September 2013 - tor-commits - lists.torproject.org

[flashproxy/master] Update facilitator-howto.txt for Debian 7.
by dcf＠torproject.org 21 Sep '13

21 Sep '13

commit f73051bcb6659eb3a7d13f475b1e85fe89451b1a Author: David Fifield <david(a)bamsoftware.com> Date: Fri Sep 20 21:51:55 2013 -0700 Update facilitator-howto.txt for Debian 7. --- doc/facilitator-howto.txt | 30 ++++++------------------------ 1 file changed, 6 insertions(+), 24 deletions(-) diff --git a/doc/facilitator-howto.txt b/doc/facilitator-howto.txt index a51d2b7..9c2b274 100644 --- a/doc/facilitator-howto.txt +++ b/doc/facilitator-howto.txt @@ -1,4 +1,4 @@ -This document describes how to run a flash proxy facilitator on Debian 6. +This document describes how to run a flash proxy facilitator on Debian 7. We will use the domain name fp-facilitator.example.com. == Overview @@ -44,7 +44,7 @@ Install some essential packages and configure a firewall. APT::Install-Recommends "0"; APT::Install-Suggests "0"; EOF - # apt-get remove nfs-common portmap + # apt-get remove portmap # apt-get update # apt-get upgrade # apt-get install shorewall shorewall6 @@ -62,36 +62,18 @@ authentication: Configure the firewall to allow only SSH and HTTPS. # cd /etc/shorewall - # cp /usr/share/doc/shorewall/default-config/{interfaces,policy,rules,zones} . - Edit /etc/shorewall/interfaces: -net eth0 - tcpflags,norfc1918,routefilter,nosmurfs,logmartians - Edit /etc/shorewall/policy: -$FW all ACCEPT -net $FW DROP -all all DROP + # cp /usr/share/doc/shorewall/examples/Universal/{interfaces,policy,rules,zones} . Edit /etc/shorewall/rules: SECTION NEW -SSH/ACCEPT all $FW -HTTPS/ACCEPT all $FW - Edit /etc/shorewall/zones: -fw firewall -net ipv4 +SSH(ACCEPT) net $FW +HTTPS(ACCEPT) net $FW # cd /etc/shorewall6 - # cp /usr/share/doc/shorewall6/default-config/{interfaces,policy,rules,zones} . - Edit /etc/shorewall6/interfaces: -net eth0 - tcpflags - Edit /etc/shorewall6/policy: -$FW all ACCEPT -net $FW DROP -all all DROP + # cp /usr/share/doc/shorewall6/examples/Universal/{interfaces,policy,rules,zones} . Edit /etc/shorewall6/rules: SECTION NEW SSH/ACCEPT all $FW HTTPS/ACCEPT all $FW - Edit /etc/shorewall6/zones: -fw firewall -net ipv6 Edit /etc/default/shorewall and /etc/default/shorewall6 and set

1 0

[flashproxy/master] Put facilitator-reg-daemon instructions before the init script.
by dcf＠torproject.org 21 Sep '13

21 Sep '13

commit e1065b29d4f17a4fbee458f548f1bc01d89cb5af Author: David Fifield <david(a)bamsoftware.com> Date: Fri Sep 20 21:22:14 2013 -0700 Put facilitator-reg-daemon instructions before the init script. --- doc/facilitator-howto.txt | 34 ++++++++++++++++++---------------- 1 file changed, 18 insertions(+), 16 deletions(-) diff --git a/doc/facilitator-howto.txt b/doc/facilitator-howto.txt index 38b02cb..a51d2b7 100644 --- a/doc/facilitator-howto.txt +++ b/doc/facilitator-howto.txt @@ -121,6 +121,24 @@ This installs facilitator.cgi, facilitator, facilitator-email-poller, facilitator-reg-daemon, facilitator-reg, and fac.py to /usr/local/bin. It also installs System V init files to /etc/init.d/. +=== Registration daemon setup + +The facilitator-reg-daemon program requires a private RSA key (used to +decrypt encrypted client registrations). + + # mkdir /etc/flashproxy + # openssl genrsa -out /etc/flashproxy/reg-daemon.key 2048 + # chmod 600 /etc/flashproxy/reg-daemon.key + # openssl rsa -pubout < /etc/flashproxy/reg-daemon.key > reg-daemon.pub + +You will have to edit flashproxy-reg-email and copy the contents of +reg-daemon.pub into the appropriate place. + +Install reg-daemon.key /etc/flashproxy to match what the init script +expects. + +=== Init script setup + # update-rc.d facilitator defaults # /etc/init.d/facilitator start # update-rc.d facilitator-reg-daemon defaults @@ -182,22 +200,6 @@ Copy the new fp-facilitator.pem to the facilitator server as # /etc/init.d/apache2 restart -=== Registration daemon setup - -The facilitator-reg-daemon program requires a private RSA key (used to -decrypt encrypted client registrations). - - # mkdir /etc/flashproxy - # openssl genrsa -out /etc/flashproxy/reg-daemon.key 2048 - # chmod 600 /etc/flashproxy/reg-daemon.key - # openssl rsa -pubout < /etc/flashproxy/reg-daemon.key > reg-daemon.pub - -You will have to edit flashproxy-reg-email and copy the contents of -reg-daemon.pub into the appropriate place. - -Install reg-daemon.key /etc/flashproxy to match what the init script -expects. - === Email poller setup The facilitator-email-poller program requires a password that is used to

1 0

[flashproxy/master] Put facilitator-email-poller init script stuff in the proper section.
by dcf＠torproject.org 21 Sep '13

21 Sep '13

commit b14d3896ccdb35610be2ce1f9fa4906d12c3a520 Author: David Fifield <david(a)bamsoftware.com> Date: Fri Sep 20 21:19:29 2013 -0700 Put facilitator-email-poller init script stuff in the proper section. facilitator-email-poller is optional, unlike facilitator and facilitator-reg-daemon. It will work only if you first do all the steps in gmail-setup.txt. --- doc/facilitator-howto.txt | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/doc/facilitator-howto.txt b/doc/facilitator-howto.txt index 1308a8e..7f49d8a 100644 --- a/doc/facilitator-howto.txt +++ b/doc/facilitator-howto.txt @@ -122,8 +122,6 @@ It also installs System V init files to /etc/init.d/. # update-rc.d facilitator defaults # /etc/init.d/facilitator start - # update-rc.d facilitator-email-poller defaults - # /etc/init.d/facilitator-email-poller start # update-rc.d facilitator-reg-daemon defaults # /etc/init.d/facilitator-reg-daemon start @@ -210,3 +208,6 @@ it not readable or writable by anyone but its owner. Install reg-email.pass to /etc/flashproxy to match what the init script expects. + + # update-rc.d facilitator-email-poller defaults + # /etc/init.d/facilitator-email-poller start

1 0

[flashproxy/master] Make explicit a couple of directories.
by dcf＠torproject.org 21 Sep '13

21 Sep '13

commit da9ed682791dd2aadf66b2da4406bb6f35bbcedd Author: David Fifield <david(a)bamsoftware.com> Date: Fri Sep 20 21:21:55 2013 -0700 Make explicit a couple of directories. --- doc/facilitator-howto.txt | 2 ++ 1 file changed, 2 insertions(+) diff --git a/doc/facilitator-howto.txt b/doc/facilitator-howto.txt index 7f49d8a..38b02cb 100644 --- a/doc/facilitator-howto.txt +++ b/doc/facilitator-howto.txt @@ -111,6 +111,7 @@ Create the user the daemons will run as. Install the programs. + # cd # apt-get install git python-m2crypto make # git clone https://git.torproject.org/flashproxy.git # cd flashproxy/facilitator @@ -186,6 +187,7 @@ Copy the new fp-facilitator.pem to the facilitator server as The facilitator-reg-daemon program requires a private RSA key (used to decrypt encrypted client registrations). + # mkdir /etc/flashproxy # openssl genrsa -out /etc/flashproxy/reg-daemon.key 2048 # chmod 600 /etc/flashproxy/reg-daemon.key # openssl rsa -pubout < /etc/flashproxy/reg-daemon.key > reg-daemon.pub

1 0

[torbrowser/master] update recommended-versions for 2.4.17-beta-2 and 2.3.25-13
by erinn＠torproject.org 20 Sep '13

20 Sep '13

commit a5fb24bfb6f563169efbb13e38f856a4e322b24e Author: Erinn Clark <erinn(a)torproject.org> Date: Fri Sep 20 21:05:48 2013 +0200 update recommended-versions for 2.4.17-beta-2 and 2.3.25-13 --- build-scripts/recommended-versions | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/build-scripts/recommended-versions b/build-scripts/recommended-versions index e96296d..c54b535 100644 --- a/build-scripts/recommended-versions +++ b/build-scripts/recommended-versions @@ -5,12 +5,18 @@ "2.3.25-12-MacOS", "2.3.25-12-Windows", "2.3.25-12-Linux", +"2.3.25-13-MacOS", +"2.3.25-13-Windows", +"2.3.25-13-Linux", "2.4.16-beta-1-MacOS", "2.4.16-beta-1-Windows", "2.4.16-beta-1-Linux", "2.4.17-beta-1-MacOS", "2.4.17-beta-1-Windows", "2.4.17-beta-1-Linux", +"2.4.17-beta-2-MacOS", +"2.4.17-beta-2-Windows", +"2.4.17-beta-2-Linux", "3.0-alpha-3-Linux", "3.0-alpha-3-MacOS", "3.0-alpha-3-Windows"

1 0

[torbrowser/master] Merge branch 'maint-2.4'
by erinn＠torproject.org 20 Sep '13

20 Sep '13

commit b8669ef72f43244ed93a657c9c075b19d76b933c Merge: 884d629 a5fb24b Author: Erinn Clark <erinn(a)torproject.org> Date: Fri Sep 20 21:12:47 2013 +0200 Merge branch 'maint-2.4' build-scripts/recommended-versions | 6 ++++++ 1 file changed, 6 insertions(+)

1 0

[torbrowser/maint-2.4] update recommended-versions for 2.4.17-beta-2 and 2.3.25-13
by erinn＠torproject.org 20 Sep '13

20 Sep '13

commit a5fb24bfb6f563169efbb13e38f856a4e322b24e Author: Erinn Clark <erinn(a)torproject.org> Date: Fri Sep 20 21:05:48 2013 +0200 update recommended-versions for 2.4.17-beta-2 and 2.3.25-13 --- build-scripts/recommended-versions | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/build-scripts/recommended-versions b/build-scripts/recommended-versions index e96296d..c54b535 100644 --- a/build-scripts/recommended-versions +++ b/build-scripts/recommended-versions @@ -5,12 +5,18 @@ "2.3.25-12-MacOS", "2.3.25-12-Windows", "2.3.25-12-Linux", +"2.3.25-13-MacOS", +"2.3.25-13-Windows", +"2.3.25-13-Linux", "2.4.16-beta-1-MacOS", "2.4.16-beta-1-Windows", "2.4.16-beta-1-Linux", "2.4.17-beta-1-MacOS", "2.4.17-beta-1-Windows", "2.4.17-beta-1-Linux", +"2.4.17-beta-2-MacOS", +"2.4.17-beta-2-Windows", +"2.4.17-beta-2-Linux", "3.0-alpha-3-Linux", "3.0-alpha-3-MacOS", "3.0-alpha-3-Windows"

1 0

[translation/abouttor-homepage_completed] Update translations for abouttor-homepage_completed
by translation＠torproject.org 20 Sep '13

20 Sep '13

commit a14beed1dbe726887d33bf8ddec8625906236657 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Sep 20 18:16:17 2013 +0000 Update translations for abouttor-homepage_completed --- lv/aboutTor.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lv/aboutTor.dtd b/lv/aboutTor.dtd index 3db02bc..7dc0e57 100644 --- a/lv/aboutTor.dtd +++ b/lv/aboutTor.dtd @@ -32,7 +32,7 @@ - The sentence contains two embedded links for "securely" and - the search engine ("Startpage" or "DuckDuckGo"). --> -<!ENTITY aboutTor.searchSPPost.link "https://startpage.com/do/search"> +<!ENTITY aboutTor.searchSPPost.link "https://startpage.com/rth/search"> <!ENTITY aboutTor.searchDDGPost.link "https://duckduckgo.com/html/"> <!ENTITY aboutTor.searchSP.privacy.beforeLink.label "Meklēt"> <!ENTITY aboutTor.searchDDG.privacy.beforeLink.label "Meklēt">

1 0

[translation/abouttor-homepage] Update translations for abouttor-homepage
by translation＠torproject.org 20 Sep '13

20 Sep '13

commit db203cfb88ab2e1cef70e3f4761e330e8beac45b Author: Translation commit bot <translation(a)torproject.org> Date: Fri Sep 20 18:16:12 2013 +0000 Update translations for abouttor-homepage --- lv/aboutTor.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lv/aboutTor.dtd b/lv/aboutTor.dtd index 7db375b..7dc0e57 100644 --- a/lv/aboutTor.dtd +++ b/lv/aboutTor.dtd @@ -32,7 +32,7 @@ - The sentence contains two embedded links for "securely" and - the search engine ("Startpage" or "DuckDuckGo"). --> -<!ENTITY aboutTor.searchSPPost.link ""> +<!ENTITY aboutTor.searchSPPost.link "https://startpage.com/rth/search"> <!ENTITY aboutTor.searchDDGPost.link "https://duckduckgo.com/html/"> <!ENTITY aboutTor.searchSP.privacy.beforeLink.label "Meklēt"> <!ENTITY aboutTor.searchDDG.privacy.beforeLink.label "Meklēt">

1 0

r26357: {website} add OSX version info to the download easy page (website/trunk/download/en)
by Erinn Clark 20 Sep '13

20 Sep '13

Author: erinn Date: 2013-09-20 17:23:33 +0000 (Fri, 20 Sep 2013) New Revision: 26357 Modified: website/trunk/download/en/download-easy.wml Log: add OSX version info to the download easy page Modified: website/trunk/download/en/download-easy.wml =================================================================== --- website/trunk/download/en/download-easy.wml 2013-09-20 17:17:29 UTC (rev 26356) +++ website/trunk/download/en/download-easy.wml 2013-09-20 17:23:33 UTC (rev 26357) @@ -68,7 +68,7 @@ </form> <div class="desc"> <h2>Tor Browser Bundle for Mac</h2> - <em>Version <version-torbrowserbundleosx32> - OS X</em> + <em>Version <version-torbrowserbundleosx32> - OS X (10.6+)</em> <p>Everything you need to safely browse the Internet. This package requires no installation. Just extract it and run. <a href="<page projects/torbrowser>">Learn more »</a></p> </div> <p class="alt-dl">Not Using Mac? Download for <a href="#windows">Windows</a> or <a href="#linux">GNU/Linux</a></p> @@ -89,7 +89,7 @@ </form> <div class="desc"> <h2>Tor Browser Bundle for 64-Bit Mac</h2> - <em>Version <version-torbrowserbundleosx64> - OS X (64-Bit)</em> + <em>Version <version-torbrowserbundleosx64> - OS X (64-Bit) (10.6+)</em> <p>Everything you need to safely browse the Internet. This package requires no installation. Just extract it and run. <a href="<page projects/torbrowser>">Learn more »</a></p> </div> <p class="alt-dl">Not Using Mac? Download for <a href="#windows">Windows</a> or <a href="#linux">GNU/Linux</a></p>

1 0