diff options
| author | Robert Ransom <rransom.8774@gmail.com> | 2012-09-18 16:50:00 -0400 |
|---|---|---|
| committer | Robert Ransom <rransom.8774@gmail.com> | 2012-09-18 16:50:00 -0400 |
| commit | 130e899fbb02d6005e3797dea2099e4033345ebe (patch) | |
| tree | 2fb994763582524cf8b146a9128fdeae31758f7e | |
| parent | d1c4cf2f5adbfa3810164d18428ee06ccbed6451 (diff) | |
| download | tor-130e899fbb02d6005e3797dea2099e4033345ebe.tar tor-130e899fbb02d6005e3797dea2099e4033345ebe.tar.gz | |
Warn if HSes are configured on a client with UseEntryGuards disabled
| -rw-r--r-- | changes/warn-about-hses-without-guards | 8 | ||||
| -rw-r--r-- | src/or/config.c | 9 |
2 files changed, 17 insertions, 0 deletions
diff --git a/changes/warn-about-hses-without-guards b/changes/warn-about-hses-without-guards new file mode 100644 index 000000000..57b8b4d00 --- /dev/null +++ b/changes/warn-about-hses-without-guards @@ -0,0 +1,8 @@ + o Minor features: + + - Warn users who run hidden services on a Tor client with + UseEntryGuards disabled that their hidden services will be + vulnerable to http://freehaven.net/anonbib/#hs-attack06 (the + attack which motivated Tor to support entry guards in the first + place). Fixes bug 6889. + diff --git a/src/or/config.c b/src/or/config.c index affe2388b..11f63efdd 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -2536,6 +2536,15 @@ options_validate(or_options_t *old_options, or_options_t *options, options->UseEntryGuards = 0; } + if (!(options->UseEntryGuards) && + (options->RendConfigLines != NULL)) { + log_warn(LD_CONFIG, + "UseEntryGuards is disabled, but you have configured one or more " + "hidden services on this Tor instance. Your hidden services " + "will be very easy to locate using a well-known attack -- see " + "http://freehaven.net/anonbib/#hs-attack06 for details."); + } + if (!(options->LearnCircuitBuildTimeout) && options->CircuitBuildTimeout < RECOMMENDED_MIN_CIRCUIT_BUILD_TIMEOUT) { log_warn(LD_CONFIG, |