aboutsummaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAge
* and another instance where i was trying to be too sneakyRoger Dingledine2005-11-19
| | | | svn:r5433
* actually listen when we try to route our dir connection via tor.Roger Dingledine2005-11-19
| | | | svn:r5432
* Start obeying our firewall options more rigorously:Roger Dingledine2005-11-19
| | | | | | | | | | | | - If we can't get to a dirserver directly, try going via Tor. - Don't ever try to connect (as a client) to a place our firewall options forbid. - If we specify a proxy and also firewall options, obey the firewall options even when we're using the proxy: some proxies can only proxy to certain destinations. svn:r5431
* Recover better from TCP connections to Tor servers that are broken butRoger Dingledine2005-11-19
| | | | | | | | | | | | | | | | don't tell you (it happens!); and rotate TLS connections once a week. 1) If an OR conn becomes more than a week old, make it obsolete. 2) If it's obsolete and empty, kill it. 3) When an OR makes a second connection to you, allow it. 4) If we want to send a new create cell, but the best conn we've got is obsolete, and the router is 0.1.1.9-alpha-cvs or later, ask for a new conn instead. 5) When we time out on circuit building on the first hop, make that connection obsolete. svn:r5429
* misc cleanupsRoger Dingledine2005-11-19
| | | | svn:r5428
* Bugfix: it looks like some middleman circuits were spending theRoger Dingledine2005-11-19
| | | | | | | | | | | | | first few moments of their existence in CIRCUIT_STATE_OPEN, then when Alice sent an extend request for a Tor that they're not connected to, they switched to CIRCUIT_STATE_OR_WAIT and spent the rest of their sorry little lives in that state, even when the connection was established and they were shuttling relay cells back and forth. And I'm not going to backport this (yet), because somehow it worked! svn:r5427
* another case (i think) of redundant code.Roger Dingledine2005-11-19
| | | | svn:r5426
* remove some redundant (and misleading) codeRoger Dingledine2005-11-19
| | | | svn:r5425
* 15*60 is 15 minutes, not 5Peter Palfrader2005-11-18
| | | | svn:r5424
* Remove ip address change flapping detection. It is not really needed and I ↵Peter Palfrader2005-11-18
| | | | | | do not think it works quite right. svn:r5423
* if it's not less than three does that mean it's more than two?Roger Dingledine2005-11-18
| | | | svn:r5422
* and code the part where redirectstream can take a port.Roger Dingledine2005-11-18
| | | | svn:r5421
* Leave options->DirServers alone -- if the user didn't specify any,Roger Dingledine2005-11-18
| | | | | | | | | | just add the default ones directly to the trusted dirserver list. This fixes a bug where people running controllers would setconf or the equivalent, and Tor would start yelling at them about setting their own DirServer lines. svn:r5418
* and another overly common log entryRoger Dingledine2005-11-18
| | | | svn:r5417
* and another oneRoger Dingledine2005-11-17
| | | | svn:r5416
* comment out some really popular log linesRoger Dingledine2005-11-17
| | | | svn:r5415
* and now we actually do it, too.Roger Dingledine2005-11-17
| | | | svn:r5414
* when you type 'getinfo' with no arguments, it doesn't give youRoger Dingledine2005-11-17
| | | | | | | | | | | | any answer at all. this is clearly a bug. the more interesting bug is whether things like setconf, getconf, and so on should return 250 OK if you give them no arguments. should we have a new "you didn't ask me anything" response code, or just leave it as is? svn:r5412
* we used to kill the circuit when we receive a relay command weRoger Dingledine2005-11-17
| | | | | | | | | don't recognize. now we just drop it. perhaps this will make us more forward-compatible? or perhaps it will bite us? one day we will find out. svn:r5405
* help the term "OP" become obsoleteRoger Dingledine2005-11-17
| | | | svn:r5403
* bugfix: the controller doesn't mention it's a .onion if it is.Roger Dingledine2005-11-16
| | | | svn:r5400
* Add a new config option TestSocks so people can see if theirRoger Dingledine2005-11-16
| | | | | | | | | applications are using socks4, socks4a, socks5-with-ip, or socks5-with-hostname. This way they don't have to keep mucking with tcpdump and wondering if something got cached somewhere. svn:r5399
* Try to build with OpenSSL 0.9.6. Lets pay attention to see if anybody complains.Nick Mathewson2005-11-16
| | | | svn:r5398
* Verify that router fingerprint lines match identity keys. (We dont use them, ↵Nick Mathewson2005-11-15
| | | | | | but others might.) svn:r5389
* another case where the poor server operator doesn't need toRoger Dingledine2005-11-15
| | | | | | | hear about lexi's bugs. svn:r5388
* bump to 0.1.1.9-alpha-cvsRoger Dingledine2005-11-15
| | | | svn:r5387
* make it even more clear that i didn't screw up the logicRoger Dingledine2005-11-15
| | | | svn:r5378
* fix logic error: not unnamed is good.Roger Dingledine2005-11-15
| | | | svn:r5377
* Loops without an increment step can suck, even on windows.Nick Mathewson2005-11-15
| | | | svn:r5376
* Make new logging stuff work on windows; fix a couple of windows typos.Nick Mathewson2005-11-15
| | | | svn:r5375
* bump to 0.1.1.9-alphaRoger Dingledine2005-11-15
| | | | svn:r5374
* Hm; looks like the callback business was unnecessary, since DHparams_dup() ↵Nick Mathewson2005-11-14
| | | | | | copies dh->length. svn:r5372
* Use a callback to set our DH parameters; set SSL_OP_SINGLE_DH_USE.Nick Mathewson2005-11-14
| | | | svn:r5371
* Oops. It looks like there *was* an easy way to make openssl do what we wanted.Nick Mathewson2005-11-14
| | | | svn:r5370
* Fix number in error messageNick Mathewson2005-11-14
| | | | svn:r5369
* shorten more of the startup log messagesRoger Dingledine2005-11-14
| | | | svn:r5368
* when a stream times out, provide less (but better) explanationRoger Dingledine2005-11-14
| | | | | | | | of what happened. don't bother printing the path, since i don't know of any person who has gotten anything useful out of that. svn:r5367
* When logging via syslog, include the pid whenever we provideRoger Dingledine2005-11-13
| | | | | | | a log entry. Suggested by Todd Fries. svn:r5366
* We were refusing to start if you define SocksListenAddressRoger Dingledine2005-11-11
| | | | | | | | but define SocksPort to be 0. But this is a standard configuration! So don't fail. svn:r5361
* correct nick's commentRoger Dingledine2005-11-11
| | | | svn:r5360
* Note that much of check_dh_key is voodoo; make x in DH be only 320 bits for ↵Nick Mathewson2005-11-11
| | | | | | DH speed improvement: this wants auditing. [We have blessing from Ian on this.] (Note that DH in SSL is not yet affected.) svn:r5359
* speed up the lookup-by-circid-orconn now that it seems thatRoger Dingledine2005-11-11
| | | | | | | our code works. svn:r5358
* when we were cannibalizing a circuit with a particular exitRoger Dingledine2005-11-11
| | | | | | | | node in mind, we weren't checking to see if that exit node was already present earlier in the circuit. oops. svn:r5357
* fix function commentRoger Dingledine2005-11-11
| | | | svn:r5356
* stop discouraging the old *BindAddress config options. we willRoger Dingledine2005-11-11
| | | | | | | just confuse our users when they upgrade. svn:r5354
* simplify a log entryRoger Dingledine2005-11-11
| | | | svn:r5353
* fix a harmless warn and mark two points where we shouldRoger Dingledine2005-11-11
| | | | | | | maybe change our approach. svn:r5352
* If we stop knowing about a dirserver between request and answer, do not die.Nick Mathewson2005-11-08
| | | | svn:r5351
* Tor26's IP has changed to 86.59.21.38Peter Palfrader2005-11-05
| | | | svn:r5350
* On directory servers, old_routers was wasting hundreds of bytes per ↵Nick Mathewson2005-11-05
| | | | | | superseded router descriptor. Roll the signed descriptor info and identifying info into a cache_info struct, and use only that for old_routers. svn:r5349