Roger Dingledine [Fri, 13 Jun 2008 05:12:27 +0000 (05:12 +0000)]
backport r14329 and r14334:
Make relay cells written on a connection count as non-padding when
tracking how long a connection has been in use. Bugfix on
0.2.0.1-alpha. Spotted by lodger.
Roger Dingledine [Fri, 13 Jun 2008 04:18:26 +0000 (04:18 +0000)]
backport r15074, r15076, r15077:
When we haven't had any application requests lately, don't bother
logging that we have expired a bunch of descriptors.
Roger Dingledine [Wed, 11 Jun 2008 11:09:55 +0000 (11:09 +0000)]
If we change our MaxAdvertisedBandwidth and then reload torrc,
Tor won't realize it should publish a new relay descriptor. Fixes
bug 688, reported by mfr.
Peter Palfrader [Wed, 11 Jun 2008 10:48:21 +0000 (10:48 +0000)]
Remove debian/patches/11_tor_as_root_more_helpful.dpatch as it is no longer
needed: We now setuid() to the Tor user when run as root and it all just
works.
Roger Dingledine [Wed, 11 Jun 2008 03:21:03 +0000 (03:21 +0000)]
When we're checking if we have enough dir info for each relay
to begin establishing circuits, make sure that we actually have
the descriptor listed in the consensus, not just any descriptor.
Roger Dingledine [Wed, 11 Jun 2008 02:04:59 +0000 (02:04 +0000)]
Fix a bug where, when we were choosing the 'end stream reason' to
put in our relay end cell that we send to the exit relay, Tor
clients on Windows were sometimes sending the wrong 'reason'. The
anonymity problem is that exit relays may be able to guess whether
client is running Windows, thus helping partition the anonymity
set. Down the road we should stop sending reasons to exit relays,
or otherwise prevent future versions of this bug.
Tor 0.2.1.x can start with 'log notice stdout' and 'runasdaemon 1'
both set. Earlier Tors cannot. This will be considered a feature
of 0.2.1.x, not a bug in 0.2.0.x.
Peter Palfrader [Thu, 5 Jun 2008 23:22:20 +0000 (23:22 +0000)]
Use ${binary:Version} to depend on the right tor binary package from the
tor-dbg package instead of ${Source-Version}. Some guy on the internet said
the latter was deprecated.
Nick Mathewson [Thu, 29 May 2008 00:45:07 +0000 (00:45 +0000)]
Backport fix for bug noted by roger: rebuild extrainfo store from time to time, even if we have never actually downloaded an extrainfo. Bridge authorities need this, or they never clean the extrainfo store.
Nick Mathewson [Wed, 28 May 2008 17:19:19 +0000 (17:19 +0000)]
Backport: Fix the rpm build: we need to list all our files in the files section. Also, put fallback-consensus and geoip file in /usr/share/tor/, not in /usr/share/
Peter Palfrader [Tue, 13 May 2008 17:03:44 +0000 (17:03 +0000)]
* New upstream version.
* Conflict with old libssls.
* On upgrading from versions prior to, including, 0.1.2.19-2, or
from versions later than 0.2.0 and prior to 0.2.0.26-rc do the
following, and if we are a server (we have a /var/lib/tor/keys
directory)
- move /var/lib/tor/keys/secret_onion_key out of the way.
- move /var/lib/tor/keys/secret_onion_key.old out of the way.
- move /var/lib/tor/keys/secret_id_key out of the way if it was
created on or after 2006-09-17, which is the day the bad
libssl was uploaded to Debian unstable.
* Add a NEWS file explaining this change.
Nick Mathewson [Tue, 13 May 2008 12:42:25 +0000 (12:42 +0000)]
r19723@catbus: nickm | 2008-05-13 08:41:40 -0400
Bump version and update authority keys affected by Debian OpenSSL bug (See CVE-2008-0166 or http://lists.debian.org/debian-security-announce/2008/msg00152.html )
Nick Mathewson [Mon, 12 May 2008 21:12:01 +0000 (21:12 +0000)]
r19713@catbus: nickm | 2008-05-12 17:10:37 -0400
Bugfix: an authority signature is "unrecognized" if we lack a dirserver entry for it, even if we have an older cached certificate that says it is recognized. This affects clients who remove entries from their dirserver list without clearing their certificate cache.
Nick Mathewson [Mon, 12 May 2008 02:14:15 +0000 (02:14 +0000)]
r19691@catbus: nickm | 2008-05-11 22:13:41 -0400
Backport: Implement a proposal to let a directory authority migrate its identity key without ceasing to sign consensuses.
Nick Mathewson [Wed, 23 Apr 2008 20:32:09 +0000 (20:32 +0000)]
r15303@tombo: nickm | 2008-04-23 16:29:45 -0400
Embarassing. I had apparently broken OSX and Freebsd by not initializing threading before we initialize the logging system. This patch should do so, and fix bug 671. Forward-port candidate.
Roger Dingledine [Wed, 23 Apr 2008 00:18:07 +0000 (00:18 +0000)]
Take lefkada out of the list of v3 directory authorities, since
it has been down for months.
Set up dizum (run by Alex de Joode) as the new sixth v3 directory
authority.
Nick Mathewson [Tue, 22 Apr 2008 21:11:00 +0000 (21:11 +0000)]
r15288@tombo: nickm | 2008-04-22 17:09:36 -0400
Backport: Periodically launch requests for server/authority.z when it might help us learn our IP. Fix for bug 652.
Nick Mathewson [Tue, 22 Apr 2008 17:44:36 +0000 (17:44 +0000)]
r15284@tombo: nickm | 2008-04-22 13:44:22 -0400
Backport: Correctly notify one-hop connections when a circuit build has failed. possible fix for bug 669. found by lodger.
Nick Mathewson [Tue, 22 Apr 2008 17:21:26 +0000 (17:21 +0000)]
r15279@tombo: nickm | 2008-04-22 13:21:01 -0400
Backport: Apply patch from mwenge to fix bug 646: makes stream events for dns requests get generated more consistently.
Nick Mathewson [Tue, 22 Apr 2008 16:33:06 +0000 (16:33 +0000)]
r15274@tombo: nickm | 2008-04-22 12:32:48 -0400
Backport: apply patch from lodger: reject requests for reverse-dns lookup of names in private address space. make non-exits reject all dns requests. Fixes bug 619.
Nick Mathewson [Tue, 22 Apr 2008 16:05:11 +0000 (16:05 +0000)]
r15266@tombo: nickm | 2008-04-22 12:05:07 -0400
Backport: On platforms using pthreads, allow a thread to acquire a lock it already holds. This is crucial for logging: otherwise any log message thrown from inside the logging process (especially from control.c) will deadlock. Win32 CriticalSections are already recursive. Bug spotted by nwf. Bugfix on 0.2.0.16-alpha.
Nick Mathewson [Thu, 17 Apr 2008 20:23:24 +0000 (20:23 +0000)]
r15239@tombo: nickm | 2008-04-17 16:22:50 -0400
Backport: Do not allocate excess space for named_flag and unnamed_flag in dirvote.c. Fixes bug 662. Not a dangerous bug: sizeof(int*) is at least as big as sizeof(int) everywhere.
Roger Dingledine [Wed, 16 Apr 2008 00:07:18 +0000 (00:07 +0000)]
Fix a dumb bug that was preventing us from knowing that we should
preemptively build circuits to handle expected directory requests.
Fixes bug 660. Bugfix on 0.1.2.x.
Roger Dingledine [Tue, 15 Apr 2008 23:05:44 +0000 (23:05 +0000)]
Avoid a rare assert that can trigger when Tor doesn't have much
directory information yet and it tries to fetch a v2 hidden
service descriptor. Fixes bug 651, reported by nwf.