aboutsummaryrefslogtreecommitdiff
path: root/changes
Commit message (Collapse)AuthorAge
* Document --hush; fix documentation for --quiet.Nick Mathewson2012-06-14
|
* Merge remote-tracking branch 'asn-mytor/bug5589_take2'Nick Mathewson2012-06-14
|\
| * Remove validate_pluggable_transports_config(): redundant since 9d9b5ed0.George Kadianakis2012-06-14
| | | | | | | | | | | | The warning message of validate_pluggable_transports_config() is superseded by the changes in the warning message of connection_or_connect() when the proxy credentials can't be found.
* | fold in further changes filesRoger Dingledine2012-06-14
| |
* | Merge remote-tracking branch 'public/bug4663'Nick Mathewson2012-06-13
|\ \
| * | Add a warning for using HTTPProxy with no other proxy.Nick Mathewson2012-06-12
| | | | | | | | | | | | | | | | | | | | | From what I can tell, this configuration is usually a mistake, and leads people to think that all their traffic is getting proxied when in fact practically none of it is. Resolves the issue behind "bug" 4663.
* | | Add change file for bug 5049Andrea Shepard2012-06-13
| | |
* | | Merge branch 'bug5263_023'Nick Mathewson2012-06-13
|\ \ \
| * | | Add changes file for bug5263Nick Mathewson2012-06-13
| | | |
* | | | Merge branch 'bug4744_squashed'Nick Mathewson2012-06-13
|\ \ \ \
| * | | | Implement the client side of proposal 198Nick Mathewson2012-06-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a feature removal: we no longer fake any ciphersuite other than the not-really-standard SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA (0xfeff). This change will let servers rely on our actually supporting what we claim to support, and thereby let Tor migrate to better TLS ciphersuites. As a drawback, Tor instances that use old openssl versions and openssl builds with ciphers disabled will no longer give the "firefox" cipher list.
| * | | | Change our ciphersuite list to match ff8Nick Mathewson2012-05-15
| | | | |
* | | | | Merge remote-tracking branch 'public/bug3940_redux'Nick Mathewson2012-06-13
|\ \ \ \ \
| * | | | | An attempt at bug3940 and making AllowDotExit 0 work with MapAddressNick Mathewson2012-05-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This time, I follow grarpamp's suggestion and move the check for .exit+AllowDotExit 0 to the top of connection_ap_rewrite_and_attach, before any rewriting occurs. This way, .exit addresses are forbidden as they arrive from a socks connection or a DNSPort request, and not otherwise. It _is_ a little more complicated than that, though. We need to treat any .exit addresses whose source is TrackHostExits as meaning that we can retry without that exit. We also need to treat any .exit address that comes from an AutomapHostsOnResolve operation as user-provided (and thus forbidden if AllowDotExits==0), so that transitioning from AllowDotExits==1 to AllowDotExits==0 will actually turn off automapped .exit addresses.
* | | | | | Merge remote-tracking branch 'public/bug5210'Nick Mathewson2012-06-13
|\ \ \ \ \ \
| * | | | | | fix for bug #5210: enable GCC and LD hardening by defaultFlorent Daigniere2012-03-15
| | | | | | |
* | | | | | | Fix another clang compile warningSebastian Hahn2012-06-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | We forgot this when we fixed 5969.
* | | | | | | Fix integer overflow in cell stats spotted by atagar.Karsten Loesing2012-06-13
| |_|_|_|_|/ |/| | | | | | | | | | | | | | | | | Fixes #5849.
* | | | | | Merge branch 'maint-0.2.2'Roger Dingledine2012-06-13
|\ \ \ \ \ \ | |_|_|_|/ / |/| | | | |
| * | | | | Update to the June 2012 GeoIP database.Karsten Loesing2012-06-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Manually removed range 0.116.0.0 to 0.119.255.255 which Maxmind says is assigned to AT. This is very likely a bug in their database, because 0.0.0.0/8 is a reserved range.
* | | | | | fold in changes files so farRoger Dingledine2012-06-12
| |_|_|_|/ |/| | | |
* | | | | Merge branch 'bug5452'Nick Mathewson2012-06-11
|\ \ \ \ \
| * | | | | Call bug5452 fix a feature; note its trac number in the changes fileNick Mathewson2012-06-11
| | | | | |
| * | | | | Add change file for 5452Andrea Shepard2012-06-11
| | | | | |
* | | | | | Merge remote-tracking branch 'public/bug4592'Nick Mathewson2012-06-11
|\ \ \ \ \ \
| * | | | | | Treat SW_SERVER_HELLO_B as another sign of an SSL handshakeNick Mathewson2012-05-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We've been only treating SW_SERVER_HELLO_A as meaning that an SSL handshake was happening. But that's not right: if the initial attempt to write a ServerHello fails, we would get a callback in state SW_SERVER_HELLO_B instead. (That's "instead" and not "in addition": any failed attempt to write the hello will fail and cause the info callback not to get written.) Fix for bug 4592; bugfix on 0.2.0.13-alpha.
* | | | | | | Merge remote-tracking branch 'public/bug5598'Nick Mathewson2012-06-11
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: doc/tor.1.txt Conflict was on a formatting issue in the manpage.
| * | | | | | | Change the default for DynamicDHGroups to 0Nick Mathewson2012-06-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This feature can make Tor relays less identifiable by their use of the mod_ssl DH group, but at the cost of some usability (#4721) and bridge tracing (#6087) regressions. We should try to turn this on by default again if we find that the mod_ssl group is uncommon and/or we move to a different DH group size (see #6088). Before we can do so, we need a fix for bugs #6087 and Resolves ticket #5598 for now.
* | | | | | | | Merge branch 'bug6097'Nick Mathewson2012-06-11
|\ \ \ \ \ \ \ \
| * | | | | | | | Fix mingw build with -DUNICODE -D_UNICODENick Mathewson2012-06-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a very blunt fix, and mostly just turns some func() calls into FuncA() to make things build again. Fixes bug 6097.
| * | | | | | | | Be more careful calling wcstombsNick Mathewson2012-06-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The function is not guaranteed to NUL-terminate its output. It *is*, however, guaranteed not to generate more than two bytes per multibyte character (plus terminating nul), so the general approach I'm taking is to try to allocate enough space, AND to manually add a NUL at the end of each buffer just in case I screwed up the "enough space" thing. Fixes bug 5909.
* | | | | | | | | Merge branch 'bug2865'Nick Mathewson2012-06-11
|\ \ \ \ \ \ \ \ \ | |_|_|_|/ / / / / |/| | | | | | | |
| * | | | | | | | Correct the defaults for the *Statistics optionsNick Mathewson2012-06-07
| | | | | | | | |
* | | | | | | | | changes file and whitespace fix for bug5235 patchNick Mathewson2012-06-08
|/ / / / / / / /
* | | | | | | | Merge remote-tracking branch 'arma/bug3886'Nick Mathewson2012-06-07
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/or/dirserv.c
| * | | | | | | let private tor networks more reliably handle hidden servicesRoger Dingledine2011-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | this is a tweak on the fix in f87c6f100d (see also #2088)
* | | | | | | | Merge remote-tracking branch 'origin/maint-0.2.2'Nick Mathewson2012-06-07
|\ \ \ \ \ \ \ \ | |_|/ / / / / / |/| | | / / / / | | |_|/ / / / | |/| | | | |
| * | | | | | Send a CRLF at the end of a STATUS_* event, not in the middle of itRobert Ransom2012-06-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes bug 6094; bugfix on commit 3a9351b57e528b1d0bd2e72bcf78db7c91b2ff8f.
* | | | | | | start folding in the changes filesRoger Dingledine2012-06-05
| | | | | | |
* | | | | | | Merge branch 'bug5603'Nick Mathewson2012-06-05
|\ \ \ \ \ \ \
| * | | | | | | Changes file for bug 5603Nick Mathewson2012-06-05
| | | | | | | |
* | | | | | | | Merge remote-tracking branch 'public/getfilesize_64'Nick Mathewson2012-06-05
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/common/compat.c The getfilesize change conflicted with the removal of file_handle from the windows tor_mmap_t.
| * | | | | | | | Use GetFileSize correctly on win32Nick Mathewson2012-05-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (Use its second parameter to find the high 32 bits of the file size; check its return value for error conditions.)
* | | | | | | | | Revert "Disable (Cell,DirReq,Entry,ExitPort)Statistics on bridges"Nick Mathewson2012-06-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 981e896dd2eaf69798bb503c271306ee779dd6d2. Apparently Karsten still needs DirReqStatistics for bridges; see
* | | | | | | | | Merge remote-tracking branch 'public/bug3894'Nick Mathewson2012-06-05
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Fix some more FreeBSD4 issues (based on a patch from grarpamp)Nick Mathewson2012-05-16
| |/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Apparently, freebsd 4 doesn't like malloc.h, needs sys/param.h for MIN/MAX, and doesn't have a SIZE_MAX. For bug 3894.
* | | | | | | | | Merge remote-tracking branch 'public/format_doubles'Nick Mathewson2012-06-05
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/or/geoip.c
| * | | | | | | | | Use %f, not %lf when formatting doublesNick Mathewson2012-05-16
| |/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | %f is correct; %lf is only needed with scanf. Apparently, on some old BSDs, %lf is deprecated. Didn't we do this before? Yes, we did. But we only got the instances of %lf, not more complicated things like %.5lf . This patch tries to get everything. Based on a patch for 3894 by grarpamp.
* | | | | | | | | Disable (Cell,DirReq,Entry,ExitPort)Statistics on bridgesNick Mathewson2012-06-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These stats are currently discarded, but we might as well hard-disable them on bridges, to be clean. Fix for bug 5824; bugfix on 0.2.1.17-rc. Patch originally by Karsten Loesing.
* | | | | | | | | Merge remote-tracking branch 'public/bug4657'Nick Mathewson2012-06-05
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: src/or/router.c
generated by cgit v1.2.3 (git 2.48.1) at 2025-04-04 08:54:03 +0000