November 2012 - tor-commits - lists.torproject.org

[torspec/master] Document stream purposes. Fixes 7508.
by nickm＠torproject.org 23 Nov '12

23 Nov '12

commit e23a24a5c481805f1c8a4b4db04d7beee543f887 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 23 11:04:25 2012 -0500 Document stream purposes. Fixes 7508. --- control-spec.txt | 13 ++++++++++++- 1 files changed, 12 insertions(+), 1 deletions(-) diff --git a/control-spec.txt b/control-spec.txt index 5d12322..5574110 100644 --- a/control-spec.txt +++ b/control-spec.txt @@ -1432,7 +1432,18 @@ The "PURPOSE" field is provided only for NEW and NEWRESOLVE events, and only if extended events are enabled (see 3.19). Clients MUST accept - purposes not listed above. + purposes not listed above. The purposes above are defined as: + + "DIR_FETCH" -- This stream is generated internally to Tor for + fetching directory information. + "UPLOAD_DESC" -- Obsolete. + "DIR_UPLOAD" -- An internal stream for uploading information to + a directory authority. + "DIRPORT_TEST" -- A stream we're using to test our own directory + port to make sure it's reachable. + "DNS_REQUEST" -- A user-initiated DNS request. + "USER" -- This stream is handling user traffic, OR it's internal + to Tor, but it doesn't match one of the purposes above. 4.1.3. OR Connection status changed

1 0

[torspec/master] Explain algorithm field on directory-signature
by nickm＠torproject.org 23 Nov '12

23 Nov '12

commit 96427e8daa30e68d1b3cba13220fea84a4e8e842 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 23 10:51:18 2012 -0500 Explain algorithm field on directory-signature Fix for 7072 --- dir-spec.txt | 20 +++++++++++++++++++- 1 files changed, 19 insertions(+), 1 deletions(-) diff --git a/dir-spec.txt b/dir-spec.txt index 8e389c9..ca5434b 100644 --- a/dir-spec.txt +++ b/dir-spec.txt @@ -1532,7 +1532,8 @@ The signature contains the following item, which appears Exactly Once for a vote, and At Least Once for a consensus. - "directory-signature" SP identity SP signing-key-digest NL Signature + "directory-signature" [SP Algorithm] SP identity SP signing-key-digest + NL Signature This is a signature of the status document, with the initial item "network-status-version", and the signature item @@ -1543,6 +1544,20 @@ the signing authority, and "signing-key-digest" is the hex-encoded digest of the current authority signing key of the signing authority. + The Algorithm is one of "sha1" or "sha256" if it is present; + implementations MUST ignore directory-signature entries with an + unrecognized Algorithm. "sha1" is the default, if no Algorithm is + given. The algorithm describes how to compute the hash of the + document before signing it. + + "ns"-flavored consensus documents must contain only sha1 signatures. + Votes and microdescriptor documents may contain other signature + types. Note that only one signature from each authority should be + "counted" as meaning that the authority has signed the consensus. + + (Tor clients before 0.2.3.x did not understand the 'algorithm' + field.) + 3.4. Assigning flags in a vote (This section describes how directory authorities choose which status @@ -2101,6 +2116,9 @@ [*Before consensus method 13, this field was sometimes erroneously omitted.] + Additionally, a microdescriptor consensus MAY use the sha256 digest + algorithm for its signatures. + 3.7. Detached signatures Assuming full connectivity, every authority should compute and sign the

1 0

[tor/master] Minor documentation fix
by nickm＠torproject.org 23 Nov '12

23 Nov '12

commit 06703f84dfa47e841fdab01bf5cbc32053606656 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 23 10:51:11 2012 -0500 Minor documentation fix --- src/or/routerparse.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/or/routerparse.c b/src/or/routerparse.c index 82c062c..0ab99a0 100644 --- a/src/or/routerparse.c +++ b/src/or/routerparse.c @@ -4305,8 +4305,8 @@ router_get_hash_impl_helper(const char *s, size_t s_len, /** Compute the digest of the substring of s taken from the first * occurrence of start_str through the first instance of c after the - * first subsequent occurrence of end_str; store the 20-byte result in - * digest; return 0 on success. + * first subsequent occurrence of end_str; store the 20-byte or 32-byte + * result in digest; return 0 on success. * * If no such substring exists, return -1. */

1 0

[translation/vidalia_alpha_completed] Update translations for vidalia_alpha_completed
by translation＠torproject.org 23 Nov '12

23 Nov '12

commit a63bd87da101c57924a6f8084956d4dee3340ff3 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Nov 23 15:45:20 2012 +0000 Update translations for vidalia_alpha_completed --- es/vidalia_es.po | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) diff --git a/es/vidalia_es.po b/es/vidalia_es.po index afc4c95..547c22b 100644 --- a/es/vidalia_es.po +++ b/es/vidalia_es.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-03-21 17:46+0000\n" -"PO-Revision-Date: 2012-11-23 12:31+0000\n" +"PO-Revision-Date: 2012-11-23 15:45+0000\n" "Last-Translator: strel <strelnic(a)gmail.com>\n" "Language-Team: Spanish (http://www.transifex.com/projects/p/torproject/language/es/)\n" "MIME-Version: 1.0\n" @@ -3678,15 +3678,15 @@ msgstr "WSAStartup falló (acceso de la aplicación a protocolos de red en Windo msgctxt "UPNPControl" msgid "Failed to add a port mapping" -msgstr "Fallo al agregar un mapa de puertos" +msgstr "Fallo al agregar un mapeado de puertos" msgctxt "UPNPControl" msgid "Failed to retrieve a port mapping" -msgstr "Fallo al recuperar un mapa de puertos" +msgstr "Fallo al recuperar un mapeado de puertos" msgctxt "UPNPControl" msgid "Failed to remove a port mapping" -msgstr "Fallo al eliminar el mapeo de puertos" +msgstr "Fallo al eliminar un mapeado de puertos" msgctxt "UPNPControl" msgid "Unknown error"

1 0

[translation/vidalia_alpha] Update translations for vidalia_alpha
by translation＠torproject.org 23 Nov '12

23 Nov '12

commit f3fc8a1b7615c73919875e924ae06e1839675829 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Nov 23 15:45:18 2012 +0000 Update translations for vidalia_alpha --- es/vidalia_es.po | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) diff --git a/es/vidalia_es.po b/es/vidalia_es.po index afc4c95..547c22b 100644 --- a/es/vidalia_es.po +++ b/es/vidalia_es.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: https://trac.torproject.org/projects/tor\n" "POT-Creation-Date: 2012-03-21 17:46+0000\n" -"PO-Revision-Date: 2012-11-23 12:31+0000\n" +"PO-Revision-Date: 2012-11-23 15:45+0000\n" "Last-Translator: strel <strelnic(a)gmail.com>\n" "Language-Team: Spanish (http://www.transifex.com/projects/p/torproject/language/es/)\n" "MIME-Version: 1.0\n" @@ -3678,15 +3678,15 @@ msgstr "WSAStartup falló (acceso de la aplicación a protocolos de red en Windo msgctxt "UPNPControl" msgid "Failed to add a port mapping" -msgstr "Fallo al agregar un mapa de puertos" +msgstr "Fallo al agregar un mapeado de puertos" msgctxt "UPNPControl" msgid "Failed to retrieve a port mapping" -msgstr "Fallo al recuperar un mapa de puertos" +msgstr "Fallo al recuperar un mapeado de puertos" msgctxt "UPNPControl" msgid "Failed to remove a port mapping" -msgstr "Fallo al eliminar el mapeo de puertos" +msgstr "Fallo al eliminar un mapeado de puertos" msgctxt "UPNPControl" msgid "Unknown error"

1 0

[torspec/master] Add a reminder to control-spec that server descs aren't default now
by nickm＠torproject.org 23 Nov '12

23 Nov '12

commit f811e9eb07e672c1d58f86f7c3470574c3b53715 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 23 10:39:07 2012 -0500 Add a reminder to control-spec that server descs aren't default now Clients now download microdescriptors, not full server descriptors, by default. desc/* was tripping people up. --- control-spec.txt | 7 +++++-- 1 files changed, 5 insertions(+), 2 deletions(-) diff --git a/control-spec.txt b/control-spec.txt index 5792cef..5d12322 100644 --- a/control-spec.txt +++ b/control-spec.txt @@ -471,7 +471,10 @@ *append* to the ExitPolicy config option. "desc/id/<OR identity>" or "desc/name/<OR nickname>" -- the latest - server descriptor for a given OR. + server descriptor for a given OR. (Note that modern Tor clients + do not download server descriptors by default, but download + microdescriptors instead. If microdescriptors are enabled, you'll + need to use md/* instead.) "md/id/<OR identity>" or "md/name/<OR nickname>" -- the latest microdescriptor for a given OR. [First implemented in @@ -508,7 +511,7 @@ queries. [First implemented in 0.2.0.13-alpha.] "desc/all-recent" -- the latest server descriptor for every router that - Tor knows about. + Tor knows about. (See note about desc/id/* and desc/name/* above.) "network-status" -- a space-separated list (v1 directory style) of all known OR identities. This is in the same format as the

1 0

[torspec/master] Oops; use the right limit for extra-info docs
by nickm＠torproject.org 23 Nov '12

23 Nov '12

commit b66c9cec43f24e9bdb02cc8a83fe6ceebe7dbbe0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 23 10:34:41 2012 -0500 Oops; use the right limit for extra-info docs --- dir-spec.txt | 5 +++-- 1 files changed, 3 insertions(+), 2 deletions(-) diff --git a/dir-spec.txt b/dir-spec.txt index cb3fe46..8e389c9 100644 --- a/dir-spec.txt +++ b/dir-spec.txt @@ -354,8 +354,9 @@ http://<hostname:port>/tor/ - Neither router descriptors nor extra-info documents may exceed 20,000 - bytes in length. If they do, the authorities SHOULD reject them. + Router descriptors may not exceed 20,000 bytes in length; extra-info + documents may not exceed 50,000 bytes in length. If they do, the + authorities SHOULD reject them. 2.1. Router descriptor format

1 0

[torspec/master] Document MEASUREMENT_EXPIRED
by nickm＠torproject.org 23 Nov '12

23 Nov '12

commit de621605527e0f48c8ef07c492e4c58d8701fd21 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 23 10:36:24 2012 -0500 Document MEASUREMENT_EXPIRED --- control-spec.txt | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) diff --git a/control-spec.txt b/control-spec.txt index 1a50256..5792cef 100644 --- a/control-spec.txt +++ b/control-spec.txt @@ -1354,7 +1354,10 @@ if extended events are enabled (see 3.19). Clients MUST accept reasons not listed above. Reasons are as given in tor-spec.txt, except for: - NOPATH (Not enough nodes to make circuit) + NOPATH (Not enough nodes to make circuit) + MEASUREMENT_EXPIRED (As "TIMEOUT", except that we had left the circuit + open for measurement purposes to see how long it + would take to finish.) The "REMOTE_REASON" field is provided only when we receive a DESTROY or TRUNCATE cell, and only if extended events are enabled. It contains the

1 0

[torspec/master] Make proposals 117, 208 (ipv6 exits) as finished.
by nickm＠torproject.org 23 Nov '12

23 Nov '12

commit 3d0d39292cb10146a74aecddde9a3cc2bffc2177 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 23 10:30:53 2012 -0500 Make proposals 117, 208 (ipv6 exits) as finished. ("Finished" means we still need to merge them into tor-spec. Additionally, I've removed the parts of tor-spec that say "we don't do IPv6" as no longer true.) --- proposals/000-index.txt | 8 ++++---- proposals/117-ipv6-exits.txt | 3 ++- proposals/208-ipv6-exits-redux.txt | 4 ++-- tor-spec.txt | 7 ------- 4 files changed, 8 insertions(+), 14 deletions(-) diff --git a/proposals/000-index.txt b/proposals/000-index.txt index caec770..4a641a2 100644 --- a/proposals/000-index.txt +++ b/proposals/000-index.txt @@ -37,7 +37,7 @@ Proposals by number: 114 Distributed Storage for Tor Hidden Service Descriptors [CLOSED] 115 Two Hop Paths [DEAD] 116 Two hop paths from entry guards [DEAD] -117 IPv6 exits [ACCEPTED] +117 IPv6 exits [FINISHED] 118 Advertising multiple ORPorts at once [SUPERSEDED] 119 New PROTOCOLINFO command for controllers [CLOSED] 120 Shutdown descriptors when Tor servers stop [DEAD] @@ -128,7 +128,7 @@ Proposals by number: 205 Remove global client-side DNS caching [OPEN] 206 Preconfigured directory sources for bootstrapping [OPEN] 207 Directory guards [OPEN] -208 IPv6 Exits Redux [OPEN] +208 IPv6 Exits Redux [FINISHED] 209 Tuning the Parameters for the Path Bias Defense [OPEN] 210 Faster Headless Consensus Bootstrapping [OPEN] 211 Internal Mapaddress for Tor Configuration Testing [OPEN] @@ -180,7 +180,6 @@ Proposals by status: 205 Remove global client-side DNS caching 206 Preconfigured directory sources for bootstrapping [for 0.2.4.x] 207 Directory guards [for 0.2.4.x] - 208 IPv6 Exits Redux [for 0.2.4.x] 209 Tuning the Parameters for the Path Bias Defense [for 0.2.4.x+] 210 Faster Headless Consensus Bootstrapping [for 0.2.4.x+] 211 Internal Mapaddress for Tor Configuration Testing [for 0.2.4.x+] @@ -189,7 +188,6 @@ Proposals by status: 214 Allow 4-byte circuit IDs in a new link protocol 215 Let the minimum consensus method change with time ACCEPTED: - 117 IPv6 exits [for 0.2.4.x] 140 Provide diffs between consensuses 147 Eliminate the need for v2 directories in generating v3 directories [for 0.2.4.x] 157 Make certificate downloads specific [for 0.2.4.x] @@ -203,6 +201,7 @@ Proposals by status: 098 Proposals that should be written 099 Miscellaneous proposals FINISHED: + 117 IPv6 exits [for 0.2.4.x] [in 0.2.4.7-alpha] 121 Hidden Service Authentication [in 0.2.1.x] 151 Improving Tor Path Selection 155 Four Improvements of Hidden Service Performance [in 0.2.1.x] @@ -211,6 +210,7 @@ Proposals by status: 161 Computing Bandwidth Adjustments [for 0.2.1.x] 162 Publish the consensus in multiple flavors [in 0.2.3.1-alpha] 180 Pluggable transports for circumvention [in 0.2.3.x] + 208 IPv6 Exits Redux [for 0.2.4.x] [in 0.2.4.7-alpha] CLOSED: 101 Voting on the Tor Directory System [in 0.2.0.x] 102 Dropping "opt" from the directory format [in 0.2.0.x] diff --git a/proposals/117-ipv6-exits.txt b/proposals/117-ipv6-exits.txt index 60ae332..9c51cf2 100644 --- a/proposals/117-ipv6-exits.txt +++ b/proposals/117-ipv6-exits.txt @@ -2,8 +2,9 @@ Filename: 117-ipv6-exits.txt Title: IPv6 exits Author: coderman Created: 10-Jul-2007 -Status: Accepted +Status: Finished Target: 0.2.4.x +Implemented-In: 0.2.4.7-alpha Overview diff --git a/proposals/208-ipv6-exits-redux.txt b/proposals/208-ipv6-exits-redux.txt index 6f83f3c..e25a901 100644 --- a/proposals/208-ipv6-exits-redux.txt +++ b/proposals/208-ipv6-exits-redux.txt @@ -2,9 +2,9 @@ Filename: 208-ipv6-exits-redux.txt Title: IPv6 Exits Redux Author: Nick Mathewson Created: 10-Oct-2012 -Status: Open +Status: Finished Target: 0.2.4.x - +Implemented-In: 0.2.4.7-alpha 1. Obligatory Motivation Section diff --git a/tor-spec.txt b/tor-spec.txt index a3df860..1099e3d 100644 --- a/tor-spec.txt +++ b/tor-spec.txt @@ -1060,7 +1060,6 @@ see tor-design.pdf. An address type (6) [1 octet] The IPv6 address to which the connection was made [16 octets] A number of seconds (TTL) for which the address may be cached [4 octets] - [XXXX No version of Tor currently generates the IPv6 format.] [Tor exit nodes before 0.1.2.0 set the TTL field to a fixed value. Later versions set the TTL to the last value seen from a DNS server, and expire @@ -1286,10 +1285,4 @@ see tor-design.pdf. cells when both a) the window is <= 450, and b) there are less than ten cell payloads remaining to be flushed at that edge. -A.1. Differences between spec and implementation - -- The current specification requires all ORs to have IPv4 addresses, but - allows relays to exit and resolve to IPv6 addresses, and to declare IPv6 - addresses in their exit policies. The current codebase has no IPv6 - support at all.

1 0

[torspec/master] Add some missing GETINFO info/names options
by nickm＠torproject.org 23 Nov '12

23 Nov '12

commit a14d7f33d4062aa20bc416603b7ef03916f928a0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Nov 23 10:28:13 2012 -0500 Add some missing GETINFO info/names options Fixes the items listed in 3844. --- control-spec.txt | 13 +++++++++++++ 1 files changed, 13 insertions(+), 0 deletions(-) diff --git a/control-spec.txt b/control-spec.txt index 6819905..1a50256 100644 --- a/control-spec.txt +++ b/control-spec.txt @@ -637,6 +637,9 @@ OptionName SP Documentation CRLF OptionPrefix SP Documentation CRLF OptionPrefix = OptionName "/*" + The OptionPrefix form indicates a number of options beginning with the + prefix. So if "config/*" is listed, other options beginning with + "config/" will work, but "config/*" itself is not an option. "events/names" A space-separated list of all the events supported by this version of @@ -708,6 +711,9 @@ "status/version/current" Status of the current version. One of: new, old, unrecommended, recommended, new in series, obsolete, unknown. + "status/version/num-concurring" + "status/version/num-versioning" + These options are deprecated; they no longer give useful information. "status/clients-seen" A summary of which countries we've seen clients from recently, formatted the same as the CLIENTS_SEEN status event described in @@ -724,6 +730,13 @@ A space-separated list of the addresses at which Tor is listening for connections of each specified type. [New in Tor 0.2.2.26-beta.] + "dir-usage" + A newline-separated list of how many bytes we've served to answer + each type of directory request. The format of each line is: + Keyword 1*SP Integer 1*SP Integer + where the first integer is the number of bytes written, and the second + is the number of requests answered. + Examples: C: GETINFO version desc/name/moria1 S: 250+desc/name/moria=

1 0