aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-10-27Remove configure option to disable curve25519Sebastian Hahn
By now, support in the network is widespread and it's time to require more modern crypto on all Tor instances, whether they're clients or servers. By doing this early in 0.2.6, we can be sure that at some point all clients will have reasonable support.
2014-10-22Switch new time tests to use SIZEOF_TIME_T, not sizeof(time_t)Nick Mathewson
Otherwise, we get implicit conversion warning on some platforms.
2014-10-23Fix minor typos, two line lengths, and a repeated includeteor
2014-10-22Fix a changes typo spotted by wfnNick Mathewson
2014-10-22Merge remote-tracking branch 'public/bug11824_v2'Nick Mathewson
2014-10-22Merge remote-tracking branch 'public/ticket6938'Nick Mathewson
Conflicts: src/tools/tor-resolve.c
2014-10-21give dist-master an aliasRoger Dingledine
2014-10-21Merge remote-tracking branch 'teor/bug13476-improve-time-handling'Nick Mathewson
2014-10-21Conditionally compile time testing code based on integer sizeteor
2014-10-20Merge remote-tracking branch 'teor/memwipe-more-keys'Nick Mathewson
2014-10-20Merge remote-tracking branch 'origin/maint-0.2.5'Nick Mathewson
This is an "ours" merge so we can leave the version in master alone.
2014-10-20bump maint-0.2.5 to 0.2.5.9-rc-devNick Mathewson
2014-10-20Merge remote-tracking branch 'origin/maint-0.2.4' into maint-0.2.5Nick Mathewson
2014-10-20Whoops, bump the version properly.Nick Mathewson
2014-10-20bump maint-0.2.4 to 0.2.4.25-devNick Mathewson
2014-10-20forward-port the 0.2.4.25 changelog to master changelog and releasenotesNick Mathewson
2014-10-20Use a macro to indicate "The ecdhe group we use by default".Nick Mathewson
This might make Coverity happier about the if statement where we have a default case that's the same as one of the other cases. CID 1248515
2014-10-20Fix a use-after-free error in cleaned-up rouerlist code.Nick Mathewson
Bug not in any released tor. This is CID 1248521
2014-10-19explain how to publish tarballs now that webwml has gone to gitRoger Dingledine
2014-10-19Merge remote-tracking branch 'origin/maint-0.2.5'Nick Mathewson
2014-10-19Merge remote-tracking branch 'origin/maint-0.2.4' into maint-0.2.5Nick Mathewson
2014-10-19Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson
2014-10-19Note that our #13426 fix is also a #13471 fix.Nick Mathewson
See also http://marc.info/?l=openssl-dev&m=141357408522028&w=2
2014-10-19format_changelog: Sort sections case-insensitivelyNick Mathewson
2014-10-19format_changelog.py: fix spelling of "hyphenatable"Nick Mathewson
2014-10-19format_changelog.py: tweak hyphenation rulesNick Mathewson
Mark all our generated command names, and anything with a double-hyphen, as unhyphenatable.
2014-10-19Teach format_changelog to sort and collate sections.Nick Mathewson
Give it options to turn off collation and/or wrapping.
2014-10-20Memwipe more keys after tor has finished with themteor
Ensure we securely wipe keys from memory after crypto_digest_get_digest and init_curve25519_keypair_from_file have finished using them. Fixes bug 13477.
2014-10-20Further unit test tor_timegm and parse_rfc1123_timeteor
Add unit tests for tor_timegm signed overflow, tor_timegm and parse_rfc1123_time validity checks, and correct_tm year clamping. Unit tests (visible) fixes in bug 13476.
2014-10-20Clamp (some) years supplied by the system to 1 CEteor
Clamp year values returned by system localtime(_r) and gmtime(_r) to year 1. This ensures tor can read any values it might write out. Fixes bug 13476.
2014-10-19format_changelog.py: learn about the ReleaseNotes formatNick Mathewson
2014-10-20Improve date validation in HTTP headersteor
Check all date/time values passed to tor_timegm and parse_rfc1123_time for validity, taking leap years into account. Improves HTTP header validation. Avoid unlikely signed integer overflow in tor_timegm on systems with 32-bit time_t. Fixes bug 13476.
2014-10-20Use correct day of year in correct_tm()teor
Set the correct day of year value in correct_tm() when the system's localtime(_r) or gmtime(_r) functions fail to set struct tm. Fixes bug 13476.
2014-10-16Merge remote-tracking branch 'origin/maint-0.2.5'Nick Mathewson
2014-10-16Downgrade 'unexpected sendme cell from client' to PROTOCOL_WARNNick Mathewson
Closes 8093.
2014-10-16Merge remote-tracking branch 'yawning/bug13314'Nick Mathewson
2014-10-16Merge remote-tracking branch 'origin/maint-0.2.5'Nick Mathewson
2014-10-16Merge remote-tracking branch 'origin/maint-0.2.4' into maint-0.2.5Nick Mathewson
2014-10-16Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4Nick Mathewson
2014-10-16Merge branch 'no_sslv3_023' into maint-0.2.3Nick Mathewson
2014-10-15Disable SSLv3 unconditionally. Closes ticket 13426.Nick Mathewson
The POODLE attack doesn't affect Tor, but there's no reason to tempt fate: SSLv3 isn't going to get any better.
2014-10-14Emit fewer spurious lines in cov-diff output.Nick Mathewson
2014-10-13Define a strnlen replacement on platforms (win32) that lack itNick Mathewson
Right now this is only needed for test_util_format_time_interval, so define it as a static function. We can move it into compat later if we need to.
2014-10-13Merge remote-tracking branch 'public/bug11243_squashed'Nick Mathewson
2014-10-13Add comments to can_dl_again usageNick Mathewson
2014-10-13Note that parse-list functions may add duplicate 'invalid' entries.Nick Mathewson
2014-10-13Bugfixes on bug11243 fix for the not-added cases and testsNick Mathewson
1. The test that adds things to the cache needs to set the clock back so that the descriptors it adds are valid. 2. We split ROUTER_NOT_NEW into ROUTER_TOO_OLD, so that we can distinguish "already had it" from "rejected because of old published date". 3. We make extrainfo_insert() return a was_router_added_t, and we make its caller use it correctly. This is probably redundant with the extrainfo_is_bogus flag.
2014-10-13Use symbolic constants for statuses in microdescs_add_to_cache.Nick Mathewson
Suggested by Andrea in her review of 11243.
2014-10-13Commit the script I used to generate signed ri and ei documentsNick Mathewson
2014-10-13Don't reset the download failure status of any object marked as impossibleNick Mathewson
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion