Roger Dingledine [Sat, 17 Nov 2007 07:00:14 +0000 (07:00 +0000)]
The fix in 0.2.0.12-alpha cleared the "hsdir" flag in v3 network
consensus documents when there are too many relays at a single
IP address. Now clear it in v2 network status documents too.
Roger Dingledine [Sat, 17 Nov 2007 01:53:33 +0000 (01:53 +0000)]
back out r12509 and fix a better bug instead:
When authorities detected more than two relays running on the same
IP address, they were clearing all the status flags but forgetting
to clear the "hsdir" flag. So clients were being told that a
given relay was the right choice for a v2 hsdir lookup, yet they
never had its descriptor because it was marked as 'not running'
in the consensus.
Roger Dingledine [Fri, 16 Nov 2007 07:37:49 +0000 (07:37 +0000)]
If we're using bridges or have strictentrynodes set, and our
chosen exit is in the same family as all our bridges/entry guards,
then be flexible about families.
Roger Dingledine [Fri, 16 Nov 2007 07:31:51 +0000 (07:31 +0000)]
If we're trying to fetch a bridge descriptor and there's no way
the bridge authority could help us (for example, we don't know
a digest, or there is no bridge authority), don't be so eager to
fall back to asking the bridge authority.
Roger Dingledine [Fri, 16 Nov 2007 07:23:25 +0000 (07:23 +0000)]
Nov 16 02:20:50.089 [info] update_consensus_router_descriptor_downloads(): 0 router descriptors downloadable. 0 delayed; 1676 present (0 of those were in old_routers); 0 would_reject; 582 wouldnt_use, 0 in progress.
Nov 16 02:20:50.089 [info] launch_router_descriptor_downloads(): There are not many downloadable routerdescs, but we haven't tried downloading descriptors recently. Downloading.
Nick Mathewson [Wed, 14 Nov 2007 20:01:15 +0000 (20:01 +0000)]
r16670@catbus: nickm | 2007-11-14 14:56:30 -0500
Initial phase of proposal 110: accept RELAY_EARLY cells, and turn them into RELAY cells when sending them on over a v1 OR connection.
Nick Mathewson [Wed, 14 Nov 2007 18:39:15 +0000 (18:39 +0000)]
r16665@catbus: nickm | 2007-11-14 13:36:11 -0500
Fix bug spotted by karsten: when we have no consensus, do not try to continue finding directories for a hidden service.
Nick Mathewson [Mon, 12 Nov 2007 16:29:31 +0000 (16:29 +0000)]
r16656@catbus: nickm | 2007-11-12 11:27:00 -0500
Possibly fix bug 548 by making the fix for bug 543 not get invoked on authorities. See changelog and bug 548 entry for rationale.
Roger Dingledine [Sun, 11 Nov 2007 17:37:59 +0000 (17:37 +0000)]
Don't reevaluate all the information from our consensus document
just because we've downloaded a v2 networkstatus that we intend
to cache. Fixes bug 545.
Roger Dingledine [Sun, 11 Nov 2007 01:27:02 +0000 (01:27 +0000)]
We were including instructions about what to do with the
src/config/fallback-consensus file, but we weren't actually
including it in the tarball. Disable all of that for now.
Roger Dingledine [Sat, 10 Nov 2007 21:17:51 +0000 (21:17 +0000)]
Exit policies now reject connections that are addressed to a
relay's public (external) IP address too, unless
ExitPolicyRejectPrivate is turned off. We do this because too
many relays are running nearby to services that trust them based
on network address.
Nick Mathewson [Thu, 8 Nov 2007 16:58:59 +0000 (16:58 +0000)]
r16573@catbus: nickm | 2007-11-08 11:57:16 -0500
Mess with the formula for the Guard flag again. Now it requires that you be in the most familiar 7/8 of nodes, and have above median wfu for that 7/8th. See spec for details. Also, log thresholds better.
Nick Mathewson [Thu, 8 Nov 2007 16:19:07 +0000 (16:19 +0000)]
r16570@catbus: nickm | 2007-11-08 11:04:20 -0500
Keep track, for each OR connection, of the last time we added a non-padding cell to its outbuf. Use this timestamp, not "lastwritten" to tell if it is time to close a circuitless connection. (We can'tuse lastwritten, since lastwritten is updated when ever the connection flushes anything, and by that point we can no longer tell what is a padding cell and what is not.)
Don't stop fetching descriptors when FetchUselessDescriptors is
set, even if we stop asking for circuits. Bugfix on 0.1.2.x;
reported by tup and ioerror.
Nick Mathewson [Wed, 7 Nov 2007 17:41:14 +0000 (17:41 +0000)]
r16531@catbus: nickm | 2007-11-07 12:39:56 -0500
Initialize re-parsed routerinfos with routerlist_index -1, since they are not yet inserted into the routerlist. Fixes another crash.
Nick Mathewson [Wed, 7 Nov 2007 17:11:23 +0000 (17:11 +0000)]
r16525@catbus: nickm | 2007-11-07 12:10:01 -0500
Clean up log messages from bug 543 fix, and make old_routers also keep track of their indices. This will probably crash some until all the bugs are fixed.
Nick Mathewson [Tue, 6 Nov 2007 20:51:45 +0000 (20:51 +0000)]
r16471@catbus: nickm | 2007-11-06 15:50:42 -0500
Detect whether any of the descriptors we want are in old_routers. Possibly useful in tracking down bug 543.
Nick Mathewson [Mon, 5 Nov 2007 18:15:52 +0000 (18:15 +0000)]
r16412@catbus: nickm | 2007-11-05 11:45:17 -0500
Make TLS contexts reference-counted, and add a reference from TLS objects to their corresponding context. This lets us reliably get the certificates for a given TLS connection, even if we have rotated TLS contexts.