| Commit message (Expand) | Author | Age |
|---|
| * | Clock skew fixes.•••Allow some slop (currently 3 minutes) when checking certificate validity.
Change certificate lifetime from 1 year to 2 days. Since we
regenerate regularly (we regenerate regularly, right??), this
shouldn't be a problem.
Have directories reject descriptors published too far in the future
(currently 30 minutes). If dirservs don't do this:
0) Today is January 1, 2000.
1) A very skewed server publishes descriptor X with a declared
publication time of August 1, 2000.
2) The directory includes X.
3) Because of certificate lifetime issues, nobody can use the
skewed server.
4) The server fixes its skew, and goes to republish a new descriptor Y
with publication time of January 1, 2000.
5) But because the directory already has a "more recent" descriptor X,
it rejects descriptor "Y" as superseded!
This patch should make step 2 go away.
svn:r658
| Nick Mathewson | 2003-10-22 |
| * | move closer to being able to reload config on HUP•••rename APPort to SocksPort
introduce new tor_free() macro
svn:r642
| Roger Dingledine | 2003-10-21 |
| * | fix two more memory problems•••one remains :)
svn:r621
| Roger Dingledine | 2003-10-18 |
| * | put a blank line in the directory, before the first router•••this makes it easier to read (at least for me)
svn:r613
| Roger Dingledine | 2003-10-17 |
| * | change WARNING to WARN•••and fix a few typos
svn:r571
| Roger Dingledine | 2003-10-10 |
| * | wrap strdup; prefer time() to gettimeofday()•••svn:r538
| Roger Dingledine | 2003-10-04 |
| * | Move dirserv/routers code out of main.c•••svn:r527
| Nick Mathewson | 2003-10-01 |
| * | make sure router descriptor doesnt eat the directory-signature•••svn:r516
| Nick Mathewson | 2003-09-30 |
| * | Bugfixes in directory code:•••Improve debugging output on fingerprint checking.
Make sure to add our own fingerprint to the fingerprint list _before_
adding our own descriptor, or else we'll reject ourself.
Don't call a directory invalid just because we have a newer descriptor
for some router.
Use router_get_dir_hash to generate hashes for signed directories.
Make sure we add our own descriptor successfully.
Don't fall-through on failed base64-endode.
svn:r514
| Nick Mathewson | 2003-09-30 |
| * | getting closer to having dirserv working•••we now add our own descriptor to the descriptor list
and we rebuild the directory (and dump to disk) after receiving a POST
svn:r509
| Roger Dingledine | 2003-09-30 |
| * | bugfixes and features: closer to making dirserv work•••fix a variety of seg faults
don't try to list OPs in running-routers
write cached-directory to disk when rebuilding the dir
on boot, dirservers load approved-routers file
on boot, dirservers load cached directory file
svn:r508
| Roger Dingledine | 2003-09-29 |
| * | more cleanup and rearranging•••still not finished integrating new dirserv stuff
svn:r507
| Roger Dingledine | 2003-09-29 |
| * | fix two new segfaults•••svn:r506
| Roger Dingledine | 2003-09-28 |
| * | Write necessary backends for online directory generation. I think.•••svn:r503
| Nick Mathewson | 2003-09-27 |