summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-11-29Correct manpage entry for DynamicDHGroupsNick Mathewson
2011-11-29Merge remote-tracking branch 'asn-mytor/bug4548_take2'Nick Mathewson
2011-11-29Merge branch 'disable_network'Nick Mathewson
2011-11-29Fix some DOCDOCsNick Mathewson
2011-11-29Make sure we never launch an evdns resolve when DisableNetwork is 1Nick Mathewson
2011-11-29Merge branch 'multilevel_cfg'Nick Mathewson
2011-11-29Make pending libevent actions cancelableNick Mathewson
This avoids a dangling pointer issue in the 3412 code, and should fix bug 4599.
2011-11-28log a notice when disablenetwork is setNick Mathewson
2011-11-28Manpage for DisableNetworkNick Mathewson
2011-11-28New 'DisableNetwork' option to prevent Tor from using the networkNick Mathewson
Some controllers want this so they can mess with Tor's configuration for a while via the control port before actually letting Tor out of the house. We do this with a new DisableNetwork option, that prevents Tor from making any outbound connections or binding any non-control listeners. Additionally, it shuts down the same functionality as shuts down when we are hibernating, plus the code that launches directory downloads. To make sure I didn't miss anything, I added a clause straight to connection_connect, so that we won't even try to open an outbound socket when the network is disabled. In my testing, I made this an assert, but since I probably missed something, I've turned it into a BUG warning for testing.
2011-11-27Support for a defaults torrc file.Nick Mathewson
This will mainly help distributors by giving a way to set system or package defaults that a user can override, and that a later package can replace. No promises about the particular future location or semantics for this: we will probably want to tweak it some before 0.2.3.x-rc The file is searched for in CONFDIR/torrc-defaults , which can be overridden with the "--defaults-torrc" option on the command line.
2011-11-27Add the ability to append and clear linelist options from cmdlineNick Mathewson
This will be important for getting stuff to work right across zones.
2011-11-27Make linelists always overridden by the command lineNick Mathewson
This starts an effort to refactor torrc handling code to make it easier to live with. It makes it possible to override exit policies from the command line, and possible to override (rather than append to) socksport lists from the command line. It'll be necessary to make a "base" torrc implementation work at all.
2011-11-27Merge branch 'safer_params_squashed'Nick Mathewson
2011-11-27Implement consensus method 12 (proposal 178)Sebastian Hahn
2011-11-27indent; add commentNick Mathewson
2011-11-27Merge remote-tracking branch 'asn/bug4584'Nick Mathewson
2011-11-27Don't schedule excess_renegotiations_callback unless it's setNick Mathewson
Partial fix for bug 4587; reported by "frosty_un".
2011-11-27Add a changes file.George Kadianakis
2011-11-27Use random bytes as our certificate serial numbers.George Kadianakis
Instead of using time(NULL) in our certificate serial numbers, use eight random bytes as suggested in proposal 179.
2011-11-26Write dynamic DH parameters to a file.George Kadianakis
Instead of only writing the dynamic DH prime modulus to a file, write the whole DH parameters set for forward compatibility. At the moment we only accept '2' as the group generator. The DH parameters gets stored in base64-ed DER format to the 'dynamic_dh_params' file.
2011-11-26Introduce write_bytes_to_new_file().George Kadianakis
Introduce write_bytes_to_new_file(), a function which writes bytes to a file only if that file did not exist.
2011-11-26Normal relays should generate dynamic DH moduli as well.George Kadianakis
2011-11-25fold in changes files so farRoger Dingledine
2011-11-25use event_free() wrapper; fix bug 4582Nick Mathewson
2011-11-25Fix some wide lines in tortls.cNick Mathewson
2011-11-25Avoid a double-mark in connection_or_close_connection_cbNick Mathewson
2011-11-25Refactor tor_event_base_once to do what we actually wantNick Mathewson
This version avoids the timeout system entirely, gives a nicer interface, and lets us manage allocation explicitly.
2011-11-25Merge remote-tracking branch 'asn/bug4312'Nick Mathewson
2011-11-25Make the pt/transports test not crash.Nick Mathewson
2011-11-25Make process_handle_t private and fix some unit testsNick Mathewson
Let's *not* expose more cross-platform-compatibility structures, or expect code to use them right. Also, don't fclose() stdout_handle and stdin_handle until we do tor_process_handle_destroy, or we risk a double-fclose.
2011-11-25Merge remote-tracking branch 'asn/bug3472_act2'Nick Mathewson
2011-11-25Merge remote-tracking branch 'sebastian/pure_removal'Nick Mathewson
2011-11-25Simply initialize TLS context if DynamicDHGroups change.George Kadianakis
We used to do init_keys() if DynamicDHGroups changed after a HUP, so that the dynamic DH modulus was stored on the disk. Since we are now doing dynamic DH modulus storing in crypto.c, we can simply initialize the TLS context and be good with it. Introduce a new function router_initialize_tls_context() which initializes the TLS context and use it appropriately.
2011-11-25Purge ATTR_PURE from the codeSebastian Hahn
We're using it incorrectly in many cases, and it doesn't help as far as we know.
2011-11-25Add a changes file.George Kadianakis
2011-11-25Only bother with dynamic DH moduli if we are a bridge.George Kadianakis
2011-11-25Move DH_GENERATOR to crypto.c.George Kadianakis
2011-11-25Move broken primes to dynamic_dh_modulus.broken.George Kadianakis
2011-11-25Do dynamic DH modulus storing in crypto.c.George Kadianakis
2011-11-25Merge branch 'more_aes_hackery_rebased'Nick Mathewson
Conflicts: changes/aes_hackery
2011-11-25Make AES unit tests cover the AES and the EVP case.Nick Mathewson
2011-11-25Use openssl's counter mode implementation when we have 1.0.0 or laterNick Mathewson
This shaves about 7% off our per-cell AES crypto time for me; the effect for accelerated AES crypto should be even more, since the AES calculation itself will make an even smaller portion of the counter-mode performance. (We don't want to do this for pre-1.0.0 OpenSSL, since our AES_CTR implementation was actually faster than OpenSSL's there, by about 10%.) Fixes issue #4526.
2011-11-25Use EVP for AES only when hardware accel is presentNick Mathewson
Fixes bug 4525, fix on 0.2.3.8-alpha.
2011-11-25And add a changelog entry for the 4574 fix. (closes: #4574)Peter Palfrader
2011-11-25tor-gencert: Fix a minor formatting issue in an error message (re: #4574)Peter Palfrader
2011-11-24And a changes file for bug3953Peter Palfrader
2011-11-24Handle build-trees better.Peter Palfrader
Properly create git revision and source file sha1sums include files when building tor not in its source tree but in a dedicated build tree.
2011-11-24Basic support for a "make version" target to declare the source versionNick Mathewson
This is katmagic's idea. See issue 4400.
2011-11-24Move disable-debugger-attachment fn to compat where it belongs. Fix whitespaceNick Mathewson