March 2013 - tor-commits - lists.torproject.org

[stem/master] More clearly stating tutorial topics
by atagar＠torproject.org 11 Mar '13

11 Mar '13

commit 7d13f767c08e35d55324186832deb7c6df6de62d Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Mar 10 22:59:23 2013 -0700 More clearly stating tutorial topics While our cutesy titles are fun, they shouldn't get in the way of our tutorial page making sense. Dropping them to be a subheading, in favour of a clearer summary of what the tutorial's about. --- .../label/double_double_toil_and_trouble.png | Bin 2674 -> 3785 bytes docs/_static/label/mirror_mirror_on_the_wall.png | Bin 2675 -> 4056 bytes .../resources/double_double_toil_and_trouble.xcf | Bin 8434 -> 8536 bytes .../label/resources/mirror_mirror_on_the_wall.xcf | Bin 7035 -> 8960 bytes .../resources/the_little_relay_that_could.xcf | Bin 7273 -> 8870 bytes .../label/resources/to_russia_with_love.xcf | Bin 5699 -> 7612 bytes docs/_static/label/the_little_relay_that_could.png | Bin 3162 -> 4301 bytes docs/_static/label/to_russia_with_love.png | Bin 2924 -> 4265 bytes docs/tutorial.rst | 4 ++-- 9 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/_static/label/double_double_toil_and_trouble.png b/docs/_static/label/double_double_toil_and_trouble.png index 843aaa3..5286872 100644 Binary files a/docs/_static/label/double_double_toil_and_trouble.png and b/docs/_static/label/double_double_toil_and_trouble.png differ diff --git a/docs/_static/label/mirror_mirror_on_the_wall.png b/docs/_static/label/mirror_mirror_on_the_wall.png index 930d786..b6e5622 100644 Binary files a/docs/_static/label/mirror_mirror_on_the_wall.png and b/docs/_static/label/mirror_mirror_on_the_wall.png differ diff --git a/docs/_static/label/resources/double_double_toil_and_trouble.xcf b/docs/_static/label/resources/double_double_toil_and_trouble.xcf index b8fea3b..214dd30 100644 Binary files a/docs/_static/label/resources/double_double_toil_and_trouble.xcf and b/docs/_static/label/resources/double_double_toil_and_trouble.xcf differ diff --git a/docs/_static/label/resources/mirror_mirror_on_the_wall.xcf b/docs/_static/label/resources/mirror_mirror_on_the_wall.xcf index 794cf7b..d50672e 100644 Binary files a/docs/_static/label/resources/mirror_mirror_on_the_wall.xcf and b/docs/_static/label/resources/mirror_mirror_on_the_wall.xcf differ diff --git a/docs/_static/label/resources/the_little_relay_that_could.xcf b/docs/_static/label/resources/the_little_relay_that_could.xcf index 2589e8d..d54dc8c 100644 Binary files a/docs/_static/label/resources/the_little_relay_that_could.xcf and b/docs/_static/label/resources/the_little_relay_that_could.xcf differ diff --git a/docs/_static/label/resources/to_russia_with_love.xcf b/docs/_static/label/resources/to_russia_with_love.xcf index 1fa449e..0a36e7c 100644 Binary files a/docs/_static/label/resources/to_russia_with_love.xcf and b/docs/_static/label/resources/to_russia_with_love.xcf differ diff --git a/docs/_static/label/the_little_relay_that_could.png b/docs/_static/label/the_little_relay_that_could.png index 8c23539..1d72669 100644 Binary files a/docs/_static/label/the_little_relay_that_could.png and b/docs/_static/label/the_little_relay_that_could.png differ diff --git a/docs/_static/label/to_russia_with_love.png b/docs/_static/label/to_russia_with_love.png index 9a2d1c6..d85d109 100644 Binary files a/docs/_static/label/to_russia_with_love.png and b/docs/_static/label/to_russia_with_love.png differ diff --git a/docs/tutorial.rst b/docs/tutorial.rst index 51dd14c..7143892 100644 --- a/docs/tutorial.rst +++ b/docs/tutorial.rst @@ -39,8 +39,8 @@ feet wet by jumping straight in with some tutorials... - .. image:: /_static/label/the_little_relay_that_could.png :target: tutorial/the_little_relay_that_could.html - "Hello World" for talking with Tor. This will step you through - configuring Tor and writing your first script to talk with it. + Basics for talking with Tor. This will step you through configuring Tor + and writing your first script to talk with it. * - .. image:: /_static/section/tutorial/soviet.png :target: tutorial/to_russia_with_love.html

1 0

[stem/master] Adding an examples section to our site
by atagar＠torproject.org 11 Mar '13

11 Mar '13

commit 4d89032ba6f7d1c2babd54c593668c8e74b23f98 Author: Damian Johnson <atagar(a)torproject.org> Date: Sun Mar 10 22:40:11 2013 -0700 Adding an examples section to our site Example sections containing projects and scripts using stem. Presently this is pretty small - hopefully it'll grow soon! --- docs/_static/arm.png | Bin 0 -> 9536 bytes docs/_static/label/arm.png | Bin 0 -> 780 bytes .../label/double_double_toil_and_trouble.png | Bin 0 -> 2674 bytes docs/_static/label/resources/arm.xcf | Bin 0 -> 2286 bytes .../resources/double_double_toil_and_trouble.xcf | Bin 0 -> 8434 bytes docs/_static/section/tutorial/cauldron.png | Bin 0 -> 9943 bytes docs/contents.rst | 1 + docs/tutorial.rst | 14 +++++++++++ docs/tutorial/double_double_toil_and_trouble.rst | 25 ++++++++++++++++++++ 9 files changed, 40 insertions(+), 0 deletions(-) diff --git a/docs/_static/arm.png b/docs/_static/arm.png new file mode 100644 index 0000000..2844b0a Binary files /dev/null and b/docs/_static/arm.png differ diff --git a/docs/_static/label/arm.png b/docs/_static/label/arm.png new file mode 100644 index 0000000..8bbfd68 Binary files /dev/null and b/docs/_static/label/arm.png differ diff --git a/docs/_static/label/double_double_toil_and_trouble.png b/docs/_static/label/double_double_toil_and_trouble.png new file mode 100644 index 0000000..843aaa3 Binary files /dev/null and b/docs/_static/label/double_double_toil_and_trouble.png differ diff --git a/docs/_static/label/resources/arm.xcf b/docs/_static/label/resources/arm.xcf new file mode 100644 index 0000000..903d560 Binary files /dev/null and b/docs/_static/label/resources/arm.xcf differ diff --git a/docs/_static/label/resources/double_double_toil_and_trouble.xcf b/docs/_static/label/resources/double_double_toil_and_trouble.xcf new file mode 100644 index 0000000..b8fea3b Binary files /dev/null and b/docs/_static/label/resources/double_double_toil_and_trouble.xcf differ diff --git a/docs/_static/section/tutorial/cauldron.png b/docs/_static/section/tutorial/cauldron.png new file mode 100644 index 0000000..74d32bf Binary files /dev/null and b/docs/_static/section/tutorial/cauldron.png differ diff --git a/docs/contents.rst b/docs/contents.rst index d2fee6a..5826ad7 100644 --- a/docs/contents.rst +++ b/docs/contents.rst @@ -8,6 +8,7 @@ Contents tutorial/the_little_relay_that_could tutorial/to_russia_with_love tutorial/mirror_mirror_on_the_wall + tutorial/double_double_toil_and_trouble download diff --git a/docs/tutorial.rst b/docs/tutorial.rst index 967682b..51dd14c 100644 --- a/docs/tutorial.rst +++ b/docs/tutorial.rst @@ -20,6 +20,11 @@ Tutorial Author: Unknown (gsagri04?) License: Public Domain Alternate: https://openclipart.org/detail/174179/miroir-rectangulaire-by-defaz36-174179 + + * Double Double Toil and Trouble - cauldron.png + Source: https://openclipart.org/detail/174099/cauldron-by-jarda-174099 + Author: Unknown (jarda?) + License: Public Domain Getting started with any new library can be rather daunting, so let's get our feet wet by jumping straight in with some tutorials... @@ -58,3 +63,12 @@ feet wet by jumping straight in with some tutorials... This walks you through both where to get them and a small script to tell you the fastest Tor exits. + * - .. image:: /_static/section/tutorial/cauldron.png + :target: tutorial/double_double_toil_and_trouble.html + + - .. image:: /_static/label/double_double_toil_and_trouble.png + :target: tutorial/double_double_toil_and_trouble.html + + Sometimes it's easiest to learn a library by seeing how it's used in the + wild. This is a directory of scripts and applications that use stem. + diff --git a/docs/tutorial/double_double_toil_and_trouble.rst b/docs/tutorial/double_double_toil_and_trouble.rst new file mode 100644 index 0000000..c6634a0 --- /dev/null +++ b/docs/tutorial/double_double_toil_and_trouble.rst @@ -0,0 +1,25 @@ +Double Double Toil and Trouble +============================== + +Below is a listing of scripts and applications that use stem. If you have +something you would like to have included on this page then `let me know +<http://www.atagar.com/contact/>`_! + +.. list-table:: + :widths: 1 10 + :header-rows: 0 + + * - .. image:: /_static/arm.png + :target: http://www.atagar.com/arm/ + + - .. image:: /_static/label/arm.png + + Terminal status monitor for Tor. This provides a top like interface + including system resource usage, connection information, and much more. + +=========================================================================================================== ========== +`Consensus Tracker <https://gitweb.torproject.org/atagar/tor-utils.git/blob/HEAD:/consensusTrac…>`_ Script that performs an hourly check for the number of relays within the Tor network, looking for large jumps that may indicate a sybil attack. +`Metrics Tasks <https://gitweb.torproject.org/metrics-tasks.git/tree>`_ One-off tasks related to Tor metrics. These mostly involve using descriptor information to answer a particular question. Tasks that involve stem are: `1854 <https://gitweb.torproject.org/metrics-tasks.git/blob/HEAD:/task-1854/pylinf…>`_, `6232 <https://gitweb.torproject.org/metrics-tasks.git/blob/HEAD:/task-6232/pyentr…>`_, and `7241 <https://gitweb.torproject.org/metrics-tasks.git/blob/HEAD:/task-7241/first_…>`_. +`check_tor <http://anonscm.debian.org/gitweb/?p=users/lunar/check_tor.git;a=blob;f=chec…>`_ Nagios check to verify that a relay is participating in the Tor network. +=========================================================================================================== ========== +

1 0

[tor/master] parameterize SSLKeyLifetime
by arma＠torproject.org 10 Mar '13

10 Mar '13

commit 599aeef9bc9e707ec7146da79b2018bf2f2924b3 Author: Roger Dingledine <arma(a)torproject.org> Date: Sat Mar 9 16:42:35 2013 -0500 parameterize SSLKeyLifetime no actual changes in behavior yet --- src/or/config.c | 1 + src/or/or.h | 5 +++-- src/or/router.c | 7 +++++-- 3 files changed, 9 insertions(+), 4 deletions(-) diff --git a/src/or/config.c b/src/or/config.c index dad5719..b7613bd 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -380,6 +380,7 @@ static config_var_t option_vars_[] = { V(SocksPolicy, LINELIST, NULL), VPORT(SocksPort, LINELIST, NULL), V(SocksTimeout, INTERVAL, "2 minutes"), + V(SSLKeyLifetime, INTERVAL, "365 days"), OBSOLETE("StatusFetchPeriod"), V(StrictNodes, BOOL, "0"), OBSOLETE("SysLog"), diff --git a/src/or/or.h b/src/or/or.h index c2cd8a6..a71468c 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -177,8 +177,6 @@ #define MIN_ONION_KEY_LIFETIME (7*24*60*60) /** How often do we rotate TLS contexts? */ #define MAX_SSL_KEY_LIFETIME_INTERNAL (2*60*60) -/** What expiry time shall we place on our SSL certs? */ -#define MAX_SSL_KEY_LIFETIME_ADVERTISED (365*24*60*60) /** How old do we allow a router to get before removing it * from the router list? In seconds. */ @@ -4010,6 +4008,9 @@ typedef struct { */ int DisableV2DirectoryInfo_; + /** What expiry time shall we place on our SSL certs? */ + int SSLKeyLifetime; + } or_options_t; /** Persistent state for an onion router, as saved to disk. */ diff --git a/src/or/router.c b/src/or/router.c index 95aa70a..c9c35f6 100644 --- a/src/or/router.c +++ b/src/or/router.c @@ -650,6 +650,7 @@ router_initialize_tls_context(void) { unsigned int flags = 0; const or_options_t *options = get_options(); + int lifetime = options->SSLKeyLifetime; if (public_server_mode(options)) flags |= TOR_TLS_CTX_IS_PUBLIC_SERVER; if (options->TLSECGroup) { @@ -659,11 +660,13 @@ router_initialize_tls_context(void) flags |= TOR_TLS_CTX_USE_ECDHE_P224; } + /* It's ok to pass lifetime in as an unsigned int, since + * config_parse_interval() checked it. */ return tor_tls_context_init(flags, get_tlsclient_identity_key(), - server_mode(get_options()) ? + server_mode(options) ? get_server_identity_key() : NULL, - MAX_SSL_KEY_LIFETIME_ADVERTISED); + (unsigned int)lifetime); } /** Initialize all OR private keys, and the TLS context, as necessary.

1 0

[tor/master] randomize SSLKeyLifetime by default
by arma＠torproject.org 10 Mar '13

10 Mar '13

commit edd6f02273c58bfe39a978dd5c7b8765aae0b886 Author: Roger Dingledine <arma(a)torproject.org> Date: Sat Mar 9 17:16:11 2013 -0500 randomize SSLKeyLifetime by default resolves ticket 8443. --- changes/ticket8443 | 4 ++++ doc/tor.1.txt | 9 +++++++-- src/or/config.c | 2 +- src/or/or.h | 3 ++- src/or/router.c | 4 ++++ 5 files changed, 18 insertions(+), 4 deletions(-) diff --git a/changes/ticket8443 b/changes/ticket8443 new file mode 100644 index 0000000..ca6fb2f --- /dev/null +++ b/changes/ticket8443 @@ -0,0 +1,4 @@ + o Minor features: + - Randomize the lifetime of our SSL link certificate, so censors can't + use the static value for filtering Tor flows. Resolves ticket 8443; + related to ticket 4014 which was included in 0.2.2.33. diff --git a/doc/tor.1.txt b/doc/tor.1.txt index 75bca79..505a083 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -1500,8 +1500,13 @@ is non-zero): **ShutdownWaitLength** __NUM__:: When we get a SIGINT and we're a server, we begin shutting down: we close listeners and start refusing new circuits. After **NUM** - seconds, we exit. If we get a second SIGINT, we exit immedi- - ately. (Default: 30 seconds) + seconds, we exit. If we get a second SIGINT, we exit immediately. + (Default: 30 seconds) + +**SSLKeyLifetime** __N__ **minutes**|**hours**|**days**|**weeks**:: + When creating a link certificate for our outermost SSL handshake, + set its lifetime to this amount of time. If set to 0, Tor will choose + some reasonable random defaults. (Default: 0) **HeartbeatPeriod** __N__ **minutes**|**hours**|**days**|**weeks**:: Log a heartbeat message every **HeartbeatPeriod** seconds. This is diff --git a/src/or/config.c b/src/or/config.c index b7613bd..15138f9 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -380,7 +380,7 @@ static config_var_t option_vars_[] = { V(SocksPolicy, LINELIST, NULL), VPORT(SocksPort, LINELIST, NULL), V(SocksTimeout, INTERVAL, "2 minutes"), - V(SSLKeyLifetime, INTERVAL, "365 days"), + V(SSLKeyLifetime, INTERVAL, "0"), OBSOLETE("StatusFetchPeriod"), V(StrictNodes, BOOL, "0"), OBSOLETE("SysLog"), diff --git a/src/or/or.h b/src/or/or.h index a71468c..c7d2598 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -4008,7 +4008,8 @@ typedef struct { */ int DisableV2DirectoryInfo_; - /** What expiry time shall we place on our SSL certs? */ + /** What expiry time shall we place on our SSL certs? "0" means we + * should guess a suitable value. */ int SSLKeyLifetime; } or_options_t; diff --git a/src/or/router.c b/src/or/router.c index c9c35f6..2113663 100644 --- a/src/or/router.c +++ b/src/or/router.c @@ -659,6 +659,10 @@ router_initialize_tls_context(void) else if (!strcasecmp(options->TLSECGroup, "P224")) flags |= TOR_TLS_CTX_USE_ECDHE_P224; } + if (!lifetime) { /* we should guess a good ssl cert lifetime */ + /* choose between 1 and 365 days */ + lifetime = 1*24*3600 + crypto_rand_int(364*24*3600); + } /* It's ok to pass lifetime in as an unsigned int, since * config_parse_interval() checked it. */

1 0

[tor/master] start part-way through the ssl cert lifetime
by arma＠torproject.org 10 Mar '13

10 Mar '13

commit 0196647970a91d2bdb052f38b3749dd0e99348e4 Author: Roger Dingledine <arma(a)torproject.org> Date: Sun Mar 10 16:28:28 2013 -0400 start part-way through the ssl cert lifetime also, snap the start time and end time to a day boundary, since most certs in the wild seem to do this. --- src/common/tortls.c | 16 +++++++++++----- src/or/router.c | 14 ++++++++++++-- 2 files changed, 23 insertions(+), 7 deletions(-) diff --git a/src/common/tortls.c b/src/common/tortls.c index 94cedba..a08910b 100644 --- a/src/common/tortls.c +++ b/src/common/tortls.c @@ -234,7 +234,7 @@ static X509* tor_tls_create_certificate(crypto_pk_t *rsa, crypto_pk_t *rsa_sign, const char *cname, const char *cname_sign, - unsigned int lifetime); + unsigned int cert_lifetime); static int tor_tls_context_init_one(tor_tls_context_t **ppcontext, crypto_pk_t *identity, @@ -608,9 +608,10 @@ tor_x509_name_new(const char *cname) /** Generate and sign an X509 certificate with the public key rsa, * signed by the private key rsa_sign. The commonName of the * certificate will be cname; the commonName of the issuer will be - * cname_sign. The cert will be valid for cert_lifetime seconds - * starting from now. Return a certificate on success, NULL on - * failure. + * cname_sign. The cert will be valid for cert_lifetime + * seconds, starting from some time in the past. + * + * Return a certificate on success, NULL on failure. */ static X509 * tor_tls_create_certificate(crypto_pk_t *rsa, @@ -632,7 +633,12 @@ tor_tls_create_certificate(crypto_pk_t *rsa, tor_tls_init(); - start_time = time(NULL); + /* Make sure we're part-way through the certificate lifetime, rather + * than having it start right now. Don't choose quite uniformly, since + * then we might pick a time where we're about to expire. Lastly, be + * sure to start on a day boundary. */ + start_time = time(NULL) - crypto_rand_int(cert_lifetime) + 2*24*3600; + start_time -= start_time % (24*3600); tor_assert(rsa); tor_assert(cname); diff --git a/src/or/router.c b/src/or/router.c index 2113663..422fe5d 100644 --- a/src/or/router.c +++ b/src/or/router.c @@ -660,8 +660,18 @@ router_initialize_tls_context(void) flags |= TOR_TLS_CTX_USE_ECDHE_P224; } if (!lifetime) { /* we should guess a good ssl cert lifetime */ - /* choose between 1 and 365 days */ - lifetime = 1*24*3600 + crypto_rand_int(364*24*3600); + + /* choose between 5 and 365 days, and round to the day */ + lifetime = 5*24*3600 + crypto_rand_int(361*24*3600); + lifetime -= lifetime % (24*3600); + + if (crypto_rand_int(2)) { + /* Half the time we expire at midnight, and half the time we expire + * one second before midnight. (Some CAs wobble their expiry times a + * bit in practice, perhaps to reduce collision attacks; see ticket + * 8443 for details about observed certs in the wild.) */ + lifetime--; + } } /* It's ok to pass lifetime in as an unsigned int, since

1 0

[tor/master] Merge branch 'maint-0.2.4'
by arma＠torproject.org 10 Mar '13

10 Mar '13

commit 331e4dcb460b5c91c1760af134f1a1c1f36b871b Merge: aa3126b 0196647 Author: Roger Dingledine <arma(a)torproject.org> Date: Sun Mar 10 23:42:14 2013 -0400 Merge branch 'maint-0.2.4' changes/ticket8443 | 4 ++++ doc/tor.1.txt | 9 +++++++-- src/common/tortls.c | 16 +++++++++++----- src/or/config.c | 1 + src/or/or.h | 6 ++++-- src/or/router.c | 21 +++++++++++++++++++-- 6 files changed, 46 insertions(+), 11 deletions(-)

1 0

[tor/release-0.2.4] Add a DisableV2DirectoryInfo_ option to 404 all v2 ns requests
by arma＠torproject.org 10 Mar '13

10 Mar '13

commit e4614d30e58007be1d44613d039891b6f131f50f Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Nov 28 11:09:37 2012 -0500 Add a DisableV2DirectoryInfo_ option to 404 all v2 ns requests I have no idea whether b0rken clients will DoS the network if the v2 authorities all turn this on or not. It's experimental. See #6783 for a description of how to test it more or less safely, and please be careful! --- changes/6783_big_hammer | 6 ++++++ src/or/config.c | 1 + src/or/directory.c | 13 +++++++++++++ src/or/or.h | 10 ++++++++++ 4 files changed, 30 insertions(+), 0 deletions(-) diff --git a/changes/6783_big_hammer b/changes/6783_big_hammer new file mode 100644 index 0000000..2ff3249 --- /dev/null +++ b/changes/6783_big_hammer @@ -0,0 +1,6 @@ + o Major features (deprecation): + - There's now a "DisableV2DirectoryInfo_" option that prevents us + from serving any directory requests for v2 directory information. + This is for us to test disabling the old deprecated V2 directory + format, so that we can see whether doing so has any effect on + network load. Part of a fix for bug 6783. diff --git a/src/or/config.c b/src/or/config.c index f888426..7e020b8 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -213,6 +213,7 @@ static config_var_t option_vars_[] = { V(DisableAllSwap, BOOL, "0"), V(DisableDebuggerAttachment, BOOL, "1"), V(DisableIOCP, BOOL, "1"), + V(DisableV2DirectoryInfo_, BOOL, "1"), V(DynamicDHGroups, BOOL, "0"), VPORT(DNSPort, LINELIST, NULL), V(DNSListenAddress, LINELIST, NULL), diff --git a/src/or/directory.c b/src/or/directory.c index 6b61fc6..38a423c 100644 --- a/src/or/directory.c +++ b/src/or/directory.c @@ -2805,6 +2805,19 @@ directory_handle_command_get(dir_connection_t *conn, const char *headers, const char *key = url + strlen("/tor/status/"); long lifetime = NETWORKSTATUS_CACHE_LIFETIME; + if (options->DisableV2DirectoryInfo_ && !is_v3) { + static ratelim_t reject_v2_ratelim = RATELIM_INIT(1800); + char *m; + write_http_status_line(conn, 404, "Not found"); + smartlist_free(dir_fps); + geoip_note_ns_response(GEOIP_REJECT_NOT_FOUND); + if ((m = rate_limit_log(&reject_v2_ratelim, approx_time()))) { + log_notice(LD_DIR, "Rejected a v2 networkstatus request.%s", m); + tor_free(m); + } + goto done; + } + if (!is_v3) { dirserv_get_networkstatus_v2_fingerprints(dir_fps, key); if (!strcmpstart(key, "fp/")) diff --git a/src/or/or.h b/src/or/or.h index 45eb467..0f5dbd6 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -3999,6 +3999,16 @@ typedef struct { /** Fraction: */ double PathsNeededToBuildCircuits; + + /** Do we serve v2 directory info at all? This is a temporary option, since + * we'd like to disable v2 directory serving entirely, but we need a way to + * make it temporarily disableable, in order to do fast testing and be + * able to turn it back on if it turns out to be non-workable. + * + * XXXX024 Don't actually leave this in. + */ + int DisableV2DirectoryInfo_; + } or_options_t; /** Persistent state for an onion router, as saved to disk. */

1 0

[tor/release-0.2.4] Tweak bug6783 patch.
by arma＠torproject.org 10 Mar '13

10 Mar '13

commit 926b3d77f18d2345a70f953560f5a5312992aa73 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Mar 6 15:19:04 2013 -0500 Tweak bug6783 patch. --- src/or/config.c | 4 ++++ src/or/or.h | 3 ++- 2 files changed, 6 insertions(+), 1 deletions(-) diff --git a/src/or/config.c b/src/or/config.c index 7e020b8..1337056 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -2380,6 +2380,10 @@ options_validate(or_options_t *old_options, or_options_t *options, REJECT("TokenBucketRefillInterval must be between 1 and 1000 inclusive."); } + if (options->DisableV2DirectoryInfo_ && ! authdir_mode(options)) { + REJECT("DisableV2DirectoryInfo_ set, but we aren't an authority."); + } + if (options->ExcludeExitNodes || options->ExcludeNodes) { options->ExcludeExitNodesUnion_ = routerset_new(); routerset_union(options->ExcludeExitNodesUnion_,options->ExcludeExitNodes); diff --git a/src/or/or.h b/src/or/or.h index 0f5dbd6..c2cd8a6 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -4005,7 +4005,8 @@ typedef struct { * make it temporarily disableable, in order to do fast testing and be * able to turn it back on if it turns out to be non-workable. * - * XXXX024 Don't actually leave this in. + * XXXX025 Make this always-on, or always-off. Right now, it's only + * enableable for authorities. */ int DisableV2DirectoryInfo_;

1 0

[tor/release-0.2.4] set DisableV2DirectoryInfo_ off by default
by arma＠torproject.org 10 Mar '13

10 Mar '13

commit f8960ea22bde03ae7c4cd60af395a541fb36354c Author: Roger Dingledine <arma(a)torproject.org> Date: Sun Mar 10 20:40:15 2013 -0400 set DisableV2DirectoryInfo_ off by default since it's only enableable by authorities, nobody else would be able to start their tor --- src/or/config.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/or/config.c b/src/or/config.c index 1337056..dad5719 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -213,7 +213,7 @@ static config_var_t option_vars_[] = { V(DisableAllSwap, BOOL, "0"), V(DisableDebuggerAttachment, BOOL, "1"), V(DisableIOCP, BOOL, "1"), - V(DisableV2DirectoryInfo_, BOOL, "1"), + V(DisableV2DirectoryInfo_, BOOL, "0"), V(DynamicDHGroups, BOOL, "0"), VPORT(DNSPort, LINELIST, NULL), V(DNSListenAddress, LINELIST, NULL),

1 0

[tor/release-0.2.4] Fix typos in a few log messages
by arma＠torproject.org 10 Mar '13

10 Mar '13

commit 8b4195f0217d24bae6dfac944b469dc05b30bcd6 Author: Benjamin Kerensa <bkerensa(a)ubuntu.com> Date: Sun Mar 10 18:45:23 2013 -0700 Fix typos in a few log messages --- src/or/routerset.c | 2 +- src/or/transports.c | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/src/or/routerset.c b/src/or/routerset.c index 1eca5b6..2e41f7f 100644 --- a/src/or/routerset.c +++ b/src/or/routerset.c @@ -141,7 +141,7 @@ routerset_parse(routerset_t *target, const char *s, const char *description) log_debug(LD_CONFIG, "Adding address %s to %s", nick, description); smartlist_add(target->policies, p); } else { - log_warn(LD_CONFIG, "Entry '%s' in %s is misformed.", nick, + log_warn(LD_CONFIG, "Entry '%s' in %s is malformed.", nick, description); r = -1; tor_free(nick); diff --git a/src/or/transports.c b/src/or/transports.c index 647b293..945d422 100644 --- a/src/or/transports.c +++ b/src/or/transports.c @@ -339,12 +339,12 @@ transport_add_from_config(const tor_addr_t *addr, uint16_t port, transport_free(t); return -1; case 1: - log_info(LD_GENERAL, "Succesfully registered transport %s at %s.", + log_info(LD_GENERAL, "Successfully registered transport %s at %s.", t->name, fmt_addrport(&t->addr, t->port)); transport_free(t); /* falling */ return 0; case 0: - log_info(LD_GENERAL, "Succesfully registered transport %s at %s.", + log_info(LD_GENERAL, "Successfully registered transport %s at %s.", t->name, fmt_addrport(&t->addr, t->port)); return 0; } @@ -676,10 +676,10 @@ register_client_proxy(const managed_proxy_t *mp) transport_free(transport_tmp); break; case 0: - log_info(LD_GENERAL, "Succesfully registered transport %s", t->name); + log_info(LD_GENERAL, "Successfully registered transport %s", t->name); break; case 1: - log_info(LD_GENERAL, "Succesfully registered transport %s", t->name); + log_info(LD_GENERAL, "Successfully registered transport %s", t->name); transport_free(transport_tmp); break; }

1 0