summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2015-06-01Appease make check-spacesAndrea Shepard
2015-05-30Fix return-type gcc warningSharif Olorin
find_dl_schedule_and_len caused gcc to spit up with -Werror. Signed-off-by: Sharif Olorin <sio@tesser.org>
2015-05-29Another memory leak bytes the dust.Nick Mathewson
2015-05-29Attempt to fix keypinning on WindowsNick Mathewson
Not that I would countenance a directory authority on Windows, but it would be nice if the unit tests passed.
2015-05-29Fix another int-to-ptr cast.Nick Mathewson
2015-05-29Fix a warning from the clangalyzer.Nick Mathewson
2015-05-29Fix a sizeof(ptr) mistake in test-memwipe.cNick Mathewson
2015-05-28Merge remote-tracking branch 'origin/maint-0.2.6'Nick Mathewson
2015-05-28Fix sandbox use with systemd. bug 16212.Nick Mathewson
2015-05-28Avoid double-free on rend_add_service() failureNick Mathewson
Rend_add_service() frees its argument on failure; no need to free again. Fixes bug 16228, bugfix on 0.2.7.1-alpha Found by coverity; this is CID 1301387.
2015-05-28There sure are a lot of these in test_hs.c. CID 1301385Nick Mathewson
2015-05-28Fix a bug in earlier torcert fix, fix another.Nick Mathewson
2015-05-28Another test_hs leak. CID 1301383.Nick Mathewson
2015-05-28Memory leak in tor_cert_parse. CID 1301382.Nick Mathewson
2015-05-28Memory leak in tor_cert_parse. CID gi1301381Nick Mathewson
2015-05-28Fix leak-on-test-failure in test_routerkeys.cNick Mathewson
CID 1301379
2015-05-28Memory leak in test_hs_rend_dataNick Mathewson
CID 1301377
2015-05-28Fix memory leak in test_routerkeysNick Mathewson
CID 1301376
2015-05-28Small leak in ed_key_init_from_file. CID 1301373Nick Mathewson
2015-05-28Memory leak on error in connection_or_compute_auth_cell_body. CID 1301372Nick Mathewson
2015-05-28fix memory leak on bad ns convote. CID 1301371.Nick Mathewson
2015-05-28Fix memory leak on failure to generate EI. CID 1301370.Nick Mathewson
2015-05-28Fix null dereference on key setup error.Nick Mathewson
CID 1301369
2015-05-28Update trunnel code.Nick Mathewson
This gets the minor change in trunnel 1.4.1, which should avoid deadcode warnings from Coverity.
2015-05-28Avoid dereferencing null on unit test failure for link handshakes.Nick Mathewson
This fixes CID 1301368 -- found by coverity
2015-05-28Fix a bug when we fail to read a cert from a file.Nick Mathewson
Found by coverity -- CID 1301366.
2015-05-28Add assertions to crypto_dh_dup()Nick Mathewson
Without these, coverity is annoyed that aren't checking for NULL in bench.c CID 1293335 -- found by coverity.
2015-05-28Impose an upper limit on threads per threadpool.Nick Mathewson
Found by Coverity; Fixes CID 1268069
2015-05-28Merge branch '12498_ed25519_keys_v6'Nick Mathewson
Fixed numerous conflicts, and ported code to use new base64 api.
2015-05-28Note some functions that should move or be mergedNick Mathewson
2015-05-28Do not allocate our ed-link crosscert till after tls ctxNick Mathewson
We need this to prevent some annoying chutney crash-at-starts
2015-05-28Generate weird certificates correctlyNick Mathewson
(Our link protocol assumes that the link cert certifies the TLS key, and there is an RSA->Ed25519 crosscert)
2015-05-28Regenerate ed25519 keys when they will expire soon.Nick Mathewson
Also, have testing-level options to set the lifetimes and expiration-tolerances of all key types, plus a non-testing-level option to set the lifetime of any auto-generated signing key.
2015-05-28# This is a combination of 2 commits.Nick Mathewson
# The first commit's message is: Regenerate ed25519 keys when they will expire soon. Also, have testing-level options to set the lifetimes and expiration-tolerances of all key types, plus a non-testing-level option to set the lifetime of any auto-generated signing key. # The 2nd commit message will be skipped: # fixup! Regenerate ed25519 keys when they will expire soon.
2015-05-28Only load master ed25519 secret keys when we absolutely must.Nick Mathewson
2015-05-28Implement ed25519 identity collation for voting.Nick Mathewson
This is a new collator type that follows proposal 220 for deciding which identities to include. The rule is (approximately): If a <ed,rsa> identity is listed by more than half of authorities, include it. And include all <rsa> votes about that node as matching. Otherwise, if an <*,rsa> or <rsa> identity is listed by more than half of the authorities, and no <ed,rsa> has been listed, include it.
2015-05-28Refactor code that matches up routers with the same identity in votesNick Mathewson
This makes 'routerstatus collation' into a first-class concept, so we can change how that works for prop220.
2015-05-28Checkpoint some work on voting on ed25519 identitiesNick Mathewson
* Include ed25519 identities in votes * Include "no ed25519 identity" in votes * Include some commented-out code about identity voting. (This will disappear.) * Include some functions for identity voting (These will disappear.) * Enforce uniqueness in ed25519 keys within a vote
2015-05-28Enforce more correspondence between ri and eiNick Mathewson
In particular, they have to list the same ed25519 certificate, and the SHA256 digest of the ei needs to match.
2015-05-28Sign extrainfo documents with ed25519Nick Mathewson
Extrainfo documents are now ed-signed just as are router descriptors, according to proposal 220. This patch also includes some more tests for successful/failing parsing, and fixes a crash bug in ed25519 descriptor parsing.
2015-05-28Revise makedesc.py: teach it how to emit ed signatures and crosscertsNick Mathewson
Also, add a trivial ed25519-signed routerinfo to the tests.
2015-05-28Refactor link handshake cell type implementations to use trunnelNick Mathewson
Unit tests still pass.
2015-05-28Fix memory leaks in test_link_handshake.cNick Mathewson
2015-05-28Tests for AUTHENTICATE cell functionality.Nick Mathewson
2015-05-28Start testing cell encoders/processers for the v3 handshake.Nick Mathewson
An earlier version of these tests was broken; now they're a nicer, more robust, more black-box set of tests. The key is to have each test check a handshake message that is wrong in _one_ way.
2015-05-28Add trunnel-generated items for link handshake code.Nick Mathewson
This includes the link handshake variations for proposal220. We'll use this for testing first, and then use it to extend our current code to support prop220.
2015-05-28Include ed25519 keys in microdescriptors.Nick Mathewson
2015-05-28Fix the position-check for ed25519 certs to work with annotationsNick Mathewson
When there are annotations on a router descriptor, the ed25519-identity element won't be at position 0 or 1; it will be at router+1 or router-1. This patch also adds a missing smartlist function to search a list for an item with a particular pointer.
2015-05-28Tie key-pinning logic into directory authority operationNick Mathewson
With this patch: * Authorities load the key-pinning log at startup. * Authorities open a key-pinning log for writing at startup. * Authorities reject any router with an ed25519 key where they have previously seen that ed25519 key with a different RSA key, or vice versa. * Authorities warn about, but *do not* reject, RSA-only descriptors when the RSA key has previously gone along with an Ed25519 key. (We should make this a 'reject' too, but we can't do that until we're sure there's no legit reason to downgrade to 0.2.5.)
2015-05-28Key-pinning back-end for directory authorities.Nick Mathewson
This module implements a key-pinning mechanism to ensure that it's safe to use RSA keys as identitifers even as we migrate to Ed25519 keys. It remembers, for every Ed25519 key we've seen, what the associated Ed25519 key is. This way, if we see a different Ed25519 key with that RSA key, we'll know that there's a mismatch. We persist these entries to disk using a simple format, where each line has a base64-encoded RSA SHA1 hash, then a base64-endoded Ed25519 key. Empty lines, misformed lines, and lines beginning with a # are ignored. Lines beginning with @ are reserved for future extensions.
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion