summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-10-20fold in the 0.2.3.23 changes entriestor-0.2.3.23-rcRoger Dingledine
2012-10-20shift the categories around a bitRoger Dingledine
2012-10-19bump to 0.2.3.23-rcRoger Dingledine
2012-10-19fold in recent changes entriesRoger Dingledine
2012-10-19Merge branch 'maint-0.2.3' into release-0.2.3Roger Dingledine
2012-10-19Merge branch 'block_renegotiate_023' into maint-0.2.3Nick Mathewson
2012-10-19Merge branch 'bug7149' into maint-0.2.3Nick Mathewson
2012-10-19Don't serve or accept v2 HS descs over a DirPortRobert Ransom
(changes file tweaked by nickm)
2012-10-19Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson
2012-10-19Disable TLS Session Tickets, which we were apparently getting for freeNick Mathewson
OpenSSL 1.0.0 added an implementation of TLS session tickets, a "feature" that let session resumption occur without server-side state by giving clients an encrypted "ticket" that the client could present later to get the session going again with the same keys as before. OpenSSL was giving the keys to decrypt these tickets the lifetime of the SSL contexts, which would have been terrible for PFS if we had long-lived SSL contexts. Fortunately, we don't. Still, it's pretty bad. We should also drop these, since our use of the extension stands out with our non-use of session cacheing. Found by nextgens. Bugfix on all versions of Tor when built with openssl 1.0.0 or later. Fixes bug 7139.
2012-10-17Discard extraneous renegotiation attempts in the v3 link protocolNick Mathewson
Failure to do so left us open to a remotely triggerable assertion failure. Fixes CVE-2012-2249; bugfix on 0.2.3.6-alpha. Reported by "some guy from France".
2012-10-13slight tweak, and also reformatRoger Dingledine
2012-10-13Expand 0.2.3 dedication paragaph to full version of latest draftNick Mathewson
We should still make sure mlp approves it.
2012-10-13fold in the changes files so farRoger Dingledine
2012-10-13correct a point about loggingRoger Dingledine
2012-10-13start at an 0.2.3 release notesRoger Dingledine
2012-10-13Merge branch 'maint-0.2.3' into release-0.2.3Roger Dingledine
2012-10-09Merge branch 'bug7014_023_squashed' into maint-0.2.3Nick Mathewson
2012-10-09Don't call fmt_addr() twice in a parameter list.George Kadianakis
2012-10-04Merge remote-tracking branch 'arma/bug7037' into maint-0.2.3Nick Mathewson
2012-10-03Refuse extra create cells with reason "resource limit"Roger Dingledine
In the past we had used reason "internal", which is more vague than it needs to be. Resolves bug 7037.
2012-10-03properly free the return values of rate_limit_log()Roger Dingledine
resolves bug 7022.
2012-09-22add faravahar as our ninth v3 dir authRoger Dingledine
2012-09-19Clarify that hidden services are TCP onlyNick Mathewson
Also remove some trailing whitespace. Patch from maker; fixes bug 6024.
2012-09-18Whitespace fixesNick Mathewson
2012-09-17Bug 6866: Convert pathbias asserts into log messages.Mike Perry
Asserts were hit by Tor2Web mode.
2012-09-14Use file-size-fixup code on cygwin too.Nick Mathewson
We already had code on windows to fix our file sizes when we're reading a file in text mode and its size doesn't match the size from fstat. But that code was only enabled when _WIN32 was defined, and Cygwin defines __CYGWIN__ instead. Fixes bug 6844; bugfix on 0.1.2.7-alpha.
2012-09-13Fix man page typoRobert Ransom
2012-09-13mention the bug number in the 6827 changes fileNick Mathewson
2012-09-13Avoid undefined behaviour when parsing HS protocol versionsRobert Ransom
Fixes bug 6827; bugfix on c58675ca728f12b42f65e5b8964ae695c2e0ec2d (when the v2 HS desc parser was implemented). Found by asn.
2012-09-12Revert "6819: typo in torrc.sample.in"Nick Mathewson
This reverts commit 4aff97cfc7965414ad8506ce28a296da1bc4a161. We don't actually want to be changing the torrc.sample on stable or near-stable stuff, since doing so makes pointless busywork for debian users.
2012-09-12Merge remote-tracking branch 'public/bug6341_a_v2' into maint-0.2.3Nick Mathewson
2012-09-126819: typo in torrc.sample.inNick Mathewson
2012-09-11bump to 0.2.3.22-rctor-0.2.3.22-rcRoger Dingledine
2012-09-11move 0.2.2.39 changelog forwardRoger Dingledine
2012-09-11fold in 0.2.3.22-rc changesRoger Dingledine
2012-09-11Merge branch 'maint-0.2.3' into release-0.2.3Roger Dingledine
2012-09-11Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson
Conflicts: src/test/test_util.c
2012-09-11Merge branch 'timegm_assert_v3_squashed' into maint-0.2.2Nick Mathewson
2012-09-11Fix assertion failure in tor_timegm.Nick Mathewson
Fixes bug 6811.
2012-09-10Avoid segfault when reading state file from ancient torNick Mathewson
If s_values is null in rep_hist_load_bwhist_state_section, we would call smartlist_len() on it, and die. Fixes bug 6801.
2012-09-05fold in last changes filetor-0.2.3.21-rcRoger Dingledine
2012-09-05Merge branch 'maint-0.2.3' into release-0.2.3Roger Dingledine
2012-09-05Update the minimum bandwidth for a public relayRoger Dingledine
The current cutoff is 30KB, but in reality a useful cutoff is probably more like 50KB or 100KB.
2012-09-05Avoid segfault if EntryGuardPathBias precedes EntryGuardNick Mathewson
Fix for bug 6774; bugfix on 0.2.3.17-beta.
2012-09-04one more changes fileRoger Dingledine
2012-09-04Merge branch 'maint-0.2.3' into release-0.2.3Roger Dingledine
2012-09-04bump to 0.2.3.21-rcRoger Dingledine
2012-09-04fold in recent 0.2.3 changes filesRoger Dingledine
2012-09-04Merge branch 'maint-0.2.3' into release-0.2.3Roger Dingledine