aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | Another unit test for exit_policy_is_general_exit()Sebastian Hahn2010-02-04
| |
* | Call exit_policy_is_general_exit lessSebastian Hahn2010-02-04
| | | | | | | | | | | | | | When calculating the is_exit flag for a routerinfo_t, we don't need to call exit_policy_is_general_exit() if router_exit_policy_rejects_all() tells us it definitely is an exit. This check is much cheaper than running exit_policy_is_general_exit().
* | New unit test, testing for b0red's exit policySebastian Hahn2010-02-04
| |
* | When we've disabled .exit hostnames, actually reject them.Nick Mathewson2010-02-03
| | | | | | | | | | Previously we were treating them as decent hostnames and sending them to the exit, which is completely wrong.
* | Trivial doc fix for exit_policy_is_general_exit_helperNick Mathewson2010-02-03
| | | | | | | | | | The original comment said what it did if there was at least one /8 that allowed access to the port, but not what it did otherwise.
* | Another new test for exit_policy_is_general_exit()Sebastian Hahn2010-02-03
| |
* | New testcase for exit_policy_is_general_exitSebastian Hahn2010-02-03
| |
* | Don't assign Exit flag incorrectlySebastian Hahn2010-02-03
| | | | | | | | | | | | | | | | | | | | exit_policy_is_general_exit() assumed that there are no redundancies in the passed policy, in the sense that we actively combine entries in the policy to really get rid of any redundancy. Since we cannot do that without massively rewriting the policy lines the relay operators set, fix exit_policy_is_general_exit(). Fixes bug 1238, discovered by Martin Kowalczyk.
* | Add a changelog entry for fixing bug 1237.Nick Mathewson2010-02-02
| | | | | | | | | | We don't have such an entry for 0.2.1.x, since bug 1237 never made it into a released version of 0.2.1.x.
* | Merge remote branch 'origin/maint-0.2.1'Nick Mathewson2010-02-02
|\|
| * Link libssl and libcrypto in the right order.Nick Mathewson2010-02-02
| | | | | | | | | | | | | | | | For most linking setups, this doesn't matter. But for some setups, when statically linking openssl, it does matter, since you need to link things with dependencies before you link things they depend on. Fix for bug 1237.
* | add a2x intermediate files to gitignoreNick Mathewson2010-01-31
| |
* | Merge remote branch 'origin/maint-0.2.1'Nick Mathewson2010-01-31
|\|
| * Revise OpenSSL fix to work with OpenSSL 1.0.0beta*Nick Mathewson2010-01-31
| | | | | | | | | | | | | | | | | | In brief: you mustn't use the SSL3_FLAG solution with anything but 0.9.8l, and you mustn't use the SSL_OP solution with anything before 0.9.8m, and you get in _real_ trouble if you try to set the flag in 1.0.0beta, since they use it for something different. For the ugly version, see my long comment in tortls.c
* | Merge commit 'origin/maint-0.2.1'Nick Mathewson2010-01-29
|\| | | | | | | | | Conflicts: src/common/tortls.c
| * Decide whether to use SSL flags based on runtime OpenSSL version.Nick Mathewson2010-01-29
| | | | | | | | | | | | | | | | | | | | | | We need to do this because Apple doesn't update its dev-tools headers when it updates its libraries in a security patch. On the bright side, this might get us out of shipping a statically linked OpenSSL on OSX. May fix bug 1225. [backported]
* | Detect the correct versions of openssl for tls negotiation fixNick Mathewson2010-01-29
| | | | | | | | | | Since it doesn't seem to hurt, we should use _both_ fixes whenever we see OpenSSL 0.9.7L .. 0.9.8, or OpenSSL 0.9.8L..
* | Decide whether to use SSL flags based on runtime OpenSSL version.Nick Mathewson2010-01-29
| | | | | | | | | | | | | | | | | | We need to do this because Apple doesn't update its dev-tools headers when it updates its libraries in a security patch. On the bright side, this might get us out of shipping a statically linked OpenSSL on OSX. May fix bug 1225.
* | Clarify a paragraph in prop 169.Nick Mathewson2010-01-29
| |
* | Make sure docdir is defined when making doc/Sebastian Hahn2010-01-28
| | | | | | | | | | Apparently some autoconf versions need this, while others don't. This means documentation will be installed into share/doc/tor/.
* | Fix building the tarballSebastian Hahn2010-01-28
| | | | | | | | | | | | | | This removes the Makefile.am from doc/design-paper and replaces it with a static Makefile. We don't need to call it during the normal Tor build process, as we don't need its targets normally. Keeping it around in case we want to rebuild the pdf or ps files later.
* | The name for the proposal status of 151 is "finished", not "Implemented"Nick Mathewson2010-01-28
| |
* | Proposal 169: Eliminate TLS renegotiationNick Mathewson2010-01-28
| | | | | | | | | | | | | | | | | | | | | | | | | | I propose a backward-compatible change to the Tor connection establishment protocol to avoid the use of TLS renegotiation. Rather than doing a TLS renegotiation to exchange certificates and authenticate the original handshake, this proposal takes an approach similar to Steven Murdoch's proposal 124, and uses Tor cells to authenticate the parties' identities once the initial TLS handshake is finished.
* | Fix comments for getinfo_helper_tSebastian Hahn2010-01-27
| | | | | | | | rieo pointed out something isn't right here
* | Clean the man and html files with make (dist)cleanSebastian Hahn2010-01-27
| |
* | Stop shipping the design paper in the tarballsSebastian Hahn2010-01-27
| |
* | Fix ChangeLog entry for asciidoc branch.Nick Mathewson2010-01-27
| |
* | Merge remote branch 'sebastian/manpage'Nick Mathewson2010-01-27
|\ \
| * | Add a comment explaining the doc build systemNick Mathewson2010-01-27
| | | | | | | | | | | | Updated a little by Sebastian
| * | Make the asciidoc build process work from outside top_srcdirNick Mathewson2010-01-27
| | | | | | | | | | | | Edited a little by Sebastian
| * | Fix a few typos in the manpage, and reword the DisableAllSwap entrySebastian Hahn2010-01-27
| | |
| * | Convert the Tor manpage to asciidoc.Sebastian Hahn2010-01-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | This should be a very faithful conversion, preserving as much of the layout of the old manpage as possible. This wasn't possible for the nt-service and the DataDirectory/state parts. See a later commit for some small cleanups. Tiago Faria helped with the asciidoc conversion, big thanks!
| * | Convert the tor-resolve manpage to asciidocSebastian Hahn2010-01-27
| | |
| * | Convert the torify manpage to asciidocSebastian Hahn2010-01-27
| | |
| * | Convert the tor-gencert manpage to asciidocSebastian Hahn2010-01-27
| | |
| * | Allow generating documentation from asciidoc in the MakefileSebastian Hahn2010-01-27
| | |
| * | Move the torify manpage into the doc dirSebastian Hahn2010-01-27
| | |
| * | Stop putting parts of the website into tarballs.Sebastian Hahn2010-01-27
| | | | | | | | | | | | | | | The website wasn't used by our packages, and most users will not know how to open html.en files anyways.
* | | Bump version to 0.2.2.8-alpha-devNick Mathewson2010-01-27
|/ /
* | 0.2.2.8-alpha is coming out today sometimeRoger Dingledine2010-01-26
| |
* | Fix a memory corruption bug while collecting bridge statsKarsten Loesing2010-01-26
| | | | | | | | | | | | | | | | | | | | We accidentally freed the internal buffer for bridge stats when we were writing the bridge stats file or honoring a control port request for said data. Change the interfaces for geoip_get_bridge_stats* to prevent these problems, and remove the offending free/add a tor_strdup. Fixes bug 1208.
* | Merge commit 'sebastian/quiet'Nick Mathewson2010-01-25
|\ \
| * | Be quieter about failing to decode authority digestsSebastian Hahn2010-01-25
| | | | | | | | | | | | | | | | | | | | | This was freaking out some relay operators without good reason, as it is nothing the relay operator can do anything about anyways. Quieting this warning suggested by rieo.
* | | Rearrange _thread_test_func to please Coverity ScanNick Mathewson2010-01-25
| | | | | | | | | | | | | | | | | | | | | | | | I believe that since we were allocating *cp while holding a mutex, coverity deduced that *cp must be protected by that mutex, and later flipped out when we didn't use it that way. If this is so, we can solve our problems by moving the *cp = tor_strdup(buf) part outside of the mutex-protected code.
* | | Try to untangle the logic in server_port_flushNick Mathewson2010-01-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's a bit confusing to have a loop where another function, confusingly named "*_free", is responsible for advancing the loop variable (or rather, for altering a structure so that the next time the loop variable's initializer is evaluated it evaluates to something different.) Not only has this confused people: it's also confused coverity scan. Let's fix that.
* | | Don't unlock a new log until done logging the tor version.Nick Mathewson2010-01-25
|/ / | | | | | | This might please coverity scan.
* | Since dump_microdescriptor() can return -1; make its type ssize_tNick Mathewson2010-01-24
| |
* | Handle errors reported by fwrite() in dump_microdescriptor()Peter Palfrader2010-01-24
| | | | | | | | Does not deal with error handling in dump_microdescriptor's callers.
* | Merge commit 'origin/maint-0.2.1'Nick Mathewson2010-01-24
|\| | | | | | | | | | | | | Resolved conflicts in: configure.in src/or/Makefile.am src/tools/Makefile.am
| * Add --enable-static-(openssl|libevent) optionsNick Mathewson2010-01-24
| | | | | | | | | | These options only work when using --with-(openssl|libevent)-dir to explicitly pick a libevent or openssl location.
generated by cgit v1.2.3 (git 2.45.0) at 2024-11-16 23:25:12 +0000