aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-03-26Safe cookie authentication gets a changes fileNick Mathewson
2012-03-26Merge remote-tracking branch 'rransom-tor/safecookie-022-v3' into maint-0.2.2Nick Mathewson
2012-03-26Merge commit 'a5704b1c624c9a808f52f3a125339f00e2b9a378' into maint-0.2.2Nick Mathewson
2012-03-09Use a given name in the bug5090 message, at its holder's request.Nick Mathewson
2012-03-09Never choose a bridge as an exit. Bug 5342.Nick Mathewson
2012-03-09Revise "sufficient exit nodes" check to work with restrictive ExitNodesNick Mathewson
If you set ExitNodes so that only 1 exit node is accepted, the previous patch would have made you unable to build circuits.
2012-03-09Merge branch 'bug5343' into maint-0.2.2Nick Mathewson
2012-03-09Oops; credit bug5090 patch to flupzor. estebanm only found the bug.Nick Mathewson
2012-03-09Correctly handle broken escape sequences in torrc valuesNick Mathewson
Previously, malformatted torrc values could crash us. Patch by Esteban Manchado. Fixes bug 5090; fix on 0.2.0.16-alpha.
2012-03-08Require a threshold of exit nodes before building circuitsNick Mathewson
This mitigates an attack proposed by wanoskarnet, in which all of a client's bridges collude to restrict the exit nodes that the client knows about. Fixes bug 5343.
2012-03-08Fix compile warnings in openbsd mallocSebastian Hahn
2012-03-08Merge remote-tracking branch 'karsten/geoip-march2012' into maint-0.2.2Nick Mathewson
2012-03-08Update to the March 2012 GeoIP database.Karsten Loesing
2012-02-29new ip address for maatuskaRoger Dingledine
2012-02-22Implement 'safe cookie authentication'Robert Ransom
2012-02-22Add a sha256 hmac function, with testsNick Mathewson
(cherry picked from commit fdbb9cdf746bbf0c39c34188baa8872471183ff7)
2012-02-10Properly protect paths to sed, sha1sum, opensslSebastian Hahn
in Makefile.am, we used it without quoting it, causing build failure if your openssl/sed/sha1sum happened to live in a directory with a space in it (very common on windows)
2012-02-10Downgrade "missing a certificate" from notice to infoNick Mathewson
It was apparently getting mistaken for a problem, even though it was at notice. Fixes 5067; fix on 0.2.0.10-alpha.
2012-02-10Use correct CVE number for CVE-2011-4576. Found by fermenthor. bug 5066Nick Mathewson
2012-02-09Merge branch 'maint-0.2.1' into maint-0.2.2Roger Dingledine
2012-02-09Revert "add a "docs" to the manual URI as listed in torrc.sample.in"Roger Dingledine
This reverts commit 55e8cae81553678ec77ce6b8fb1bf2d5e483e0aa. The conversation from irc: > weasel: i had intended to leave torrc.sample.in alone in maint-0.2.2, since i don't want to make all your stable users have to deal with a torrc change. but nickm changed it. is it in fact the case that a change in that file means a change in the deb? <weasel> it means you'll prompt every single user who ever touched their torrc <weasel> and they will be asked if they like your new version better than what they have right now <weasel> so it's not great Instead I changed the website to redirect requests for the tor-manual URL listed in maint-0.2.2's torrc.sample.in so the link will still work.
2012-02-09Update to the February 2012 GeoIP database.maint-0.2.1Karsten Loesing
2012-02-08add a "docs" to the manual URI as listed in torrc.sample.inNick Mathewson
2012-02-02Update "ClientOnly" man page entryRoger Dingledine
There isn't really any point to messing with it. Resolves ticket 5005.
2012-01-18Merge remote-tracking branch 'public/bug4533_part2' into maint-0.2.2Nick Mathewson
2012-01-18Documentation for GiveGuardFlagTo... optionNick Mathewson
2012-01-18Fix SOCKET_OK test on win64.Nick Mathewson
Bugfix on 0.2.2.29-beta; partial fix for 4533; found by wanoskarnet
2012-01-11Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson
2012-01-11Fix a compilation warning for our bug4822 fix on 64-bit linuxNick Mathewson
2012-01-09Fix comment about TLSv1_method() per comments by wanoskarnetNick Mathewson
2012-01-09Fix a trivial log message error in renservice.cNick Mathewson
Fixes bug 4856; bugfix on 0.0.6 This bug was introduced in 79fc5217, back in 2004.
2012-01-08when the consensus fails, list which dir auths were in or outRoger Dingledine
2012-01-08nickname, not identity fingerprint, will help moreRoger Dingledine
2012-01-08tell me who votes are actually for, not just where they're fromRoger Dingledine
2012-01-08add a note from wanoskarnetRoger Dingledine
he disagrees about what the code that we decided not to use would do
2012-01-05Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson
2012-01-05Merge branch 'bug4822_021_v2_squashed' into maint-0.2.1Nick Mathewson
2012-01-05Log at info level when disabling SSLv3Robert Ransom
2012-01-05Add a changes file for bug4822Nick Mathewson
2012-01-05Disable SSLv3 when using a not-up-to-date opensslNick Mathewson
This is to address bug 4822, and CVE-2011-4576.
2012-01-05Merge branch 'maint-0.2.1' into maint-0.2.2Roger Dingledine
2012-01-05add a changes file for ticket 4825Roger Dingledine
2012-01-05Update to the January 2012 GeoIP database.Karsten Loesing
2011-12-30Fix spelling in a controlsocket log msgSebastian Hahn
Fixes bug 4803.
2011-12-28Merge remote-tracking branch 'public/bug4788' into maint-0.2.2Nick Mathewson
2011-12-28Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson
2011-12-28Bug 4786 fix: don't convert EARLY to RELAY on v1 connectionsNick Mathewson
We used to do this as a workaround for older Tors, but now it's never the correct thing to do (especially since anything that didn't understand RELAY_EARLY is now deprecated hard).
2011-12-27Authorities reject insecure Tors.Nick Mathewson
This patch should make us reject every Tor that was vulnerable to CVE-2011-0427. Additionally, it makes us reject every Tor that couldn't handle RELAY_EARLY cells, which helps with proposal 110 (#4339).
2011-12-25Provide correct timeradd/timersup replacementsSebastian Hahn
Bug caught and patch provided by Vektor. Fixes bug 4778.t
2011-12-21Do not even try to keep going on a socket with socklen==0Nick Mathewson
Back in #1240, r1eo linked to information about how this could happen with older Linux kernels in response to nmap. Bugs #4545 and #4547 are about how our approach to trying to deal with this condition was broken and stupid. Thanks to wanoskarnet for reminding us about #1240. This is a fix for the abovementioned bugs, and is a bugfix on 0.1.0.3-rc.
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion