6755b94 Fix ed25519 link certificate race on tls context rotation ...

Whenever we rotate our TLS context, we change our Ed25519
Signing->Link certificate.  But if we've already started a TLS
connection, then we've already sent the old X509 link certificate,
so the new Ed25519 Signing->Link certificate won't match it.

To fix this, we now store a copy of the Signing->Link certificate
when we initialize the handshake state, and send that certificate
as part of our CERTS cell.

Fixes one case of bug22460; bugfix on 0.3.0.1-alpha.

2017-06-01 09:26:24 -04:00

..

.dummy

Add a .dummy file in the changes directory to stop git from removing it

2015-05-11 11:41:48 -04:00

bug20059

Avoid a double-mark bug when makring a pending circuit as "too old"

2017-03-15 11:05:37 -04:00

bug20509

dir auths reject 0.2.9.x for x<5, due to bug 20499

2017-05-22 08:31:39 -04:00

bug20711

Clarify the message logged when a remote relay is unexpectedly missing a port

2017-01-03 16:56:32 +11:00

bug20894

fixup! Don't atoi off the end of a buffer chunk.

2017-02-14 16:44:58 -05:00

bug21007_case2

Also allow C_MEASURE_TIMEOUT circuits to lack guard state.

2017-02-24 11:12:21 -05:00

bug21027

Change approach to preventing duplicate guards.

2017-02-28 08:16:33 -05:00

bug21116

test: Add missing socket errno in test_util.c

2017-02-08 09:00:48 -05:00

bug21278_extras

changes file for removing compare-by-subtraction pattern

2017-02-14 16:32:59 -05:00

bug21278_prevention

When examining descriptors as a dirserver, reject ones with bad versions

2017-02-15 07:46:34 -05:00

bug21369_check

Try to check for (and prevent) buffer size INT_MAX overflow better.

2017-02-27 10:01:27 -05:00

bug21415

Improve descriptor checks in the new guard algorithm.

2017-03-01 08:46:53 -05:00

bug21420

Revise the logic for picking the start time for link certs

2017-02-27 11:19:54 -05:00

bug21447

Rename make fuzz to make test-fuzz-corpora

2017-02-14 18:04:10 -05:00

bug21450

Limit version numbers to 0...INT32_MAX.

2017-02-15 07:57:34 -05:00

bug21471

hs: Avoid a strlen(NULL) if descriptor is not found in cache

2017-02-15 10:27:41 -05:00

bug21472

Small fixes to fuzzing documentation.

2017-02-24 10:57:58 -05:00

bug21492

Remove a redundant check in ..transition_affects_guards()

2017-02-17 11:47:25 -05:00

bug21553

hs: Fix bad use of sizeof() when encoding ESTABLISH_INTRO legacy cell

2017-02-24 11:36:36 -05:00

bug21562

Use bash in src/test/test-network.sh

2017-02-28 02:13:56 +11:00

bug21576

Fix a crash when a connection tries to open just after it has been unlinked

2017-03-02 11:10:30 +11:00

bug21581

Restore support for test-network.sh on BSD and other systems without bash

2017-03-01 11:40:54 +11:00

bug21594

Remove delay in hidden service introduction point checks

2017-03-07 08:04:57 -05:00

bug21596

Make hidden services always check for failed intro point connections

2017-03-02 15:34:45 +11:00

bug21682

Fix a memory leak in config_get_assigned_option()

2017-03-08 10:06:48 -05:00

bug21720

#21720: Update "directory server options" preamble in manpage

2017-03-14 11:25:54 -04:00

bug21771

Fix max sampled size logic when in bridge mode.

2017-03-27 15:39:26 +02:00

bug21799

Use update_approx_time() to run a test 100 days in the past.

2017-03-23 10:44:43 +01:00

bug21825

hs: Expose hs_service.c functions for unit tests

2017-04-04 09:41:14 -04:00

bug21894_029

Never read off the end of a buffer in base32_encode()

2017-04-07 10:47:16 -04:00

bug21943

Add a changes file for 21943.

2017-05-08 13:39:59 -04:00

bug22034

control: Wrong check on base16_decode return value

2017-04-24 09:20:13 -04:00

bug22246

Initialize the HS cache at startup

2017-05-15 13:49:29 -04:00

bug22252

Fix crash when starting with LearnCircuitBuildTimeout 0.

2017-05-16 11:20:12 -04:00

bug22370

Stop leaking keypin-rejected routerinfos on directory authorities

2017-05-25 00:09:40 -04:00

bug22447

hs: Correctly validate v3 descriptor encrypted length

2017-05-30 10:27:42 -04:00

bug22460_case1

Fix ed25519 link certificate race on tls context rotation

2017-06-01 09:26:24 -04:00

feature21570

Log tor warnings during 'make test-network-all'

2017-02-28 02:01:37 +11:00

geoip-april2017

Update geoip and geoip6 to the April 4 2017 database.

2017-04-06 10:52:39 +02:00

geoip-february2017

Update geoip and geoip6 to the February 8 2017 database.

2017-02-12 15:56:31 +01:00

geoip-march2017

Update geoip and geoip6 to the March 7 2017 database.

2017-03-08 09:41:35 +01:00

geoip-may2017

Update geoip and geoip6 to the May 2 2017 database.

2017-05-08 10:09:42 +02:00

prop275-minimal

Stop declining to download microdescs with future published times.

2017-03-06 15:37:01 -05:00

ticket20656

protover: Add new version for prop224 for HSIntro/HSDir

2017-02-14 10:51:18 -05:00

ticket21564

Update fallback directory mirrors in May 2017

2017-05-16 19:02:42 +10:00

trove-2017-001.2

Avoid integer underflow in tor_version_compare.

2017-02-14 16:10:27 -05:00