| Commit message (Collapse) | Author | Age |
|---|
| |
|
|
|
|
|
| |
Make VERSIONS variable-length.
svn:r12391
|
| |
|
|
|
|
|
| |
Initial code for variable-length cells. CERT and VERSIONS need to use them.
svn:r12390
|
| |
|
|
|
|
|
| |
Patch from karsten: tidy up v2 hidden service directory logic, and fix a few bugs.
svn:r12388
|
| |
|
|
|
|
|
| |
Send and parse link_auth cells properly.
svn:r12386
|
| |
|
|
|
|
|
| |
Function to process link auth cells; stub function for cert cell processing
svn:r12385
|
| |
|
|
|
|
|
| |
Remember X509 certificates in the context. Store peer/self certificate digests in handshake state.
svn:r12382
|
| |
|
|
|
|
|
| |
Code to remember client_random and server_random values, and to compute hmac using TLS master secret.
svn:r12381
|
| |
|
|
|
|
|
| |
Split handshake state into its own structure. Revise versions and netinfo code to use this structure.
svn:r12380
|
| |
|
|
|
|
|
|
| |
they ask for is a 404 from the bridge authority, they now fall
back to trying the bridge directly.
svn:r12368
|
| |
|
|
|
|
|
| |
Try to make hidden service directory lookup functions a bit more efficient: go for fewer O(n) operations, and look at the consensus rather than the routerinfo list.
svn:r12361
|
| |
|
|
|
|
|
| |
Better log messages for "not enough to build a circuit" message.
svn:r12324
|
| |
|
|
|
|
|
| |
More tweaks from karsten, with some cleanup and commentary.
svn:r12319
|
| |
|
|
|
|
|
| |
Learn new addresses for authorities from their certificates.
svn:r12305
|
| |
|
|
|
|
|
| |
Clients download and cache new hidden descriptor format.
svn:r12302
|
| |
|
|
|
|
|
| |
A couple of small tweaks to karsten's latest patch, and note an issue with using a bitmap to represent a single int.
svn:r12300
|
| |
|
|
|
|
|
| |
Next patch from Karsten: rename some macros, tunnel dir connections, generate (and upload) multiple descriptors as appropriate.
svn:r12299
|
| |
|
|
|
|
|
| |
Implement (but do not enable) link connection version negotiation
svn:r12286
|
| |
|
|
|
|
|
| |
Implement lots of proposal 105. None of it is enabled yet.
svn:r12285
|
| |
|
|
|
|
|
| |
Tidy last patch a bit.
svn:r12273
|
| |
|
|
|
|
|
| |
Patch from Karsten: Code to act as (and use) v2 hidden service directories.
svn:r12272
|
| |
|
|
|
|
|
| |
Implement a FallbackNetworkstatusFile (default to $prefix/share/tor/fallback-consensus) to that we know about lots of directory servers and routers when we start up the first time.
svn:r12259
|
| |
|
|
|
|
|
| |
Implement if-modified-since for consensus networkstatuses so that we do not download duplicates needlessly.
svn:r12258
|
| |
|
|
|
|
|
| |
Tidy v2 hidden service descriptor format code: fix memory leaks, fix reference problems, note magic numbers, note questions, remove redundant checks, remove a possible stack smashing bug when encoding a descriptor with no protocols supported.
svn:r12255
|
| |
|
|
|
|
|
| |
Patch from Karsten Loesing: encode and parse v2 rendezvous descriptors.
svn:r12254
|
| |
|
|
|
|
|
| |
Clean up a couple of comments from r12244.
svn:r12253
|
| |
|
|
|
|
|
|
|
|
|
|
| |
edge_connection_t: want_onehop if it must attach to a circuit with
only one hop (e.g. for the current tunnelled connections that use
begin_dir), and use_begindir if we mean to use a BEGIN_DIR relay
command to establish the stream rather than the normal BEGIN. Now
we can make anonymized begin_dir connections for (e.g.) more secure
hidden service posting and fetching.
svn:r12244
|
| |
|
|
|
|
|
| |
Tolerate a slightly dead consensus when deciding whether to download descriptors and build circuits.
svn:r12167
|
| |
|
|
|
|
|
| |
Allow multiple download schedules to exist. At the moment, we use one for consensus, and the other one for everything else.
svn:r12158
|
| |
|
|
|
|
|
| |
Refactor the arguments for router_pick_{directory_|trusteddir}server[_impl] so that they all take the same flags, and so that their flags have names. Fix their documentation too.
svn:r12157
|
| |
|
|
|
|
|
|
| |
it" errors to Tor servers that aren't online all the time. We're
supposed to tolerate these servers now.
svn:r12136
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
minutes, but writing the "valid-after" line in our vote based
on our configured V3AuthVotingInterval: so unless the intervals
matched up, we immediately rejected our own vote because it didn't
start at the voting interval that caused us to construct a vote.
This caused log entries like:
Oct 23 01:16:16.303 [notice] Choosing expected valid-after time
as 2007-10-23 05:30:00: consensus_set=0, interval=1800
...
Oct 23 01:20:01.203 [notice] Choosing valid-after time in vote as
2007-10-23 06:00:00: consensus_set=0, interval=3600
Oct 23 01:20:01.290 [warn] Rejecting vote with valid-after time of
2007-10-23 06:00:00; we were expecting 2007-10-23 05:30:00
Oct 23 01:20:01.291 [warn] Couldn't store my own vote! (I told
myself, 'Bad valid-after time'.)
Nick, you should look at this, as it's your design. :)
svn:r12129
|
| |
|
|
|
|
|
| |
Move functions into and out of dirvote.c so that it contains all the v3 authority functionality, and no non-authority functionality.
svn:r12107
|
| |
|
|
|
|
|
| |
Reattempt certificate downloads immediately on failure, as appropriate.
svn:r12106
|
| |
|
|
|
|
|
| |
When our directory status or our v3 authority status changes, reschedule operations as appropriate. (Fixes some xxxx020 items)
svn:r12102
|
| |
|
|
|
|
|
| |
More fixes for bad behavior when downloading extrainfos: do not download an ei if we lack the key to verify it, and do not download it if we already got it and found (weirdly) that it didn't match the corresponding server descriptor.
svn:r12071
|
| |
|
|
|
|
|
| |
Fix a nasty bug in DownloadExtraInfo implementation where we would discard, download, discard, download ad infinitum.
svn:r12069
|
| |
|
|
|
|
|
| |
Client-side implementation for proposal 122.
svn:r12051
|
| |
|
|
|
|
|
| |
Sort out that need_to_mirror is for routerstatuses in v2 networkstatuses only.
svn:r12050
|
| |
|
|
|
|
|
| |
Learn the difference between "mismatched vote digest" and "mismatched vote times": the latter is more informative.
svn:r12049
|
| |
|
|
|
|
|
| |
Encode address in certificates. Also, make it possible to create certs reusing an old key.
svn:r12046
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Remember the valid-until time of the most recent consensus that listed
a router, and (if we are a cache) never delete the routerdesc until
that conensus is expired. This is way easier than retaining multiple
consensuses. (Of course, the info isn't retained across restarts,
but that only affects a few caches at a time.)
svn:r12041
|
| |
|
|
|
|
|
| |
Stop incessant notices about when we think the expected valid-after time should be, if we are not an authority.
svn:r12022
|
| |
|
|
|
|
|
| |
Make unverified-consensus get removed when it is accepted or rejected. Make a new get_datadir_fname*() set of functions to eliminate the common code of "get the options, get the datadir, append some stuff".
svn:r12000
|
| |
|
|
|
|
|
| |
Implement v3 networkstatus client code. Remove v2 networkstatus client code, except as needed for caches to fetch and serve v2 networkstatues and the routers they list.
svn:r11957
|
| |
|
|
|
|
|
| |
Eventually delete the obsolete cached-routers and cached-routers.new files, so they don't sit around on disk forever.
svn:r11918
|
| |
|
|
|
|
|
| |
Start roughing out the functions that we'll use to replace the old ugly v2 networkstatus manipulation code".
svn:r11904
|
| |
|
|
|
|
|
| |
the +POSTDESCRIPTOR command.
svn:r11892
|
| |
|
|
| |
svn:r11890
|
| |
|
|
|
|
|
| |
Fix for the reported case of bug 438: check families as well as identities in circuit_find_to_cannibalize(). Code audit still pending. ;)
svn:r11886
|
| |
|
|
|
|
|
| |
Fix bug 451. This was a nasty bug, so let's fix it twice: first, by banning recursive calls to connection_handle_write from connection_flushed_some; and second, by not calling connection_finished_flushing() on a closed connection. Backport candidate.
svn:r11882
|