Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-11-07 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2016-11-07 | Merge remote-tracking branch 'teor/bug20484_029_v2' into maint-0.2.9 | Nick Mathewson | |
2016-11-07 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2016-11-07 | Fix another 20499-broken test | Nick Mathewson | |
2016-11-07 | Fix a unit test (broken by recent 20499 hacking) | Nick Mathewson | |
2016-11-08 | Add onion_service_non_anonymous file to man page | teor | |
2016-11-07 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2016-11-07 | Merge branch 'bug20534_029_squashed' into maint-0.2.9 | Nick Mathewson | |
2016-11-07 | Reduce multiplier to 3, per teor's recommendation on #20534 | Nick Mathewson | |
(Three _is_ a good number for anonymity!) | |||
2016-11-07 | Always increment delays by at least 1. | Nick Mathewson | |
2016-11-07 | Avoid integer overflow in delay calculation. | Nick Mathewson | |
2016-11-07 | Count HTTP 503 as a download failure. | Nick Mathewson | |
Because as Teor puts it: "[Resetting on 503] is exactly what we don't want when relays are busy - imagine clients doing an automatic reset every time they DoS a relay..." Fixes bug 20593. | |||
2016-11-07 | Adjust download schedules per teor's #20534 recommendataions | Nick Mathewson | |
2016-11-07 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2016-11-07 | Merge branch 'maint-0.2.8' into maint-0.2.9 | Nick Mathewson | |
2016-11-07 | Merge branch 'maint-0.2.7' into maint-0.2.8 | Nick Mathewson | |
2016-11-07 | Merge branch 'maint-0.2.6' into maint-0.2.7 | Nick Mathewson | |
2016-11-07 | Merge branch 'maint-0.2.5' into maint-0.2.6 | Nick Mathewson | |
2016-11-07 | Merge branch 'maint-0.2.4' into maint-0.2.5 | Nick Mathewson | |
2016-11-07 | Merge branch '20499_part1_029_squashed', remote-tracking branches ↵ | Nick Mathewson | |
'teor/bug20591_029' and 'teor/bug20533_029' into maint-0.2.9 | |||
2016-11-07 | Allow infinitely long delays in exponential-backoff downloads | Nick Mathewson | |
It's only safe to remove the failure limit (per 20536) if we are in fact waiting a bit longer each time we try to download. Fixes bug 20534; bugfix on 0.2.9.1-alpha. | |||
2016-11-07 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2016-11-07 | Merge branch 'bug20588' into maint-0.2.9 | Nick Mathewson | |
2016-11-07 | Update geoip and geoip6 to the November 3 2016 database. | Karsten Loesing | |
2016-11-08 | When downloading certificates, check for related failures | teor | |
If a consensus expires while we are waiting for certificates to download, stop waiting for certificates. If we stop waiting for certificates less than a minute after we started downloading them, do not consider the certificate download failure a separate failure. Fixes bug 20533; bugfix on commit e0204f21 in 0.2.0.9-alpha. | |||
2016-11-07 | Ensure relays don't make multiple connections during bootstrap | teor | |
Relays do not deliberately launch multiple attempts, so the impact of this bug should be minimal. This fix also defends against bugs like #20499. Bugfix on 0.2.8.1-alpha. | |||
2016-11-06 | Always Use EVP_aes_*_ctr() with openssl 1.1 | Nick Mathewson | |
(OpenSSL 1.1 makes EVP_CIPHER_CTX opaque, _and_ adds acceleration for counter mode on more architectures. So it won't work if we try the older approach, and it might help if we try the newer one.) Fixes bug 20588. | |||
2016-11-06 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2016-11-06 | Finish a sentence in a comment. Close 20576. | Nick Mathewson | |
2016-11-06 | Merge branch 'maint-0.2.9' into release-0.2.9 | Nick Mathewson | |
2016-11-06 | In test_tortls_classify_client_ciphers(), s/ECDH/ECDHE/ | Nick Mathewson | |
(We weren't actually using these ciphers; we were just requing that ciphers of that name existed.) Patch from rubiate. Fixes 20460 | |||
2016-11-06 | Do not apply 'max_failures' to random-exponential schedules. | Nick Mathewson | |
Fixes bug 20536; bugfix on 0.2.9.1-alpha. | |||
2016-11-06 | Change a BUG warning to be a warning, not an info. | Nick Mathewson | |
2016-11-06 | Fix get_delay() code to avoid TIME_MAX overflow, not INT_MAX. | Nick Mathewson | |
Fixes bug 20587; bugfix on 35bbf2e4a4e8ccb in 0.2.8.1-alpha. | |||
2016-11-06 | Start changelog for 0.2.9.5-alpha | Nick Mathewson | |
2016-11-06 | Fix warnings from lintChanges.py | Nick Mathewson | |
2016-11-03 | Merge branch 'maint-0.2.8' into maint-0.2.9 | Nick Mathewson | |
2016-11-03 | Merge branch 'bug20551_028' into maint-0.2.8 | Nick Mathewson | |
2016-11-03 | Merge branch 'maint-0.2.8' into maint-0.2.9 | Nick Mathewson | |
2016-11-03 | Merge remote-tracking branch 'arma/bug19969_028_squashed' into maint-0.2.8 | Nick Mathewson | |
2016-11-03 | Merge branch 'maint-0.2.8' into maint-0.2.9 | Nick Mathewson | |
2016-11-03 | Work around a behavior change in openssl's BUF_MEM code | Nick Mathewson | |
In our code to write public keys to a string, for some unfathomable reason since 253f0f160e1185c, we would allocate a memory BIO, then set the NOCLOSE flag on it, extract its memory buffer, and free it. Then a little while later we'd free the memory buffer with BUF_MEM_free(). As of openssl 1.1 this doesn't work any more, since there is now a BIO_BUF_MEM structure that wraps the BUF_MEM structure. This BIO_BUF_MEM doesn't get freed in our code. So, we had a memory leak! Is this an openssl bug? Maybe. But our code was already pretty silly. Why mess around with the NOCLOSE flag here when we can just keep the BIO object around until we don't need the buffer any more? Fixes bug 20553; bugfix on 0.0.2pre8 | |||
2016-11-03 | Use explicit casts to avoid warnings when building with openssl 1.1 | Nick Mathewson | |
fixes bug 20551; bugfix on 0.2.1.1-alpha | |||
2016-11-02 | Use the latest options in rend_service_check_private_dir | teor | |
Fixup on both: * Refactor, adding a create argument... and * Check every hidden service directory's permissions... | |||
2016-11-02 | Check every hidden service directory's permissions when configuring | teor | |
Previously, we would only check the last hidden service directory. Fixes #20529, bugfix on ticket 13942 commit 85bfad1 in 0.2.6.2-alpha. | |||
2016-11-02 | Test single onion service configs where the directory does not exist | teor | |
Runs a test for each combination of create/don't create directories. Tests #20484. | |||
2016-11-02 | Make sure passthrough_test_setup doesn't inadvertently fail or skip tests | teor | |
passthrough_test_setup doesn't pass through arguments if the argument is equal to 0 or TT_SKIP. Instead, it fails or skips the test. Assert on this, so we don't accidentally fail or skip tests. | |||
2016-11-02 | Add get_fname_rnd for unit tests that want a unique path every time | teor | |
2016-11-02 | Create get_fname_suffix, and refactor get_fname to use it | teor | |
2016-11-02 | Improve comments in check_private_dir and onion poisoning | teor | |
Comment changes only |