aboutsummaryrefslogtreecommitdiff
path: root/src/or
Commit message (Collapse)AuthorAge
* change when circuits are built and expiredRoger Dingledine2003-11-16
| | | | | | | not quite happy with it yet svn:r817
* bugfix: if you recognize a relay cell, don't also pass it on.Roger Dingledine2003-11-16
| | | | svn:r816
* dump exit policies correctly to descriptorRoger Dingledine2003-11-16
| | | | svn:r815
* initial patches on patchesRoger Dingledine2003-11-16
| | | | svn:r814
* Finish implementing the rest of the exitpolicy stuff, except for ↵Nick Mathewson2003-11-16
| | | | | | automatically starting circuit builds. svn:r813
* Improved exit policy syntax; basic client-side DNS caching.Nick Mathewson2003-11-14
| | | | | | | | | | | | | | | | | | | | - Exit policies now support bitmasks (18.0.0.0/255.0.0.0) and bitcounts 18.0.0.0/8. Policies are parsed on startup, not when comparing to them. - desired_path_len is now part of an opaque cpath_build_state_t structure. - END_REASON_EXITPOLICY cells no longer include a port. - RELAY_COMMAND_CONNECTED cells now include the IP address we've connected to. - connection_edge now has a client_dns cache to remember resolved addresses. It gets populated by RELAY_COMMAND_CONNECTED cells and END_REASON_EXITPOLICY cells. It gets used by connection_ap_handshake_send_begin. We don't compare it to exit policies yet. svn:r812
* commencing the bughuntRoger Dingledine2003-11-14
| | | | svn:r811
* bump default pathlen to 3; clean up surrounding codeRoger Dingledine2003-11-13
| | | | svn:r810
* let getconfig survive repeated calls. now we call it again when we hup.Roger Dingledine2003-11-13
| | | | | | | | change RecommendedVersions into a config option, so dirservers can hup for a new one svn:r809
* warn on startup that we don't provide anonymityRoger Dingledine2003-11-13
| | | | | | | make exit dns cache entries last 15 minutes svn:r807
* lay groundwork for EntryNodes and ExitNodesRoger Dingledine2003-11-12
| | | | svn:r805
* make dir parsing robust to invalid but well-formed descriptorsRoger Dingledine2003-11-12
| | | | svn:r800
* connection_ap_handshake_send_begin always succeedsRoger Dingledine2003-11-12
| | | | svn:r798
* Make crypto_pseudo_rand* never fail.Nick Mathewson2003-11-12
| | | | svn:r797
* Restore erroneously removed assertNick Mathewson2003-11-12
| | | | svn:r796
* Fix thinko: Failure and success are different things.Nick Mathewson2003-11-12
| | | | svn:r795
* Remove dead codeNick Mathewson2003-11-12
| | | | svn:r794
* Compute paths as we build them.Nick Mathewson2003-11-12
| | | | svn:r793
* Refactor onion_generate_cpath to build cpaths one hop at a time. ThisNick Mathewson2003-11-12
| | | | | | | | | | | is a the first step in computing hops one step at a time. Next, we move the responsibility for calling onion_extend_cpath into circuit.c (Later, we may want to special-case onion_extend_cpath to treat entry and exit routers differently.) svn:r792
* point out bugRoger Dingledine2003-11-11
| | | | svn:r791
* more cleanups and bugfixRoger Dingledine2003-11-11
| | | | svn:r790
* leave conn->socks_request around after the beginRoger Dingledine2003-11-11
| | | | | | | that way we can reuse it if we need to try another begin later svn:r788
* conn->socks_version is obsoleteRoger Dingledine2003-11-11
| | | | svn:r787
* respond to nick's questionsRoger Dingledine2003-11-11
| | | | svn:r786
* Rename aci to circ_id throughout.Nick Mathewson2003-11-11
| | | | svn:r784
* Make AP connections wait for a circuit if none exists.Nick Mathewson2003-11-11
| | | | | | | | | | | | | Also: - Refactor socks request into a separate struct - Add a separate 'waiting for circuit' state to AP connections between 'waiting for socks' and 'open'. Arma: can you check out the XXX's I've added to connection_edge? I may be mishandling some async and close logic. svn:r783
* client now survives going offline betterRoger Dingledine2003-11-10
| | | | | | | | | fix badness in usage() if neither socksport nor orrport is defined, quit obsolete connection_flush_buf() svn:r780
* Check in a working cross-platform timegmNick Mathewson2003-11-10
| | | | svn:r779
* Add lots of logging to dns.c; change behavior of often-failing assertionNick Mathewson2003-11-08
| | | | svn:r778
* add DirBindAddress, parse the BindAddress's when you bindRoger Dingledine2003-10-25
| | | | | | | | | exit if bind fails add usage printfs rearrange config options for readability svn:r674
* Clock skew fixes.Nick Mathewson2003-10-22
| | | | | | | | | | | | | | | | | | | | | | | | | | Allow some slop (currently 3 minutes) when checking certificate validity. Change certificate lifetime from 1 year to 2 days. Since we regenerate regularly (we regenerate regularly, right??), this shouldn't be a problem. Have directories reject descriptors published too far in the future (currently 30 minutes). If dirservs don't do this: 0) Today is January 1, 2000. 1) A very skewed server publishes descriptor X with a declared publication time of August 1, 2000. 2) The directory includes X. 3) Because of certificate lifetime issues, nobody can use the skewed server. 4) The server fixes its skew, and goes to republish a new descriptor Y with publication time of January 1, 2000. 5) But because the directory already has a "more recent" descriptor X, it rejects descriptor "Y" as superseded! This patch should make step 2 go away. svn:r658
* - fixed a bug in the id switching code -- setgid has to happen beforeSteven Hazel2003-10-22
| | | | | | | | | | | | | | | setuid, because after we setuid we don't have the priviledges we need to setgid anymore, duh. merged switch_user() and switch_group() into switch_id(), since that code has to be wound together. - return -1 from switch_id() if it's not defined to do anything else. - moved daemoinize(), write_pidfile(), and switch_id() from main.c to util.c svn:r656
* play with connection_edge_send_commandRoger Dingledine2003-10-22
| | | | | | | maybe more robust now svn:r655
* make end relay cells have payloadsRoger Dingledine2003-10-22
| | | | | | | move default exit policy into config files svn:r653
* added User and Group options -- if you set them, tor will try toSteven Hazel2003-10-22
| | | | | | | | | | | | | | | setuid and setgid respectively, and die if it can't. (If the User option is set, tor will setgid to the user's gid as well.) This happens after the pidfile is created, so that in cases where tor needs to be root to work with the pidfile, it will at least be able to create it, although it won't be able to delete it. That sucks, but it's somewhat better than not being able to create the pidfile in the first place. svn:r652
* move closer to being able to reload config on HUPRoger Dingledine2003-10-21
| | | | | | | | rename APPort to SocksPort introduce new tor_free() macro svn:r642
* send the end cell when we realize we're going to end,Roger Dingledine2003-10-21
| | | | | | | | | | | | | | | not when we're closing the stream. this lets us put a payload in the end cell if we want to, to describe why we're closing the stream. there are still some places where we don't send the end cell immediately. i need to track them down. but it's a low priority, since i've made it send the end cell when we close the stream if we haven't already sent it. svn:r640
* include our own timegm() impl, since it's not portableRoger Dingledine2003-10-20
| | | | svn:r635
* a skeletal print_usage() functionRoger Dingledine2003-10-20
| | | | svn:r634
* move to 0.0.2pre13Roger Dingledine2003-10-19
| | | | svn:r631
* put small buffers back in placeRoger Dingledine2003-10-19
| | | | svn:r629
* Example code to get nickname from certNick Mathewson2003-10-19
| | | | svn:r628
* another minor memory leakRoger Dingledine2003-10-18
| | | | | | | make dnsconn->address reflect what it's currently resolving svn:r624
* no more memory leaksRoger Dingledine2003-10-18
| | | | | | | | when you run it under normal operation for as many as three minutes svn:r622
* fix two more memory problemsRoger Dingledine2003-10-18
| | | | | | | one remains :) svn:r621
* clean up memory leaks, confusionsRoger Dingledine2003-10-18
| | | | | | | still one memory leak remaining here. svn:r620
* log to stdout while parsing config,Roger Dingledine2003-10-18
| | | | | | | otherwise we log to nothing and give no feedback! svn:r617
* put a blank line in the directory, before the first routerRoger Dingledine2003-10-17
| | | | | | | this makes it easier to read (at least for me) svn:r613
* try to make cvs more stable for now. need to test this more in a bit.Roger Dingledine2003-10-17
| | | | svn:r612
* reload the fingerprints file on HUPRoger Dingledine2003-10-17
| | | | svn:r611