aboutsummaryrefslogtreecommitdiff
path: root/changes
AgeCommit message (Collapse)Author
2012-01-11Merge branch 'feature3457-v4-nm-squashed'Nick Mathewson
Conflicts: src/or/rendclient.c
2012-01-10Merge remote-tracking branch 'public/bug4650_nm_squashed'Nick Mathewson
2012-01-10changes file for bug4746Nick Mathewson
2012-01-10Merge branch 'absolute_cookie_file'Nick Mathewson
2012-01-10changes file for #4881Nick Mathewson
2012-01-10Test for broken counter-mode at runtimeNick Mathewson
To solve bug 4779, we want to avoid OpenSSL 1.0.0's counter mode. But Fedora (and maybe others) lie about the actual OpenSSL version, so we can't trust the header to tell us if it's safe. Instead, let's do a run-time test to see whether it's safe, and if not, use our built-in version. fermenthor contributed a pretty essential fixup to this patch. Thanks!
2012-01-10We no longer need to detect openssl without RAND_poll()Nick Mathewson
We require openssl 0.9.7 or later, and RAND_poll() was first added in openssl 0.9.6.
2012-01-10Add macros to construct openssl version numbersNick Mathewson
It's a pain to convert 0x0090813f to and from 0.9.8s-release on the fly, so these macros should help.
2012-01-10Log which votes we still need to fetchSebastian Hahn
This might help us see which authorities are problematic in getting their vote published the first time.
2012-01-10Advertise dirport if accountingmax is large enoughSebastian Hahn
When we have an effective bandwidthrate configured so that we cannot exceed our bandwidth limit in one accounting interval, don't disable advertising the dirport. Implements ticket 2434.
2012-01-09Revise bug4413 changes fileNick Mathewson
2012-01-09Remove (untriggerable) overflow in crypto_random_hostname()Stephen Palmateer
Fixes bug 4413; bugfix on xxxx. Hostname components cannot be larger than 63 characters. This simple check makes certain randlen cannot overflow rand_bytes_len.
2012-01-09Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2012-01-09Fix a trivial log message error in renservice.cNick Mathewson
Fixes bug 4856; bugfix on 0.0.6 This bug was introduced in 79fc5217, back in 2004.
2012-01-07fold in some new changelog stanzasRoger Dingledine
2012-01-06Add a changes file for bug4563Nick Mathewson
2012-01-05Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2012-01-05Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson
2012-01-05Add a changes file for bug4822Nick Mathewson
2012-01-05Merge branch 'maint-0.2.2'Roger Dingledine
2012-01-05Merge branch 'maint-0.2.1' into maint-0.2.2Roger Dingledine
2012-01-05add a changes file for ticket 4825Roger Dingledine
2012-01-04changes file for bug4650Nick Mathewson
2012-01-04Merge remote-tracking branch 'rransom-tor/bug1297b-v2'Nick Mathewson
2012-01-03Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2011-12-30Fix spelling in a controlsocket log msgSebastian Hahn
Fixes bug 4803.
2011-12-28Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2011-12-28Merge remote-tracking branch 'public/bug4788' into maint-0.2.2Nick Mathewson
2011-12-28changes file for bug1827Nick Mathewson
2011-12-28Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2011-12-28Merge remote-tracking branch 'origin/maint-0.2.1' into maint-0.2.2Nick Mathewson
2011-12-28Bug 4786 fix: don't convert EARLY to RELAY on v1 connectionsNick Mathewson
We used to do this as a workaround for older Tors, but now it's never the correct thing to do (especially since anything that didn't understand RELAY_EARLY is now deprecated hard).
2011-12-28Don't exit when marking a newly created _C_INTRODUCING circ for closeRobert Ransom
2011-12-27Authorities reject insecure Tors.Nick Mathewson
This patch should make us reject every Tor that was vulnerable to CVE-2011-0427. Additionally, it makes us reject every Tor that couldn't handle RELAY_EARLY cells, which helps with proposal 110 (#4339).
2011-12-27Require openssl 1.0.0a for using openssl's ctr-mode implementationNick Mathewson
Previously we required 1.0.0, but there was a bug in the 1.0.0 counter mode. Found by Pascal. Fixes bug 4779. A more elegant solution would be good here if somebody has time to code one.
2011-12-27Add an option to close HS service-side rend circs on timeoutRobert Ransom
2011-12-27Don't close HS service-side rend circs on timeoutRobert Ransom
2011-12-27Add an option to close 'almost-connected' HS client circs on timeoutRobert Ransom
2011-12-27Don't close HS client circs which are 'almost connected' on timeoutRobert Ransom
2011-12-26Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2011-12-25Merge remote-tracking branch 'nickm/prop110_v2'Roger Dingledine
2011-12-25Provide correct timeradd/timersup replacementsSebastian Hahn
Bug caught and patch provided by Vektor. Fixes bug 4778.t
2011-12-22Look up the rend circ whose INTRODUCE1 is being ACKed correctlyRobert Ransom
This change cannibalizes circuit_get_by_rend_query_and_purpose because it had exactly one caller.
2011-12-22Merge remote-tracking branch 'rransom/feature2411-v4'Nick Mathewson
2011-12-22Fix bug2571: warn on EntryNodes set and UseEntryGuards disabledNick Mathewson
2011-12-22Changes file for bug1101Nick Mathewson
2011-12-22Implement the last of proposal 110Nick Mathewson
Reject all EXTEND requests not received in a relay_early cell
2011-12-22Merge remote-tracking branch 'public/bug4697'Nick Mathewson
2011-12-21Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson
2011-12-21Do not even try to keep going on a socket with socklen==0Nick Mathewson
Back in #1240, r1eo linked to information about how this could happen with older Linux kernels in response to nmap. Bugs #4545 and #4547 are about how our approach to trying to deal with this condition was broken and stupid. Thanks to wanoskarnet for reminding us about #1240. This is a fix for the abovementioned bugs, and is a bugfix on 0.1.0.3-rc.