Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-09-04 | Debug one last reference-counting issue that only appeared on openssl master | Nick Mathewson | |
2018-09-04 | Fix an easy refcounting bug in a unit test | Nick Mathewson | |
2018-09-04 | Merge branch 'nss_squashed' into nss_merge | Nick Mathewson | |
2018-09-04 | Resolve openssl-only memory leaks | Nick Mathewson | |
2018-09-04 | Fix a pair of remaining leaks in tortls_nss.c | Nick Mathewson | |
Fun fact: PR_Close leaks memory if its socket is not valid. | |||
2018-09-04 | Use FREE_AND_NULL for impl types | Nick Mathewson | |
2018-09-04 | Port test_tortls_verify to not depend on openssl internals | Nick Mathewson | |
2018-09-04 | Remove tor_tls_check_lifetime as unused. | Nick Mathewson | |
Everything that might have used it, uses tor_tls_cert_is_valid() instead. | |||
2018-09-04 | Add unit test for bridge-style TLS initialization. | Nick Mathewson | |
2018-09-04 | Document winsock includes better | Nick Mathewson | |
2018-09-04 | Fix documentation of initialized fields in crypto_init.c | Nick Mathewson | |
2018-09-04 | Make some additional RSA functions const | Nick Mathewson | |
2018-09-04 | Rename crypto_pk_check_key(), use it more reasonably, add tests | Nick Mathewson | |
This function was a wrapper around RSA_check_key() in openssl, which checks for invalid RSA private keys (like those where p or q are composite, or where d is not the inverse of e, or where n != p*q). We don't need a function like this in NSS, since unlike OpenSSL, NSS won't let you import a bogus private key. I've renamed the function and changed its return type to make it more reasonable, and added a unit test for trying to read a key where n != p*q. | |||
2018-09-04 | Unify functions for reading/writing PEM keys, to avoid duplication. | Nick Mathewson | |
2018-09-04 | Do not leave a certificate allocated after testing dirvote_add() | Nick Mathewson | |
2018-09-04 | Do not leak a reference to "slot" when decoding private key. | Nick Mathewson | |
2018-09-04 | Update prefork and postfork NSS code for unit tests. | Nick Mathewson | |
2018-09-04 | Test a few more tortls.c functions | Nick Mathewson | |
2018-09-04 | Several unit tests to improve test coverage of x509*.c | Nick Mathewson | |
2018-09-04 | Remove tor_x509_get_cert_impl as unneeded. | Nick Mathewson | |
2018-09-04 | Avoid double-close on TCP sockets under NSS. | Nick Mathewson | |
2018-09-04 | Avoid spurious error logs when using NSS | Nick Mathewson | |
The tls_log_errors() function now behaves differently for NSS than it did for OpenSSL, so we need to tweak it a bit. | |||
2018-09-04 | Remove tor_tls_shutdown() | Nick Mathewson | |
This function was supposed to implement a half-duplex mode for our TLS connections. However, nothing in Tor actually uses it (besides some unit tests), and the implementation looks really questionable to me. It's probably best to remove it. We can add a tested one later if we need one in the future. | |||
2018-09-04 | Initial NSS support for TLS. | Nick Mathewson | |
This is enough to get a chutney network to bootstrap, though a bunch of work remains. | |||
2018-09-04 | Merge remote-tracking branch 'rl1987/doc26908' | Nick Mathewson | |
2018-09-04 | c99 style in loop | Nick Mathewson | |
2018-09-04 | Merge branch 'tor_api_owning_control' | Nick Mathewson | |
2018-09-04 | Merge branch 'bug24104_029_squashed' | Nick Mathewson | |
2018-09-02 | Update sample torrc files to warn about not using BridgeRelay and MyFamily ↵ | rl1987 | |
together | |||
2018-09-01 | Test for descriptor does not change when hibernating | juga0 | |
2018-09-01 | Add missing router_tests to test.h | juga0 | |
2018-09-01 | Check descriptor bandwidth changed if not hibernating | juga0 | |
There should be a separate check to update descriptor when start or end hibernating. | |||
2018-09-01 | Add test for check_descriptor_bandwidth_changed | juga0 | |
2018-09-01 | Allow mocking rep_hist_bandwidth_assess | juga0 | |
2018-09-01 | Add test log helpers for msgs not containing str | juga0 | |
2018-09-01 | Make bandwidth change factor a constant | juga0 | |
used to determine large changes in bandwidth. | |||
2018-08-29 | Change mention of is_extrainfo router_parse_list_from_string() to want_extrainfo | Neel Chauhan | |
2018-08-29 | Merge branch 'ticket27246_035_01_squashed' | Nick Mathewson | |
2018-08-29 | Expand the comments on ASN.1-encoded TAP keys | Nick Mathewson | |
2018-08-29 | router: Keep RSA onion public key in ASN.1 format | David Goulet | |
The OpenSSL "RSA" object is currently 408 bytes compares to the ASN.1 encoding which is 140 for a 1024 RSA key. We save 268 bytes per descriptor (routerinfo_t) *and* microdescriptor (microdesc_t). Scaling this to 6000 relays, and considering client usually only have microdescriptors, we save 1.608 MB of RAM which is considerable for mobile client. This commit makes it that we keep the RSA onion public key (used for TAP handshake) in ASN.1 format instead of an OpenSSL RSA object. Changes is done in both routerinfo_t and microdesc_t. Closes #27246 Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-08-28 | Merge remote-tracking branch 'onionk/prototest1' | Nick Mathewson | |
2018-08-28 | make a comment more right | Roger Dingledine | |
(from #20874 fix) | |||
2018-08-28 | Merge remote-tracking branch 'onionk/connection-comments1' | Nick Mathewson | |
2018-08-28 | Merge branch 'bug26367_035_01' | Nick Mathewson | |
2018-08-28 | hs: Remove rend_client_non_anonymous_mode_enabled | David Goulet | |
The removal of Tor2Web made this function useless. Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-08-28 | hs: Remove rend_client_allow_non_anonymous_connection | David Goulet | |
By removing Tor2Web, there is no way a client can be non anonymous so we remove that function and the callsites. Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-08-28 | circ: Remove useless param from cannibalization function | David Goulet | |
Because we just removed Tor2web support, the need_specific_rp is not needed anymore when cannibalizing a circuit. Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-08-28 | hs: Render obsolete Tor2web | David Goulet | |
Remove support for Tor2web in the code and build system. At this commit, tor doesn't have Tor2web support anymore. Ref: https://lists.torproject.org/pipermail/tor-dev/2018-July/013295.html Close #26367 Signed-off-by: David Goulet <dgoulet@torproject.org> | |||
2018-08-28 | Fix log.c comments about assert vs tor_assert vs raw_assert. | Nick Mathewson | |
2018-08-28 | Merge remote-tracking branch 'tor-github/pr/245' | Nick Mathewson | |