summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2012-12-26Wrapper function for the common rate-limited-log pattern.Nick Mathewson
2012-12-26Rate-limit "No circuits are opened" message to once-per-hourNick Mathewson
mr-4 reports on #7799 that he was seeing it several times per second, which suggests that things had gone very wrong. This isn't a real fix, but it should make Tor usable till we can figure out the real issue.
2012-12-25Fix a possibly-unused-var warning. Thank you, GCC.Nick Mathewson
2012-12-25Fix compilation warning: must not format u64 as long.Nick Mathewson
2012-12-25Fix whitespaceNick Mathewson
2012-12-25Merge remote-tracking branch 'mikeperry/209-path-bias-changes'Nick Mathewson
2012-12-25Add configuration options for directory guardsNick Mathewson
In addition to all the other ways to make directory gurads not go, you can now set UseEntryGuardsAsDirGuards to 0.
2012-12-25Directory guard implementation.Nick Mathewson
Implements proposal 207; ticket 6526.
2012-12-25Remember which of our guards are directory cachesNick Mathewson
2012-12-25Split choosing a regular directory into its own fnNick Mathewson
2012-12-25One last fix for a warning on non-EC systemsNick Mathewson
2012-12-25Be more noncomittal about performance improvement of uint128 backend.Nick Mathewson
2012-12-25Make ECDHE group configurable: 224 for public, 256 for bridges (default)Nick Mathewson
2012-12-25Inform the user if they're passing up a 10x ECDH speedup.Nick Mathewson
2012-12-25Add benchmark for DH handshake and ECDH-P-224/56 handshakeNick Mathewson
2012-12-25Let servers choose better ciphersuites when clients support themNick Mathewson
This implements the server-side of proposal 198 by detecting when clients lack the magic list of ciphersuites that indicates that they're lying faking some ciphers they don't really have. When clients lack this list, we can choose any cipher that we'd actually like. The newly allowed ciphersuites are, currently, "All ECDHE-RSA ciphers that openssl supports, except for ECDHE-RSA-RC4". The code to detect the cipher list relies on on (ab)use of SSL_set_session_secret_cb.
2012-12-25Remove the address argument from client cipher classification fnsNick Mathewson
2012-12-25Cache the type of client cipher list we have in the tor_tls_tNick Mathewson
We already use this classification for deciding whether (as a server) to do a v2/v3 handshake, and we're about to start using it for deciding whether we can use good ciphersuites too.
2012-12-25prop198: Detect the list of ciphersuites we used to lie about havingNick Mathewson
This is less easy than you might think; we can't just look at the client ciphers list, since openssl doesn't remember client ciphers if it doesn't know about them. So we have to keep a list of the "v2" ciphers, with the ones we don't know about removed.
2012-12-25Configure SSL context to know about using P-256 for ECDHE.Nick Mathewson
2012-12-25bump to 0.2.4.7-alpha-devRoger Dingledine
2012-12-24bump to 0.2.4.7-alphaRoger Dingledine
2012-12-18When there are no dir_server_ts to choose, don't crashNick Mathewson
It's important not to call choose_array_element_by_weight and then pass its return value unchecked to smartlist_get : it is allowed to return -1. Fixes bug 7756; bugfix on 4e3d07a6 (not in any released Tor)
2012-12-18Nick's Code review #3 part 2.Mike Perry
2012-12-18Changes from Nick's code review 'part 1'Mike Perry
I think this is actually his third code review of this branch so far.
2012-12-18Add packaged cell fullness to the heartbeat message.Nick Mathewson
This is an attempt to diagnose the severity of bug 7743.
2012-12-17Merge branch 'ticket7570_7571'Nick Mathewson
Conflicts: src/or/routerlist.c
2012-12-17Drop the maximum attempts to get a virtual address to 1000.Nick Mathewson
This is good enough to give P_success >= 999,999,999/1,000,000,000 so long as the address space is less than 97.95 full. It'd be ridiculous for that to happen for IPv6, and usome reasonable assumptions, it would also be pretty silly for IPv4.
2012-12-17Add missing doxygen for DNS and automap codeNick Mathewson
2012-12-17Per-listener option to prefer IPv6 automaps when possible.Nick Mathewson
2012-12-17Build and test most of the machinery needed for IPv6 virtualaddrmapsNick Mathewson
With an IPv6 virtual address map, we can basically hand out a new IPv6 address for _every_ address we connect to. That'll be cool, and will let us maybe get around prop205 issues. This uses some fancy logic to try to make the code paths in the ipv4 and the ipv6 case as close as possible, and moves to randomly generated addresses so we don't need to maintain those stupid counters that will collide if Tor restarts but apps don't. Also has some XXXX items to fix to make this useful. More design needed.
2012-12-17Refactor the code to check if an address is matched by automapsuffixesNick Mathewson
2012-12-17Fix another uninitialized var warning from GCCNick Mathewson
2012-12-17Fixed an unused-variable warningNick Mathewson
2012-12-17Don't use the cache when changing an IP address because of an exit policyNick Mathewson
2012-12-17Turn off by-default use of client-side DNS cacheing.Nick Mathewson
2012-12-17Refactor port_cfg_t creation into a port_cfg_new() functionNick Mathewson
This function gives us a single place to set reasonable default flags for port_cfg_t entries, to avoid bugs like the one where we weren't setting ipv4_traffic_ok to 1 on SocksPorts initialized in an older way.
2012-12-17Implement option to turn off DNS cache modification by a client portNick Mathewson
(This is part 3 of making DNS cache use enabled/disabled on a per-client port basis. This implements the UseCacheIPv[46]DNS options)
2012-12-17Implement option to turn off DNS cache use on a client portNick Mathewson
(This is part 2 of making DNS cache use enabled/disabled on a per-client port basis. This implements the CacheIPv[46]DNS options, but not the UseCachedIPv[46] ones.)
2012-12-17Oops: make the check for not adding ip->ip DNS maps correctNick Mathewson
2012-12-17Add options to turn DNS cache use on or off per client port.Nick Mathewson
(This is part 1 of making DNS cache use enabled/disabled on a per-client port basis. These options are shuffled around correctly, but don't do anything yet.)
2012-12-17Oops; make DNSPort configuration take address family optionsNick Mathewson
2012-12-17Avoid a 'may be used uninitialized' warningNick Mathewson
Fixes bug 7746; bug not in any released version of Tor.
2012-12-13Nuke uses of memcmp outside of unit testsNick Mathewson
We want to be saying fast_mem{cmp,eq,neq} when we're doing a comparison that's allowed to exit early, or tor_mem{cmp,eq,neq} when we need a data-invariant timing. Direct use of memcmp tends to imply that we haven't thought about the issue.
2012-12-13Merge remote-tracking branch 'origin/maint-0.2.3'Nick Mathewson
Conflicts: src/config/geoip
2012-12-13Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3Nick Mathewson
2012-12-13Fix two wide lines in config.cNick Mathewson
2012-12-13Merge branch 'fallback_dirsource_v3'Nick Mathewson
2012-12-13Add link explaining how the geoip file was created.Karsten Loesing
2012-12-13Update to the December 2012 GeoIP database.Karsten Loesing
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion