Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | and another instance where i was trying to be too sneaky | Roger Dingledine | 2005-11-19 |
| | | | | svn:r5433 | ||
* | actually listen when we try to route our dir connection via tor. | Roger Dingledine | 2005-11-19 |
| | | | | svn:r5432 | ||
* | Start obeying our firewall options more rigorously: | Roger Dingledine | 2005-11-19 |
| | | | | | | | | | | | | - If we can't get to a dirserver directly, try going via Tor. - Don't ever try to connect (as a client) to a place our firewall options forbid. - If we specify a proxy and also firewall options, obey the firewall options even when we're using the proxy: some proxies can only proxy to certain destinations. svn:r5431 | ||
* | Recover better from TCP connections to Tor servers that are broken but | Roger Dingledine | 2005-11-19 |
| | | | | | | | | | | | | | | | | don't tell you (it happens!); and rotate TLS connections once a week. 1) If an OR conn becomes more than a week old, make it obsolete. 2) If it's obsolete and empty, kill it. 3) When an OR makes a second connection to you, allow it. 4) If we want to send a new create cell, but the best conn we've got is obsolete, and the router is 0.1.1.9-alpha-cvs or later, ask for a new conn instead. 5) When we time out on circuit building on the first hop, make that connection obsolete. svn:r5429 | ||
* | misc cleanups | Roger Dingledine | 2005-11-19 |
| | | | | svn:r5428 | ||
* | Bugfix: it looks like some middleman circuits were spending the | Roger Dingledine | 2005-11-19 |
| | | | | | | | | | | | | | first few moments of their existence in CIRCUIT_STATE_OPEN, then when Alice sent an extend request for a Tor that they're not connected to, they switched to CIRCUIT_STATE_OR_WAIT and spent the rest of their sorry little lives in that state, even when the connection was established and they were shuttling relay cells back and forth. And I'm not going to backport this (yet), because somehow it worked! svn:r5427 | ||
* | another case (i think) of redundant code. | Roger Dingledine | 2005-11-19 |
| | | | | svn:r5426 | ||
* | remove some redundant (and misleading) code | Roger Dingledine | 2005-11-19 |
| | | | | svn:r5425 | ||
* | 15*60 is 15 minutes, not 5 | Peter Palfrader | 2005-11-18 |
| | | | | svn:r5424 | ||
* | Remove ip address change flapping detection. It is not really needed and I ↵ | Peter Palfrader | 2005-11-18 |
| | | | | | | do not think it works quite right. svn:r5423 | ||
* | if it's not less than three does that mean it's more than two? | Roger Dingledine | 2005-11-18 |
| | | | | svn:r5422 | ||
* | and code the part where redirectstream can take a port. | Roger Dingledine | 2005-11-18 |
| | | | | svn:r5421 | ||
* | Leave options->DirServers alone -- if the user didn't specify any, | Roger Dingledine | 2005-11-18 |
| | | | | | | | | | | just add the default ones directly to the trusted dirserver list. This fixes a bug where people running controllers would setconf or the equivalent, and Tor would start yelling at them about setting their own DirServer lines. svn:r5418 | ||
* | and another overly common log entry | Roger Dingledine | 2005-11-18 |
| | | | | svn:r5417 | ||
* | and another one | Roger Dingledine | 2005-11-17 |
| | | | | svn:r5416 | ||
* | comment out some really popular log lines | Roger Dingledine | 2005-11-17 |
| | | | | svn:r5415 | ||
* | and now we actually do it, too. | Roger Dingledine | 2005-11-17 |
| | | | | svn:r5414 | ||
* | when you type 'getinfo' with no arguments, it doesn't give you | Roger Dingledine | 2005-11-17 |
| | | | | | | | | | | | | any answer at all. this is clearly a bug. the more interesting bug is whether things like setconf, getconf, and so on should return 250 OK if you give them no arguments. should we have a new "you didn't ask me anything" response code, or just leave it as is? svn:r5412 | ||
* | we used to kill the circuit when we receive a relay command we | Roger Dingledine | 2005-11-17 |
| | | | | | | | | | don't recognize. now we just drop it. perhaps this will make us more forward-compatible? or perhaps it will bite us? one day we will find out. svn:r5405 | ||
* | help the term "OP" become obsolete | Roger Dingledine | 2005-11-17 |
| | | | | svn:r5403 | ||
* | bugfix: the controller doesn't mention it's a .onion if it is. | Roger Dingledine | 2005-11-16 |
| | | | | svn:r5400 | ||
* | Add a new config option TestSocks so people can see if their | Roger Dingledine | 2005-11-16 |
| | | | | | | | | | applications are using socks4, socks4a, socks5-with-ip, or socks5-with-hostname. This way they don't have to keep mucking with tcpdump and wondering if something got cached somewhere. svn:r5399 | ||
* | Try to build with OpenSSL 0.9.6. Lets pay attention to see if anybody complains. | Nick Mathewson | 2005-11-16 |
| | | | | svn:r5398 | ||
* | Verify that router fingerprint lines match identity keys. (We dont use them, ↵ | Nick Mathewson | 2005-11-15 |
| | | | | | | but others might.) svn:r5389 | ||
* | another case where the poor server operator doesn't need to | Roger Dingledine | 2005-11-15 |
| | | | | | | | hear about lexi's bugs. svn:r5388 | ||
* | bump to 0.1.1.9-alpha-cvs | Roger Dingledine | 2005-11-15 |
| | | | | svn:r5387 | ||
* | make it even more clear that i didn't screw up the logic | Roger Dingledine | 2005-11-15 |
| | | | | svn:r5378 | ||
* | fix logic error: not unnamed is good. | Roger Dingledine | 2005-11-15 |
| | | | | svn:r5377 | ||
* | Loops without an increment step can suck, even on windows. | Nick Mathewson | 2005-11-15 |
| | | | | svn:r5376 | ||
* | Make new logging stuff work on windows; fix a couple of windows typos. | Nick Mathewson | 2005-11-15 |
| | | | | svn:r5375 | ||
* | bump to 0.1.1.9-alpha | Roger Dingledine | 2005-11-15 |
| | | | | svn:r5374 | ||
* | Hm; looks like the callback business was unnecessary, since DHparams_dup() ↵ | Nick Mathewson | 2005-11-14 |
| | | | | | | copies dh->length. svn:r5372 | ||
* | Use a callback to set our DH parameters; set SSL_OP_SINGLE_DH_USE. | Nick Mathewson | 2005-11-14 |
| | | | | svn:r5371 | ||
* | Oops. It looks like there *was* an easy way to make openssl do what we wanted. | Nick Mathewson | 2005-11-14 |
| | | | | svn:r5370 | ||
* | Fix number in error message | Nick Mathewson | 2005-11-14 |
| | | | | svn:r5369 | ||
* | shorten more of the startup log messages | Roger Dingledine | 2005-11-14 |
| | | | | svn:r5368 | ||
* | when a stream times out, provide less (but better) explanation | Roger Dingledine | 2005-11-14 |
| | | | | | | | | of what happened. don't bother printing the path, since i don't know of any person who has gotten anything useful out of that. svn:r5367 | ||
* | When logging via syslog, include the pid whenever we provide | Roger Dingledine | 2005-11-13 |
| | | | | | | | a log entry. Suggested by Todd Fries. svn:r5366 | ||
* | We were refusing to start if you define SocksListenAddress | Roger Dingledine | 2005-11-11 |
| | | | | | | | | but define SocksPort to be 0. But this is a standard configuration! So don't fail. svn:r5361 | ||
* | correct nick's comment | Roger Dingledine | 2005-11-11 |
| | | | | svn:r5360 | ||
* | Note that much of check_dh_key is voodoo; make x in DH be only 320 bits for ↵ | Nick Mathewson | 2005-11-11 |
| | | | | | | DH speed improvement: this wants auditing. [We have blessing from Ian on this.] (Note that DH in SSL is not yet affected.) svn:r5359 | ||
* | speed up the lookup-by-circid-orconn now that it seems that | Roger Dingledine | 2005-11-11 |
| | | | | | | | our code works. svn:r5358 | ||
* | when we were cannibalizing a circuit with a particular exit | Roger Dingledine | 2005-11-11 |
| | | | | | | | | node in mind, we weren't checking to see if that exit node was already present earlier in the circuit. oops. svn:r5357 | ||
* | fix function comment | Roger Dingledine | 2005-11-11 |
| | | | | svn:r5356 | ||
* | stop discouraging the old *BindAddress config options. we will | Roger Dingledine | 2005-11-11 |
| | | | | | | | just confuse our users when they upgrade. svn:r5354 | ||
* | simplify a log entry | Roger Dingledine | 2005-11-11 |
| | | | | svn:r5353 | ||
* | fix a harmless warn and mark two points where we should | Roger Dingledine | 2005-11-11 |
| | | | | | | | maybe change our approach. svn:r5352 | ||
* | If we stop knowing about a dirserver between request and answer, do not die. | Nick Mathewson | 2005-11-08 |
| | | | | svn:r5351 | ||
* | Tor26's IP has changed to 86.59.21.38 | Peter Palfrader | 2005-11-05 |
| | | | | svn:r5350 | ||
* | On directory servers, old_routers was wasting hundreds of bytes per ↵ | Nick Mathewson | 2005-11-05 |
| | | | | | | superseded router descriptor. Roll the signed descriptor info and identifying info into a cache_info struct, and use only that for old_routers. svn:r5349 |