| Commit message (Collapse) | Author | Age |
|
|
|
| |
svn:r787
|
|
|
|
| |
svn:r786
|
|
|
|
| |
svn:r784
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Also:
- Refactor socks request into a separate struct
- Add a separate 'waiting for circuit' state to AP connections
between 'waiting for socks' and 'open'.
Arma: can you check out the XXX's I've added to connection_edge? I may
be mishandling some async and close logic.
svn:r783
|
|
|
|
|
|
|
|
|
| |
fix badness in usage()
if neither socksport nor orrport is defined, quit
obsolete connection_flush_buf()
svn:r780
|
|
|
|
| |
svn:r779
|
|
|
|
| |
svn:r778
|
|
|
|
|
|
|
|
|
| |
exit if bind fails
add usage printfs
rearrange config options for readability
svn:r674
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Allow some slop (currently 3 minutes) when checking certificate validity.
Change certificate lifetime from 1 year to 2 days. Since we
regenerate regularly (we regenerate regularly, right??), this
shouldn't be a problem.
Have directories reject descriptors published too far in the future
(currently 30 minutes). If dirservs don't do this:
0) Today is January 1, 2000.
1) A very skewed server publishes descriptor X with a declared
publication time of August 1, 2000.
2) The directory includes X.
3) Because of certificate lifetime issues, nobody can use the
skewed server.
4) The server fixes its skew, and goes to republish a new descriptor Y
with publication time of January 1, 2000.
5) But because the directory already has a "more recent" descriptor X,
it rejects descriptor "Y" as superseded!
This patch should make step 2 go away.
svn:r658
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
setuid, because after we setuid we don't have the priviledges we
need to setgid anymore, duh. merged switch_user() and
switch_group() into switch_id(), since that code has to be wound
together.
- return -1 from switch_id() if it's not defined to do anything else.
- moved daemoinize(), write_pidfile(), and switch_id() from main.c to
util.c
svn:r656
|
|
|
|
|
|
|
| |
maybe more robust now
svn:r655
|
|
|
|
|
|
|
| |
move default exit policy into config files
svn:r653
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
setuid and setgid respectively, and die if it can't.
(If the User option is set, tor will setgid to the user's gid as well.)
This happens after the pidfile is created, so that in cases where tor
needs to be root to work with the pidfile, it will at least be able to
create it, although it won't be able to delete it. That sucks, but
it's somewhat better than not being able to create the pidfile in the
first place.
svn:r652
|
|
|
|
|
|
|
|
| |
rename APPort to SocksPort
introduce new tor_free() macro
svn:r642
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
not when we're closing the stream.
this lets us put a payload in the end cell if we want to,
to describe why we're closing the stream.
there are still some places where we don't send the end cell
immediately. i need to track them down. but it's a low priority,
since i've made it send the end cell when we close the stream if
we haven't already sent it.
svn:r640
|
|
|
|
| |
svn:r635
|
|
|
|
| |
svn:r634
|
|
|
|
| |
svn:r631
|
|
|
|
| |
svn:r629
|
|
|
|
| |
svn:r628
|
|
|
|
|
|
|
| |
make dnsconn->address reflect what it's currently resolving
svn:r624
|
|
|
|
|
|
|
|
| |
when you run it under normal operation
for as many as three minutes
svn:r622
|
|
|
|
|
|
|
| |
one remains :)
svn:r621
|
|
|
|
|
|
|
| |
still one memory leak remaining here.
svn:r620
|
|
|
|
|
|
|
| |
otherwise we log to nothing and give no feedback!
svn:r617
|
|
|
|
|
|
|
| |
this makes it easier to read (at least for me)
svn:r613
|
|
|
|
| |
svn:r612
|
|
|
|
| |
svn:r611
|
|
|
|
| |
svn:r610
|
|
|
|
| |
svn:r601
|
|
|
|
| |
svn:r600
|
|
|
|
|
|
|
| |
maybe this will mean fewer dumb errors
svn:r599
|
|
|
|
| |
svn:r597
|
|
|
|
|
|
|
|
|
|
|
|
| |
If DebugLogFile is specified, log to it at -l debug
If LogFile is specified, log to it at the -l from the commandline
(default info)
If no LogFile *and* not a Daemon, then log to stdout.
Make conn->s = -1 by default (this might break things)
When kill -USR1, prefer to log at INFO, but make sure they always see it.
svn:r596
|
|
|
|
| |
svn:r595
|
|
|
|
| |
svn:r593
|
|
|
|
| |
svn:r592
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
correctly based on how configure was run
- cause tor to guess the location of torrc more intelligently
- cause cause src/config/torrc and src/conf/sample-server-torrc to be
generated with contents that are correct for the way configure was
run
- cause "make install" to put torrc, sample-server-torrc, and
dirservers somewhere intelligent
svn:r587
|
|
|
|
|
|
|
| |
and make listener connections not have bufs
svn:r584
|
|
|
|
| |
svn:r583
|
|
|
|
|
|
|
| |
cvs compiles again
svn:r581
|
|
|
|
| |
svn:r580
|
|
|
|
|
|
|
| |
(mainly doc and log changes)
svn:r579
|
|
|
|
|
|
|
| |
(generally happens when people use tor as an httpd proxy)
svn:r576
|
|
|
|
|
|
|
| |
and fix a few typos
svn:r571
|
|
|
|
| |
svn:r569
|
|
|
|
|
|
|
| |
(patch courtesy aaron turner)
svn:r565
|
|
|
|
| |
svn:r564
|
|
|
|
| |
svn:r560
|
|
|
|
|
|
|
| |
plus make exit policy comparisons not always reject
svn:r559
|