summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-12-25Fix compilation warning: must not format u64 as long.Nick Mathewson
2012-12-25Fix whitespaceNick Mathewson
2012-12-25Merge remote-tracking branch 'mikeperry/209-path-bias-changes'Nick Mathewson
2012-12-25Merge branch 'directory_guards_rebased'Nick Mathewson
2012-12-25Add documentation for directory guard optionsNick Mathewson
2012-12-25Add configuration options for directory guardsNick Mathewson
In addition to all the other ways to make directory gurads not go, you can now set UseEntryGuardsAsDirGuards to 0.
2012-12-25Directory guard implementation.Nick Mathewson
Implements proposal 207; ticket 6526.
2012-12-25Remember which of our guards are directory cachesNick Mathewson
2012-12-25Split choosing a regular directory into its own fnNick Mathewson
2012-12-25One last fix for a warning on non-EC systemsNick Mathewson
2012-12-25Merge branch 'tls_ecdhe_rebased_v2'Nick Mathewson
2012-12-25Be more noncomittal about performance improvement of uint128 backend.Nick Mathewson
2012-12-25Make ECDHE group configurable: 224 for public, 256 for bridges (default)Nick Mathewson
2012-12-25Inform the user if they're passing up a 10x ECDH speedup.Nick Mathewson
2012-12-25Add benchmark for DH handshake and ECDH-P-224/56 handshakeNick Mathewson
2012-12-25Let servers choose better ciphersuites when clients support themNick Mathewson
This implements the server-side of proposal 198 by detecting when clients lack the magic list of ciphersuites that indicates that they're lying faking some ciphers they don't really have. When clients lack this list, we can choose any cipher that we'd actually like. The newly allowed ciphersuites are, currently, "All ECDHE-RSA ciphers that openssl supports, except for ECDHE-RSA-RC4". The code to detect the cipher list relies on on (ab)use of SSL_set_session_secret_cb.
2012-12-25Remove the address argument from client cipher classification fnsNick Mathewson
2012-12-25Cache the type of client cipher list we have in the tor_tls_tNick Mathewson
We already use this classification for deciding whether (as a server) to do a v2/v3 handshake, and we're about to start using it for deciding whether we can use good ciphersuites too.
2012-12-25prop198: Detect the list of ciphersuites we used to lie about havingNick Mathewson
This is less easy than you might think; we can't just look at the client ciphers list, since openssl doesn't remember client ciphers if it doesn't know about them. So we have to keep a list of the "v2" ciphers, with the ones we don't know about removed.
2012-12-25Configure SSL context to know about using P-256 for ECDHE.Nick Mathewson
2012-12-25bump to 0.2.4.7-alpha-devRoger Dingledine
2012-12-24add a blurb for 0.2.4.7-alpha tootor-0.2.4.7-alphaRoger Dingledine
2012-12-24bump to 0.2.4.7-alphaRoger Dingledine
2012-12-24fold in changes files so farRoger Dingledine
2012-12-18When there are no dir_server_ts to choose, don't crashNick Mathewson
It's important not to call choose_array_element_by_weight and then pass its return value unchecked to smartlist_get : it is allowed to return -1. Fixes bug 7756; bugfix on 4e3d07a6 (not in any released Tor)
2012-12-18Nick's Code review #3 part 2.Mike Perry
2012-12-18Changes from Nick's code review 'part 1'Mike Perry
I think this is actually his third code review of this branch so far.
2012-12-18Add packaged cell fullness to the heartbeat message.Nick Mathewson
This is an attempt to diagnose the severity of bug 7743.
2012-12-17Remove the obsolete doc/TODO.* filesNick Mathewson
Closes bug #7730.
2012-12-17Merge branch 'ticket7570_7571'Nick Mathewson
Conflicts: src/or/routerlist.c
2012-12-17Drop the maximum attempts to get a virtual address to 1000.Nick Mathewson
This is good enough to give P_success >= 999,999,999/1,000,000,000 so long as the address space is less than 97.95 full. It'd be ridiculous for that to happen for IPv6, and usome reasonable assumptions, it would also be pretty silly for IPv4.
2012-12-17Describe IPv6 automap changesNick Mathewson
2012-12-17Document PreferIPv6Automap in the manpageNick Mathewson
2012-12-17Add missing doxygen for DNS and automap codeNick Mathewson
2012-12-17Per-listener option to prefer IPv6 automaps when possible.Nick Mathewson
2012-12-17Build and test most of the machinery needed for IPv6 virtualaddrmapsNick Mathewson
With an IPv6 virtual address map, we can basically hand out a new IPv6 address for _every_ address we connect to. That'll be cool, and will let us maybe get around prop205 issues. This uses some fancy logic to try to make the code paths in the ipv4 and the ipv6 case as close as possible, and moves to randomly generated addresses so we don't need to maintain those stupid counters that will collide if Tor restarts but apps don't. Also has some XXXX items to fix to make this useful. More design needed.
2012-12-17Refactor the code to check if an address is matched by automapsuffixesNick Mathewson
2012-12-17Fix another uninitialized var warning from GCCNick Mathewson
2012-12-17Fixed an unused-variable warningNick Mathewson
2012-12-17Don't use the cache when changing an IP address because of an exit policyNick Mathewson
2012-12-17changes entry for disabling cache usage by defaultNick Mathewson
2012-12-17Turn off by-default use of client-side DNS cacheing.Nick Mathewson
2012-12-17Refactor port_cfg_t creation into a port_cfg_new() functionNick Mathewson
This function gives us a single place to set reasonable default flags for port_cfg_t entries, to avoid bugs like the one where we weren't setting ipv4_traffic_ok to 1 on SocksPorts initialized in an older way.
2012-12-17Changes file for new DNS caching optionsNick Mathewson
2012-12-17Add documentation for the client-side DNS cache optionsNick Mathewson
2012-12-17Implement option to turn off DNS cache modification by a client portNick Mathewson
(This is part 3 of making DNS cache use enabled/disabled on a per-client port basis. This implements the UseCacheIPv[46]DNS options)
2012-12-17Implement option to turn off DNS cache use on a client portNick Mathewson
(This is part 2 of making DNS cache use enabled/disabled on a per-client port basis. This implements the CacheIPv[46]DNS options, but not the UseCachedIPv[46] ones.)
2012-12-17Oops: make the check for not adding ip->ip DNS maps correctNick Mathewson
2012-12-17Add options to turn DNS cache use on or off per client port.Nick Mathewson
(This is part 1 of making DNS cache use enabled/disabled on a per-client port basis. These options are shuffled around correctly, but don't do anything yet.)
2012-12-17Oops; make DNSPort configuration take address family optionsNick Mathewson
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion