tor - [no description]

	Commit message (Collapse)	Author	Age
...
\| * \| \| \| \| \| \|	Normal relays should generate dynamic DH moduli as well.	George Kadianakis	2011-11-26
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Simply initialize TLS context if DynamicDHGroups change.	George Kadianakis	2011-11-25
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	We used to do init_keys() if DynamicDHGroups changed after a HUP, so that the dynamic DH modulus was stored on the disk. Since we are now doing dynamic DH modulus storing in crypto.c, we can simply initialize the TLS context and be good with it. Introduce a new function router_initialize_tls_context() which initializes the TLS context and use it appropriately.
\| * \| \| \| \| \| \|	Add a changes file.	George Kadianakis	2011-11-25
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Only bother with dynamic DH moduli if we are a bridge.	George Kadianakis	2011-11-25
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Move DH_GENERATOR to crypto.c.	George Kadianakis	2011-11-25
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Move broken primes to dynamic_dh_modulus.broken.	George Kadianakis	2011-11-25
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Do dynamic DH modulus storing in crypto.c.	George Kadianakis	2011-11-25
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Finishing touches.	George Kadianakis	2011-11-25
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	- Make check-spaces happy. - Remove a stray header from crypto.h
\| * \| \| \| \| \| \|	Rename 'dynamic prime' to 'dynamic DH modulus'.	George Kadianakis	2011-11-25
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	s/DynamicPrimes/DynamicDHGroups/g	George Kadianakis	2011-11-25
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Notify the user that her computer is generating numbers.	George Kadianakis	2011-11-25
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Make sure that the stored DH prime is safe to use.	George Kadianakis	2011-11-25
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Move crypto_get_stored_dynamic_prime() to crypto.c	George Kadianakis	2011-11-24
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Move store_dynamic_prime() to crypto.c.	George Kadianakis	2011-11-24
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Tone down the logging.	George Kadianakis	2011-11-24
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Implement dynamic prime reading and storing to disk.	George Kadianakis	2011-11-24
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Make DynamicPrimes SIGHUP-able.	George Kadianakis	2011-11-24
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Instead of passing the DynamicPrimes configuration option to crypto_global_init(), generate and set a new TLS DH prime when we read the torrc.
\| * \| \| \| \| \| \|	Document DynamicPrimes in the manual page.	George Kadianakis	2011-11-24
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Improve code in the dynamic primes realm.	George Kadianakis	2011-11-24
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Improve logging.	George Kadianakis	2011-11-24
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Make it compile.	George Kadianakis	2011-11-24
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Rename "Rakshasa" to "Dynamic Prime".	George Kadianakis	2011-11-24
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Introduce the DynamicPrimes configuration option.	George Kadianakis	2011-11-24
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Copy/Paste Jake's stuff.	George Kadianakis	2011-11-24
\| \| \|_\|_\|_\|/ / \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This commit copies parts of Jake's f3bb6846975193d9a6649c31f94bda47e4014070 commit verbatim to the current master.
* \| \| \| \| \| \|	Merge branch 'disable_network'	Nick Mathewson	2011-11-29
\|\ \ \ \ \ \ \
\| * \| \| \| \| \| \|	Fix some DOCDOCs	Nick Mathewson	2011-11-29
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Make sure we never launch an evdns resolve when DisableNetwork is 1	Nick Mathewson	2011-11-29
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	log a notice when disablenetwork is set	Nick Mathewson	2011-11-28
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	Manpage for DisableNetwork	Nick Mathewson	2011-11-28
\| \| \| \| \| \| \| \|
\| * \| \| \| \| \| \|	New 'DisableNetwork' option to prevent Tor from using the network	Nick Mathewson	2011-11-28
\| \| \|_\|_\|_\|_\|/ \| \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Some controllers want this so they can mess with Tor's configuration for a while via the control port before actually letting Tor out of the house. We do this with a new DisableNetwork option, that prevents Tor from making any outbound connections or binding any non-control listeners. Additionally, it shuts down the same functionality as shuts down when we are hibernating, plus the code that launches directory downloads. To make sure I didn't miss anything, I added a clause straight to connection_connect, so that we won't even try to open an outbound socket when the network is disabled. In my testing, I made this an assert, but since I probably missed something, I've turned it into a BUG warning for testing.
* \| \| \| \| \| \|	Merge branch 'multilevel_cfg'	Nick Mathewson	2011-11-29
\|\ \ \ \ \ \ \
\| * \| \| \| \| \| \|	Support for a defaults torrc file.	Nick Mathewson	2011-11-27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This will mainly help distributors by giving a way to set system or package defaults that a user can override, and that a later package can replace. No promises about the particular future location or semantics for this: we will probably want to tweak it some before 0.2.3.x-rc The file is searched for in CONFDIR/torrc-defaults , which can be overridden with the "--defaults-torrc" option on the command line.
\| * \| \| \| \| \| \|	Add the ability to append and clear linelist options from cmdline	Nick Mathewson	2011-11-27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This will be important for getting stuff to work right across zones.
\| * \| \| \| \| \| \|	Make linelists always overridden by the command line	Nick Mathewson	2011-11-27
\| \|/ / / / / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This starts an effort to refactor torrc handling code to make it easier to live with. It makes it possible to override exit policies from the command line, and possible to override (rather than append to) socksport lists from the command line. It'll be necessary to make a "base" torrc implementation work at all.
* / / / / / /	Make pending libevent actions cancelable	Nick Mathewson	2011-11-29
\|/ / / / / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This avoids a dangling pointer issue in the 3412 code, and should fix bug 4599.
* \| \| \| \| \|	Merge branch 'safer_params_squashed'	Nick Mathewson	2011-11-27
\|\ \ \ \ \ \
\| * \| \| \| \| \|	Implement consensus method 12 (proposal 178)	Sebastian Hahn	2011-11-27
\|/ / / / / /
* \| \| \| \| \|	indent; add comment	Nick Mathewson	2011-11-27
\| \| \| \| \| \|
* \| \| \| \| \|	Merge remote-tracking branch 'asn/bug4584'	Nick Mathewson	2011-11-27
\|\ \ \ \ \ \ \| \|_\|/ / / / \|/\| \| \| \| \|
\| * \| \| \| \|	Add a changes file.	George Kadianakis	2011-11-27
\| \| \| \| \| \|
\| * \| \| \| \|	Use random bytes as our certificate serial numbers.	George Kadianakis	2011-11-27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Instead of using time(NULL) in our certificate serial numbers, use eight random bytes as suggested in proposal 179.
* \| \| \| \| \|	Don't schedule excess_renegotiations_callback unless it's set	Nick Mathewson	2011-11-27
\|/ / / / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Partial fix for bug 4587; reported by "frosty_un".
* \| \| \| \|	fold in changes files so far	Roger Dingledine	2011-11-25
\| \| \| \| \|
* \| \| \| \|	use event_free() wrapper; fix bug 4582	Nick Mathewson	2011-11-25
\| \| \| \| \|
* \| \| \| \|	Fix some wide lines in tortls.c	Nick Mathewson	2011-11-25
\| \| \| \| \|
* \| \| \| \|	Avoid a double-mark in connection_or_close_connection_cb	Nick Mathewson	2011-11-25
\| \| \| \| \|
* \| \| \| \|	Refactor tor_event_base_once to do what we actually want	Nick Mathewson	2011-11-25
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This version avoids the timeout system entirely, gives a nicer interface, and lets us manage allocation explicitly.
* \| \| \| \|	Merge remote-tracking branch 'asn/bug4312'	Nick Mathewson	2011-11-25
\|\ \ \ \ \
\| * \| \| \| \|	Use callback-driven approach to block renegotiations.	George Kadianakis	2011-11-13
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Also use this new approach in the bufferevents-enabled case.
\| * \| \| \| \|	Fix issues pointed out by nickm.	George Kadianakis	2011-11-03
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	- Rename tor_tls_got_server_hello() to tor_tls_got_client_hello(). - Replaced some aggressive asserts with LD_BUG logging. They were the innocent "I believe I understand how these callbacks work, and this assert proves it" type of callbacks, and not the "If this statement is not true, computer is exploding." type of callbacks. - Added a changes file.