Age | Commit message (Collapse) | Author | |
---|---|---|---|
2011-11-29 | Correct manpage entry for DynamicDHGroups | Nick Mathewson | |
2011-11-29 | Merge remote-tracking branch 'asn-mytor/bug4548_take2' | Nick Mathewson | |
2011-11-29 | Merge branch 'disable_network' | Nick Mathewson | |
2011-11-29 | Fix some DOCDOCs | Nick Mathewson | |
2011-11-29 | Make sure we never launch an evdns resolve when DisableNetwork is 1 | Nick Mathewson | |
2011-11-29 | Merge branch 'multilevel_cfg' | Nick Mathewson | |
2011-11-29 | Make pending libevent actions cancelable | Nick Mathewson | |
This avoids a dangling pointer issue in the 3412 code, and should fix bug 4599. | |||
2011-11-28 | log a notice when disablenetwork is set | Nick Mathewson | |
2011-11-28 | Manpage for DisableNetwork | Nick Mathewson | |
2011-11-28 | New 'DisableNetwork' option to prevent Tor from using the network | Nick Mathewson | |
Some controllers want this so they can mess with Tor's configuration for a while via the control port before actually letting Tor out of the house. We do this with a new DisableNetwork option, that prevents Tor from making any outbound connections or binding any non-control listeners. Additionally, it shuts down the same functionality as shuts down when we are hibernating, plus the code that launches directory downloads. To make sure I didn't miss anything, I added a clause straight to connection_connect, so that we won't even try to open an outbound socket when the network is disabled. In my testing, I made this an assert, but since I probably missed something, I've turned it into a BUG warning for testing. | |||
2011-11-27 | Support for a defaults torrc file. | Nick Mathewson | |
This will mainly help distributors by giving a way to set system or package defaults that a user can override, and that a later package can replace. No promises about the particular future location or semantics for this: we will probably want to tweak it some before 0.2.3.x-rc The file is searched for in CONFDIR/torrc-defaults , which can be overridden with the "--defaults-torrc" option on the command line. | |||
2011-11-27 | Add the ability to append and clear linelist options from cmdline | Nick Mathewson | |
This will be important for getting stuff to work right across zones. | |||
2011-11-27 | Make linelists always overridden by the command line | Nick Mathewson | |
This starts an effort to refactor torrc handling code to make it easier to live with. It makes it possible to override exit policies from the command line, and possible to override (rather than append to) socksport lists from the command line. It'll be necessary to make a "base" torrc implementation work at all. | |||
2011-11-27 | Merge branch 'safer_params_squashed' | Nick Mathewson | |
2011-11-27 | Implement consensus method 12 (proposal 178) | Sebastian Hahn | |
2011-11-27 | indent; add comment | Nick Mathewson | |
2011-11-27 | Merge remote-tracking branch 'asn/bug4584' | Nick Mathewson | |
2011-11-27 | Don't schedule excess_renegotiations_callback unless it's set | Nick Mathewson | |
Partial fix for bug 4587; reported by "frosty_un". | |||
2011-11-27 | Add a changes file. | George Kadianakis | |
2011-11-27 | Use random bytes as our certificate serial numbers. | George Kadianakis | |
Instead of using time(NULL) in our certificate serial numbers, use eight random bytes as suggested in proposal 179. | |||
2011-11-26 | Write dynamic DH parameters to a file. | George Kadianakis | |
Instead of only writing the dynamic DH prime modulus to a file, write the whole DH parameters set for forward compatibility. At the moment we only accept '2' as the group generator. The DH parameters gets stored in base64-ed DER format to the 'dynamic_dh_params' file. | |||
2011-11-26 | Introduce write_bytes_to_new_file(). | George Kadianakis | |
Introduce write_bytes_to_new_file(), a function which writes bytes to a file only if that file did not exist. | |||
2011-11-26 | Normal relays should generate dynamic DH moduli as well. | George Kadianakis | |
2011-11-25 | fold in changes files so far | Roger Dingledine | |
2011-11-25 | use event_free() wrapper; fix bug 4582 | Nick Mathewson | |
2011-11-25 | Fix some wide lines in tortls.c | Nick Mathewson | |
2011-11-25 | Avoid a double-mark in connection_or_close_connection_cb | Nick Mathewson | |
2011-11-25 | Refactor tor_event_base_once to do what we actually want | Nick Mathewson | |
This version avoids the timeout system entirely, gives a nicer interface, and lets us manage allocation explicitly. | |||
2011-11-25 | Merge remote-tracking branch 'asn/bug4312' | Nick Mathewson | |
2011-11-25 | Make the pt/transports test not crash. | Nick Mathewson | |
2011-11-25 | Make process_handle_t private and fix some unit tests | Nick Mathewson | |
Let's *not* expose more cross-platform-compatibility structures, or expect code to use them right. Also, don't fclose() stdout_handle and stdin_handle until we do tor_process_handle_destroy, or we risk a double-fclose. | |||
2011-11-25 | Merge remote-tracking branch 'asn/bug3472_act2' | Nick Mathewson | |
2011-11-25 | Merge remote-tracking branch 'sebastian/pure_removal' | Nick Mathewson | |
2011-11-25 | Simply initialize TLS context if DynamicDHGroups change. | George Kadianakis | |
We used to do init_keys() if DynamicDHGroups changed after a HUP, so that the dynamic DH modulus was stored on the disk. Since we are now doing dynamic DH modulus storing in crypto.c, we can simply initialize the TLS context and be good with it. Introduce a new function router_initialize_tls_context() which initializes the TLS context and use it appropriately. | |||
2011-11-25 | Purge ATTR_PURE from the code | Sebastian Hahn | |
We're using it incorrectly in many cases, and it doesn't help as far as we know. | |||
2011-11-25 | Add a changes file. | George Kadianakis | |
2011-11-25 | Only bother with dynamic DH moduli if we are a bridge. | George Kadianakis | |
2011-11-25 | Move DH_GENERATOR to crypto.c. | George Kadianakis | |
2011-11-25 | Move broken primes to dynamic_dh_modulus.broken. | George Kadianakis | |
2011-11-25 | Do dynamic DH modulus storing in crypto.c. | George Kadianakis | |
2011-11-25 | Merge branch 'more_aes_hackery_rebased' | Nick Mathewson | |
Conflicts: changes/aes_hackery | |||
2011-11-25 | Make AES unit tests cover the AES and the EVP case. | Nick Mathewson | |
2011-11-25 | Use openssl's counter mode implementation when we have 1.0.0 or later | Nick Mathewson | |
This shaves about 7% off our per-cell AES crypto time for me; the effect for accelerated AES crypto should be even more, since the AES calculation itself will make an even smaller portion of the counter-mode performance. (We don't want to do this for pre-1.0.0 OpenSSL, since our AES_CTR implementation was actually faster than OpenSSL's there, by about 10%.) Fixes issue #4526. | |||
2011-11-25 | Use EVP for AES only when hardware accel is present | Nick Mathewson | |
Fixes bug 4525, fix on 0.2.3.8-alpha. | |||
2011-11-25 | And add a changelog entry for the 4574 fix. (closes: #4574) | Peter Palfrader | |
2011-11-25 | tor-gencert: Fix a minor formatting issue in an error message (re: #4574) | Peter Palfrader | |
2011-11-24 | And a changes file for bug3953 | Peter Palfrader | |
2011-11-24 | Handle build-trees better. | Peter Palfrader | |
Properly create git revision and source file sha1sums include files when building tor not in its source tree but in a dedicated build tree. | |||
2011-11-24 | Basic support for a "make version" target to declare the source version | Nick Mathewson | |
This is katmagic's idea. See issue 4400. | |||
2011-11-24 | Move disable-debugger-attachment fn to compat where it belongs. Fix whitespace | Nick Mathewson | |