November 2013 - tor-commits - lists.torproject.org

[tor/release-0.2.4] Merge remote-tracking branch 'public/bug9780_024_v2' into maint-0.2.4
by arma＠torproject.org 02 Nov '13

02 Nov '13

commit 1b312f7b55bc5322f3029ad12715d9f348d44650 Merge: 0e8ee79 72c1e5a Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Oct 31 14:02:28 2013 -0400 Merge remote-tracking branch 'public/bug9780_024_v2' into maint-0.2.4 changes/bug9780 | 8 ++++++++ doc/tor.1.txt | 2 +- src/common/tortls.c | 4 +--- 3 files changed, 10 insertions(+), 4 deletions(-)

1 0

[tor/release-0.2.4] Merge branch 'maint-0.2.4' into release-0.2.4
by arma＠torproject.org 02 Nov '13

02 Nov '13

commit 33b86071b765b6254f5aab13fc6dceebe206b103 Merge: 00f95c2 5cc155e Author: Roger Dingledine <arma(a)torproject.org> Date: Sat Nov 2 06:35:46 2013 -0400 Merge branch 'maint-0.2.4' into release-0.2.4 changes/bug6055 | 6 ++++++ changes/bug9645a | 5 +++++ changes/bug9731 | 3 +++ changes/bug9780 | 8 ++++++++ doc/tor.1.txt | 2 +- src/common/tortls.c | 7 ++++--- src/or/connection.c | 6 ++++++ src/or/microdesc.c | 9 ++++----- 8 files changed, 37 insertions(+), 9 deletions(-)

1 0

[tor/release-0.2.4] Re-enable TLS 1.[12] when building with OpenSSL >= 1.0.1e
by arma＠torproject.org 02 Nov '13

02 Nov '13

commit ad763a336cb3655151383172bcfa658870ad8950 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Aug 13 23:43:39 2013 -0400 Re-enable TLS 1.[12] when building with OpenSSL >= 1.0.1e To fix #6033, we disabled TLS 1.1 and 1.2. Eventually, OpenSSL fixed the bug behind #6033. I've considered alternate implementations that do more testing to see if there's secretly an OpenSSL 1.0.1c or something that secretly has a backport of the OpenSSL 1.0.1e fix, and decided against it on the grounds of complexity. --- changes/bug6055 | 6 ++++++ src/common/tortls.c | 3 +++ 2 files changed, 9 insertions(+) diff --git a/changes/bug6055 b/changes/bug6055 new file mode 100644 index 0000000..0073007 --- /dev/null +++ b/changes/bug6055 @@ -0,0 +1,6 @@ + o Major enhancements: + - Re-enable TLS 1.1 and 1.2 when built with OpenSSL 1.0.1e or later. + (OpenSSL before 1.0.1 didn't have TLS 1.1 or 1.2. OpenSSL from 1.0.1 + through 1.0.1d had bugs that prevented renegotiation from working + with TLS 1.1 or 1.2, so we disabled them to solve bug 6033.) Fix for + issue #6055. diff --git a/src/common/tortls.c b/src/common/tortls.c index b7e5bc1..90ebb75 100644 --- a/src/common/tortls.c +++ b/src/common/tortls.c @@ -1269,12 +1269,15 @@ tor_tls_context_new(crypto_pk_t *identity, unsigned int key_lifetime, * version. Once some version of OpenSSL does TLS1.1 and TLS1.2 * renegotiation properly, we can turn them back on when built with * that version. */ +#if OPENSSL_VERSION_NUMBER < OPENSSL_V(1,0,1,'e') #ifdef SSL_OP_NO_TLSv1_2 SSL_CTX_set_options(result->ctx, SSL_OP_NO_TLSv1_2); #endif #ifdef SSL_OP_NO_TLSv1_1 SSL_CTX_set_options(result->ctx, SSL_OP_NO_TLSv1_1); #endif +#endif + /* Disable TLS tickets if they're supported. We never want to use them; * using them can make our perfect forward secrecy a little worse, *and* * create an opportunity to fingerprint us (since it's unusual to use them

1 0

[tor/release-0.2.4] Merge remote-tracking branch 'public/bug9645' into maint-0.2.4
by arma＠torproject.org 02 Nov '13

02 Nov '13

commit 5cc155e02a995fda828ff33b105040b2bd96a650 Merge: db2c2a6 264aa27 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Oct 31 16:09:41 2013 -0400 Merge remote-tracking branch 'public/bug9645' into maint-0.2.4 changes/bug9645a | 5 +++++ src/or/microdesc.c | 9 ++++----- 2 files changed, 9 insertions(+), 5 deletions(-)

1 0

[tor/release-0.2.4] Don't apply read/write buckets to cpuworker connections
by arma＠torproject.org 02 Nov '13

02 Nov '13

commit c5532889a8e4b2788253c420af6568820483147c Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Sep 13 13:37:53 2013 -0400 Don't apply read/write buckets to cpuworker connections Fixes bug 9731 --- changes/bug9731 | 3 +++ src/or/connection.c | 6 ++++++ 2 files changed, 9 insertions(+) diff --git a/changes/bug9731 b/changes/bug9731 new file mode 100644 index 0000000..828496a --- /dev/null +++ b/changes/bug9731 @@ -0,0 +1,3 @@ + o Major bugfixes: + - Do not apply connection_consider_empty_read/write_buckets to + cpuworker connections. diff --git a/src/or/connection.c b/src/or/connection.c index 6e754a0..78cc31e 100644 --- a/src/or/connection.c +++ b/src/or/connection.c @@ -2483,6 +2483,9 @@ connection_consider_empty_read_buckets(connection_t *conn) } else return; /* all good, no need to stop it */ + if (conn->type == CONN_TYPE_CPUWORKER) + return; /* Always okay. */ + LOG_FN_CONN(conn, (LOG_DEBUG, LD_NET, "%s", reason)); conn->read_blocked_on_bw = 1; connection_stop_reading(conn); @@ -2507,6 +2510,9 @@ connection_consider_empty_write_buckets(connection_t *conn) } else return; /* all good, no need to stop it */ + if (conn->type == CONN_TYPE_CPUWORKER) + return; /* Always okay. */ + LOG_FN_CONN(conn, (LOG_DEBUG, LD_NET, "%s", reason)); conn->write_blocked_on_bw = 1; connection_stop_writing(conn);

1 0

[tor/release-0.2.4] Fix bug 9645: don't forget an md just because we can't save it.
by arma＠torproject.org 02 Nov '13

02 Nov '13

commit 264aa271a734767a13065bc6e0d15c4d8c602005 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Sep 3 14:25:01 2013 -0400 Fix bug 9645: don't forget an md just because we can't save it. --- changes/bug9645a | 5 +++++ src/or/microdesc.c | 9 ++++----- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/changes/bug9645a b/changes/bug9645a new file mode 100644 index 0000000..2daba65 --- /dev/null +++ b/changes/bug9645a @@ -0,0 +1,5 @@ + o Minor bugfixes: + - If we are unable to save a microdescriptor to the journal, do not + drop it from memory and then reattempt downloading it. Fixes bug + 9645; bugfix on 0.2.2.6-alpha. + diff --git a/src/or/microdesc.c b/src/or/microdesc.c index b93bd83..8b5581f 100644 --- a/src/or/microdesc.c +++ b/src/or/microdesc.c @@ -213,7 +213,6 @@ microdescs_add_list_to_cache(microdesc_cache_t *cache, if (fd < 0) { log_warn(LD_DIR, "Couldn't append to journal in %s: %s", cache->journal_fname, strerror(errno)); - return NULL; } } @@ -238,11 +237,11 @@ microdescs_add_list_to_cache(microdesc_cache_t *cache, if (size < 0) { /* we already warned in dump_microdescriptor */ abort_writing_to_file(open_file); - smartlist_clear(added); - return added; + fd = -1; + } else { + md->saved_location = SAVED_IN_JOURNAL; + cache->journal_len += size; } - md->saved_location = SAVED_IN_JOURNAL; - cache->journal_len += size; } else { md->saved_location = where; }

1 0

r26405: {website} a new item d on #UpToSpeed: a link to the tor stackexchange (website/trunk/docs/en)
by Roger Dingledine 02 Nov '13

02 Nov '13

Author: arma Date: 2013-11-02 09:02:52 +0000 (Sat, 02 Nov 2013) New Revision: 26405 Modified: website/trunk/docs/en/documentation.wml Log: a new item d on #UpToSpeed: a link to the tor stackexchange Modified: website/trunk/docs/en/documentation.wml =================================================================== --- website/trunk/docs/en/documentation.wml 2013-11-01 21:03:59 UTC (rev 26404) +++ website/trunk/docs/en/documentation.wml 2013-11-02 09:02:52 UTC (rev 26405) @@ -59,6 +59,10 @@ that arise from The Tor Project in the US. </li> + <li>Check out the <a href="https://tor.stackexchange.com/">Tor + Stack Exchange Q&A Site</a>, and help us make the questions and + answers better.</li> + <li>The <a href="<page docs/tor-manual>">manual</a> lists all the possible entries you can put in your <a href="<page docs/faq>#torrc">torrc

1 0

[torbirdy/master] Update Makefile and remove screenshots
by sukhbir＠torproject.org 02 Nov '13

02 Nov '13

commit a04ef450ce5f75fd24ada9df9dbde5914f787947 Author: Sukhbir Singh <sukhbir(a)torproject.org> Date: Sat Nov 2 01:54:35 2013 -0400 Update Makefile and remove screenshots --- Makefile | 2 +- screenshots/enigmail-settings.png | Bin 24318 -> 0 bytes screenshots/first-run.png | Bin 23762 -> 0 bytes screenshots/manual-account-wizard.png | Bin 35678 -> 0 bytes screenshots/plain-text-compose.png | Bin 28418 -> 0 bytes screenshots/privacy-settings.png | Bin 29702 -> 0 bytes screenshots/proxy-settings.png | Bin 28756 -> 0 bytes screenshots/security-settings.png | Bin 18175 -> 0 bytes screenshots/torcheck.png | Bin 54105 -> 0 bytes screenshots/warn-onchange-settings.png | Bin 18952 -> 0 bytes 10 files changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile b/Makefile index a721e8c..311a631 100644 --- a/Makefile +++ b/Makefile @@ -2,7 +2,7 @@ SHELL := /bin/bash VERSION := $(shell cat install.rdf|grep '<em:version>'|cut -d\> -f2|cut -d\< -f1) make-xpi: - zip -r ../torbirdy-$(VERSION).xpi * -x "/screenshots/*" -x "*/screenshots/*" -x "debian/*" -x "patches/*" -x "ChangeLog" -x "Makefile" -x "gpg.conf" + zip -r ../torbirdy-$(VERSION).xpi * -x "debian/*" -x "patches/*" -x "ChangeLog" -x "Makefile" -x "gpg.conf" clean: rm -f ../torbirdy-$(VERSION).xpi diff --git a/screenshots/enigmail-settings.png b/screenshots/enigmail-settings.png deleted file mode 100644 index 951c03b..0000000 Binary files a/screenshots/enigmail-settings.png and /dev/null differ diff --git a/screenshots/first-run.png b/screenshots/first-run.png deleted file mode 100644 index ca91c52..0000000 Binary files a/screenshots/first-run.png and /dev/null differ diff --git a/screenshots/manual-account-wizard.png b/screenshots/manual-account-wizard.png deleted file mode 100644 index b9f0eb9..0000000 Binary files a/screenshots/manual-account-wizard.png and /dev/null differ diff --git a/screenshots/plain-text-compose.png b/screenshots/plain-text-compose.png deleted file mode 100644 index 1c71ba1..0000000 Binary files a/screenshots/plain-text-compose.png and /dev/null differ diff --git a/screenshots/privacy-settings.png b/screenshots/privacy-settings.png deleted file mode 100644 index 0f7a536..0000000 Binary files a/screenshots/privacy-settings.png and /dev/null differ diff --git a/screenshots/proxy-settings.png b/screenshots/proxy-settings.png deleted file mode 100644 index bac1ca0..0000000 Binary files a/screenshots/proxy-settings.png and /dev/null differ diff --git a/screenshots/security-settings.png b/screenshots/security-settings.png deleted file mode 100644 index 2408e36..0000000 Binary files a/screenshots/security-settings.png and /dev/null differ diff --git a/screenshots/torcheck.png b/screenshots/torcheck.png deleted file mode 100644 index fe98bd3..0000000 Binary files a/screenshots/torcheck.png and /dev/null differ diff --git a/screenshots/warn-onchange-settings.png b/screenshots/warn-onchange-settings.png deleted file mode 100644 index 80d40c3..0000000 Binary files a/screenshots/warn-onchange-settings.png and /dev/null differ

1 0

[translation/tsum] Update translations for tsum
by translation＠torproject.org 02 Nov '13

02 Nov '13

commit 4e7193578681850013a729c16402bacabdcc5696 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Nov 2 03:45:08 2013 +0000 Update translations for tsum --- es_CO/short-user-manual_es_CO_noimg.xhtml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/es_CO/short-user-manual_es_CO_noimg.xhtml b/es_CO/short-user-manual_es_CO_noimg.xhtml index a5a20c9..83f1619 100644 --- a/es_CO/short-user-manual_es_CO_noimg.xhtml +++ b/es_CO/short-user-manual_es_CO_noimg.xhtml @@ -18,7 +18,7 @@ <h3 id="how-to-get-tor-via-email">Como adquirir Tor via correo electónico</h3> Para recibir el paquete del navegador Tor para windows, envíe un correo electrónico a gettor(a)torproject.org con windows en el cuerpo del mensaje. Puede dejar el asunto en blanco. También se puede solicitar el paquete navegador Tor para Mac OS X (escriba macos-i386) y Linux (escriba linux-i386 para sistemas de 32 bits o linux-x86_64 para sistemas de 64 bits). - If you want a translated version of Tor, write help instead. You will then receive an email with instructions and a list of available languages. + Si quiere una versión traducida de Tor, en lugar escriba help. A continuación, recibirá un correo electrónico con instrucciones y una lista de los idiomas disponibles. Note: The Tor Browser Bundles for Linux and Mac OS X are rather large, and you will not be able to receive any of these bundles with a Gmail, Hotmail or Yahoo account. If you cannot receive the bundle you want, send an email to help(a)rt.torproject.org and we will give you a list of website mirrors to use. <h3 id="tor-for-smartphones">Tor for smartphones</h3> You can get Tor on your Android device by installing the package named Orbot. For information about how to download and install Orbot, please see the <a href="https://www.torproject.org/docs/android.html.en">Tor Project website</a>.

1 0

[translation/tsum] Update translations for tsum
by translation＠torproject.org 02 Nov '13

02 Nov '13

commit 9bb5be92e60a54ab7436517eb83a7773205802b8 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Nov 2 03:15:09 2013 +0000 Update translations for tsum --- es_CO/short-user-manual_es_CO_noimg.xhtml | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/es_CO/short-user-manual_es_CO_noimg.xhtml b/es_CO/short-user-manual_es_CO_noimg.xhtml index 849a531..a5a20c9 100644 --- a/es_CO/short-user-manual_es_CO_noimg.xhtml +++ b/es_CO/short-user-manual_es_CO_noimg.xhtml @@ -4,20 +4,20 @@ <title/> </head> <body> - <h1 id="the-short-user-manual">Manual rápido del usuario</h1> + <h1 id="the-short-user-manual">Breve Manual del usuario</h1> Este manual del usuario contien información acerca de como descargar Tor, como utilizarlo y que hacer en caso que Tor no pueda conectarse a la red. Si usted no puede hallar respuesta a su inquietud en este documento, escriba a help(a)rt.torproject.org. Tenga en cuenta que estamos proporcionando apoyo en forma voluntaria, y tenemos una gran cantidad de correos electrónicos cada día. No se preocupe si no contactamos inmediatamente. <h2 id="how-tor-works">Como funciona Tor</h2> - Tor es una red de túneles virtuales que le permite mejorar su seguridad y privacidad en Internet. Tor funciona mediante el envío de su tráfico a través de tres servidores aleatorios (también conocidos como relays) en la red Tor, antes de que el tráfico sea enviado hacia la Internet pública. - The image above illustrates a user browsing to different websites over Tor. The green monitors represent relays in the Tor network, while the three keys represent the layers of encryption between the user and each relay. - Tor will anonymize the origin of your traffic, and it will encrypt everything between you and the Tor network. Tor will also encrypt your traffic inside the Tor network, but it cannot encrypt your traffic between the Tor network and its final destination. - If you are communicating sensitive information, for example when logging on to a website with a username and password, make sure that you are using HTTPS (e.g. https://torproject.org/, not http://torproject.org/). - <h2 id="how-to-download-tor">How to download Tor</h2> - The bundle we recommend to most users is the <a href="https://www.torproject.org/projects/torbrowser.html">Tor Browser Bundle</a>. This bundle contains a browser preconfigured to safely browse the Internet through Tor, and requires no installation. You download the bundle, extract the archive, and start Tor. - There are two different ways to get hold of the Tor software. You can either browse to the <a href="https://www.torproject.org/">Tor Project website</a> and download it there, or you can use GetTor, the email autoresponder. - <h3 id="how-to-get-tor-via-email">How to get Tor via email</h3> - To receive the English Tor Browser Bundle for Windows, send an email to gettor(a)torproject.org with windows in the body of the message. You can leave the subject blank. - You can also request the Tor Browser Bundle for Mac OS X (write macos-i386), and Linux (write linux-i386 for 32-bit systems or linux-x86_64 for 64-bit systems). + Tor es una red de túneles virtuales que le permite mejorar su seguridad y privacidad en Internet. Tor funciona mediante el envío de su tráfico a través de tres servidores aleatorios (también conocidos como nodos) en la red Tor, antes de que el tráfico sea enviado hacia la Internet pública. + La imagen superior muestra a un usuario navegar en diferentes sitios web a través de Tor. Los monitores verdes representan nodos en la red Tor, mientras que las tres llaves representan las capas de cifrado entre el usuario y cada nodo. + Tor omitirá el origen de su tráfico, y cifrará todo entre usted y la red Tor. Tor también cifrará el tráfico dentro de la red Tor, pero no puede encriptar su tráfico entre la red Tor y su destino final. + Si usted se está comunicando información confidencial, por ejemplo, al iniciar sesión en un sitio web con un nombre de usuario y contraseña, asegúrese de que está utilizando HTTPS (por ejemplo https:/ /torproject.org/, no http:/ /torproject.org/). + <h2 id="how-to-download-tor">Cómo descargar Tor</h2> + El paquete que se recomienda para la mayoría de los usuarios etá en<a href="https://www.torproject.org/projects/torbrowser.html">Paquete del navegaror Tor</a>. Este paquete contiene un navegador preconfigurado para navegar de forma segura por Internet a través de Tor, y no requiere instalación. Puede descargar el paquete, descomprimir el archivo, y empezar a utilizar Tor. + Hay dos maneras de controlar el software de Tor. Usted puede navegar a la <a href="https://www.torproject.org/">sitio web del Proyecto Tor</a> y descargarla allí, o puede utilizar adquiera Tor, con respuesta automática al correo electrónico. + <h3 id="how-to-get-tor-via-email">Como adquirir Tor via correo electónico</h3> + Para recibir el paquete del navegador Tor para windows, envíe un correo electrónico a gettor(a)torproject.org con windows en el cuerpo del mensaje. Puede dejar el asunto en blanco. + También se puede solicitar el paquete navegador Tor para Mac OS X (escriba macos-i386) y Linux (escriba linux-i386 para sistemas de 32 bits o linux-x86_64 para sistemas de 64 bits). If you want a translated version of Tor, write help instead. You will then receive an email with instructions and a list of available languages. Note: The Tor Browser Bundles for Linux and Mac OS X are rather large, and you will not be able to receive any of these bundles with a Gmail, Hotmail or Yahoo account. If you cannot receive the bundle you want, send an email to help(a)rt.torproject.org and we will give you a list of website mirrors to use. <h3 id="tor-for-smartphones">Tor for smartphones</h3>

1 0