April 2014 - tor-commits - lists.torproject.org

[meek/extension] Do the exit-on-stdin-EOF trick on Windows only.
by dcf＠torproject.org 09 Apr '14

09 Apr '14

commit 7ce93df22d535a3b2d6bc60df53c3435a002fdee Author: David Fifield <david(a)bamsoftware.com> Date: Tue Apr 8 12:04:38 2014 -0700 Do the exit-on-stdin-EOF trick on Windows only. It looks like stdin gets closed by tor, so on other platforms without terminateprocess-buffer, the program was exiting immediately. --- meek-client-torbrowser/linux.go | 2 ++ meek-client-torbrowser/mac.go | 2 ++ meek-client-torbrowser/main.go | 24 +++++++++++++----------- meek-client-torbrowser/windows.go | 3 +++ 4 files changed, 20 insertions(+), 11 deletions(-) diff --git a/meek-client-torbrowser/linux.go b/meek-client-torbrowser/linux.go index 73e363a..04d17c8 100644 --- a/meek-client-torbrowser/linux.go +++ b/meek-client-torbrowser/linux.go @@ -5,6 +5,8 @@ package main +var exitOnStdinEOF = false + var firefoxPath = "Browser/firefox" var firefoxProfilePath = "Data/Browser/profile.meek-http-helper" var meekClientPath = "Tor/PluggableTransports/meek-client" diff --git a/meek-client-torbrowser/mac.go b/meek-client-torbrowser/mac.go index 6830da1..8791403 100644 --- a/meek-client-torbrowser/mac.go +++ b/meek-client-torbrowser/mac.go @@ -5,6 +5,8 @@ package main +var exitOnStdinEOF = false + var firefoxPath = "../Contents/MacOS/TorBrowser.app/Contents/MacOS/firefox" var firefoxProfilePath = "../Data/Browser/profile.meek-http-helper" var meekClientPath = "PluggableTransports/meek-client" diff --git a/meek-client-torbrowser/main.go b/meek-client-torbrowser/main.go index ae98328..1d55eff 100644 --- a/meek-client-torbrowser/main.go +++ b/meek-client-torbrowser/main.go @@ -148,17 +148,19 @@ func main() { } defer logKill(meekClientCmd.Process) - // On Windows, we don't get a SIGINT or SIGTERM, rather we are killed - // without a chance to clean up our subprocesses. When run inside - // terminateprocess-buffer, it is instead terminateprocess-buffer that - // is killed, and we can detect that event by that our stdin gets - // closed. - // https://trac.torproject.org/projects/tor/ticket/9330 - go func() { - io.Copy(ioutil.Discard, os.Stdin) - log.Printf("synthesizing SIGTERM because of stdin close") - sigChan <- syscall.SIGTERM - }() + if exitOnStdinEOF { + // On Windows, we don't get a SIGINT or SIGTERM, rather we are killed + // without a chance to clean up our subprocesses. When run inside + // terminateprocess-buffer, it is instead terminateprocess-buffer that + // is killed, and we can detect that event by that our stdin gets + // closed. + // https://trac.torproject.org/projects/tor/ticket/9330 + go func() { + io.Copy(ioutil.Discard, os.Stdin) + log.Printf("synthesizing SIGTERM because of stdin close") + sigChan <- syscall.SIGTERM + }() + } sig := <-sigChan log.Printf("sig %s", sig) diff --git a/meek-client-torbrowser/windows.go b/meek-client-torbrowser/windows.go index ed590d8..5e8ea0d 100644 --- a/meek-client-torbrowser/windows.go +++ b/meek-client-torbrowser/windows.go @@ -5,6 +5,9 @@ package main +// Workaround for process termination on Windows only. +var exitOnStdinEOF = true + var firefoxPath string = "Browser/firefox.exe" var firefoxProfilePath = "Data/Browser/profile.meek-http-helper" var meekClientPath = "Tor/PluggableTransports/meek-client.exe"

1 0

[tor/master] note a missing word
by arma＠torproject.org 09 Apr '14

09 Apr '14

commit aacbf551c459e3bccbd7dec53fcefbceaab98a33 Author: Roger Dingledine <arma(a)torproject.org> Date: Wed Apr 9 01:01:52 2014 -0400 note a missing word --- src/or/routerlist.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/or/routerlist.c b/src/or/routerlist.c index f1bd12c..0993e56 100644 --- a/src/or/routerlist.c +++ b/src/or/routerlist.c @@ -98,7 +98,7 @@ static smartlist_t *trusted_dir_servers = NULL; * and all fallback directory servers. */ static smartlist_t *fallback_dir_servers = NULL; -/** List of for a given authority, and download status for latest certificate. +/** List of [XXX what?] for a given authority, and download status for latest certificate. */ struct cert_list_t { /*

1 0

[translation/tor-launcher-properties_completed] Update translations for tor-launcher-properties_completed
by translation＠torproject.org 09 Apr '14

09 Apr '14

commit f78ecd053ea03fc175e5e866366a1ad7a8257a18 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Apr 9 02:45:34 2014 +0000 Update translations for tor-launcher-properties_completed --- km/torlauncher.properties | 1 + 1 file changed, 1 insertion(+) diff --git a/km/torlauncher.properties b/km/torlauncher.properties index 22d653e..6256079 100644 --- a/km/torlauncher.properties +++ b/km/torlauncher.properties @@ -55,3 +55,4 @@ torlauncher.bootstrapWarning.identity=អត្តសញ្ញាណមិ torlauncher.bootstrapWarning.timeout=អស់ពេលការតភ្ជាប់ torlauncher.bootstrapWarning.noroute=គ្មាន route និង host torlauncher.bootstrapWarning.ioerror=កំហុស អាន/សរសេរ +torlauncher.bootstrapWarning.pt_missing=បាត់ការបញ្ជូនដែលអាចដោតបាន

1 0

[translation/tor-launcher-properties] Update translations for tor-launcher-properties
by translation＠torproject.org 09 Apr '14

09 Apr '14

commit 754387f6da1391279e30cc19f1f2d0284ef7ee07 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Apr 9 02:45:30 2014 +0000 Update translations for tor-launcher-properties --- km/torlauncher.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/km/torlauncher.properties b/km/torlauncher.properties index 56c3f4e..6256079 100644 --- a/km/torlauncher.properties +++ b/km/torlauncher.properties @@ -55,4 +55,4 @@ torlauncher.bootstrapWarning.identity=អត្តសញ្ញាណមិ torlauncher.bootstrapWarning.timeout=អស់ពេលការតភ្ជាប់ torlauncher.bootstrapWarning.noroute=គ្មាន route និង host torlauncher.bootstrapWarning.ioerror=កំហុស អាន/សរសេរ -torlauncher.bootstrapWarning.pt_missing=missing pluggable transport +torlauncher.bootstrapWarning.pt_missing=បាត់ការបញ្ជូនដែលអាចដោតបាន

1 0

[tor/master] Move and combine some 0.2.5.4-alpha changelog sections.
by nickm＠torproject.org 09 Apr '14

09 Apr '14

commit ce99efd1f0b84d64e947157ef79855465c640969 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Apr 8 20:55:25 2014 -0400 Move and combine some 0.2.5.4-alpha changelog sections. --- ChangeLog | 88 ++++++++++++++++++++++++------------------------------------- 1 file changed, 35 insertions(+), 53 deletions(-) diff --git a/ChangeLog b/ChangeLog index 6a9d2b1..8f2244e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -6,11 +6,11 @@ Changes in version 0.2.5.4-alpha - 2014-04-?? descriptors from Tor relays running any version of Tor prior to Tor 0.2.3.16-alpha. Resolves ticket 11149. - o Minor features (relay): - - If a circuit timed out for at least 3 minutes check if we have a new - external IP address the next time we run our routine checks. If our - IP address has changed, then publish a new descriptor with the new - IP address. Resolves ticket 2454. + o Major features (relay performance): + - Faster server-side lookups of rendezvous and introduction point + circuits by using hashtables instead of linear searches over all + the circuits. These functions previously accounted between 3 and + 7% of CPU usage on some busy relays. o Major bugfixes (undefined behavior): - Fix two instances of possible undefined behavior in channeltls.c @@ -23,12 +23,9 @@ Changes in version 0.2.5.4-alpha - 2014-04-?? - Fix another possibly undefined pointer operations in the eventdns fallback implementation. Another case of bug #10363; bugfix on 0.1.2.1-alpha. - - o Minor bugfixes (build): - - Build the torify.1 manpage again. Previously, we were only - trying to build it when also building tor-fw-helper. That's why - we didn't notice that we'd broken the ability to build it. - Fixes bug 11321; bugfix on 0.2.5.1-alpha. + - Use AddressSanitizer and Ubsan sanitizers (in clang-3.4) to fix some + miscellaneous errors in our tests and codebase. Fix for bug 11232. + Bugfixes on versions back as far as 0.2.1.11-alpha. o Minor bugfixes (logging): - Log only one message when we start logging in an unsafe @@ -52,24 +49,28 @@ Changes in version 0.2.5.4-alpha - 2014-04-?? - Fix a minor memory leak that occurred when signing a directory object. Fixes bug 11275; bugfix on 0.2.4.13-alpha. - o Minor bugfixes (build): + o Minor bugfixes (platform-specific): - Fix compilation on Solaris, which does not have <endian.h>. Fixes bug 11426; bugfix on 0.2.5.3-alpha. + - When dumping a malformed directory object to disk, save it in binary + mode on windows, not text mode. Fixes bug 11342; bugfix on + 0.2.2.1-alpha. + - When reporting a failure from make_socket_reuseable(), don't + report a warning when we get a failure from an incoming socket + on OSX. Fix for bug 10081. - o Minor bugfixes (misc): + o Minor bugfixes (trivial memory leaks): - Free placeholder entries in our circuit table at exit; fixes a harmless memory leak. Fixes bug 11278; bugfix on 0.2.5.1-alpha. - - o Minor bugfixes (hidden service): - - Only retry attempts to connect to a chosen rendezvous point 8 times, - not 30. Fixes bug #4241; bugfix on 0.1.0.1-rc. - - o Minor bugfixes (misc): - Resolve some memory leaks found by coverity in the unit tests, on exit in tor-gencert, and on a failure to compute digests for our own keys when generating a v3 networkstatus vote. These leaks should never have affected anyone in practice. + o Minor bugfixes (hidden service): + - Only retry attempts to connect to a chosen rendezvous point 8 times, + not 30. Fixes bug #4241; bugfix on 0.1.0.1-rc. + o Minor bugfixes (bridge client): - Stop accepting bridge lines containing hostnames. Doing so allowed clients to perform DNS requests on the hostnames, which was not @@ -79,32 +80,26 @@ Changes in version 0.2.5.4-alpha - 2014-04-?? - Stop leaking memory when we successfully resolve a PTR record. Fixes bug 11437; bugfix on 0.2.4.7-alpha. - o Minor bugfixes (undefined behavior): - - Use AddressSanitizer and Ubsan sanitizers (in clang-3.4) to fix some - miscellaneous errors in our tests and codebase. Fix for bug 11232. - Bugfixes on versions back as far as 0.2.1.11-alpha. - o Minor bugfixes (windows): - - When dumping a malformed directory object to disk, save it in binary - mode on windows, not text mode. Fixes bug 11342; bugfix on - 0.2.2.1-alpha. o Minor bugfixes (IPv6): - When using DNSPort and AutomapHostsOnResolve, respond to AAAA requests with AAAA automapped answers. Fixes bug 10468; bugfix on 0.2.4.7-alpha. + o Minor features (relay): + - If a circuit timed out for at least 3 minutes check if we have a new + external IP address the next time we run our routine checks. If our + IP address has changed, then publish a new descriptor with the new + IP address. Resolves ticket 2454. + - Warn less verbosely when receiving a misformed ESTABLISH_RENDEZVOUS + cell. Fixes ticket 11279. + o Minor features (controller): - Make the entire exit policy available from the control port via GETINFO exit-policy/*. Implements enhancement #7952. Patch from "rl1987". - o Minor features (performance): - - Faster server-side lookups of rendezvous and introduction point - circuits by using hashtables instead of linear searches over all - the circuits. These functions previously accounted between 3 and - 7% of CPU usage on some busy relays. - o Minor features (misc): - Always check return values for unlink, munmap, UnmapViewOfFile; check strftime return values more often. In some cases all we @@ -123,35 +118,22 @@ Changes in version 0.2.5.4-alpha - 2014-04-?? to try to figure out why we might be cleaning a microdescriptor as old if it's still referenced by a live node. - o Minor features (relay): - - Warn less verbosely when receiving a misformed ESTABLISH_RENDEZVOUS - cell. Fixes ticket 11279. - - o Minor features (relay, OSX): - - When reporting a failure from make_socket_reuseable(), don't - report a warning when we get a failure from an incoming socket - on OSX. Fix for bug 10081. - - o Documentation fixes: + o Documentation: + - Build the torify.1 manpage again. Previously, we were only + trying to build it when also building tor-fw-helper. That's why + we didn't notice that we'd broken the ability to build it. + Fixes bug 11321; bugfix on 0.2.5.1-alpha. - Fix the layout of the SOCKSPort flags in the manpage. Fixes bug 11061; bugfix on 0.2.4.7-alpha. - - o Documentation: - Correctly document that we search for a system torrc file before looking in ~/.torrc. Fixes documentation side of 9213; bugfix on 0.2.3.18-rc. - - o Documentation: - Resolve warnings from Doxygen. o Code simplifications and refactoring: - Removing is_internal_IP() function. Resolves ticket 4645. - - o Code simplifications and refactoring: - - Remove unused function circuit_dump_by_chan from circuitlist.c. Closes - issue #9107; patch from "marek". - - o Code simplification and refactoring: + - Remove unused function circuit_dump_by_chan from circuitlist.c. Closes + issue #9107; patch from "marek". - Change our use of the ENUM_BF macro to avoid declarations that confuse Doxygen.

1 0

[tor/master] Oops, actually add the changelog entries, lightly categorized
by nickm＠torproject.org 09 Apr '14

09 Apr '14

commit 2c69d344d9c395329a44b89c87a373f05779e5b5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Apr 8 20:48:25 2014 -0400 Oops, actually add the changelog entries, lightly categorized --- ChangeLog | 163 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 163 insertions(+) diff --git a/ChangeLog b/ChangeLog index 6e329fe..6a9d2b1 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,166 @@ +Changes in version 0.2.5.4-alpha - 2014-04-?? + + o Deprecated versions: + - Tor 0.2.2.x has reached end-of-life; it has received no patches or + attention for some while. Directory authorities no longer accept + descriptors from Tor relays running any version of Tor prior to Tor + 0.2.3.16-alpha. Resolves ticket 11149. + + o Minor features (relay): + - If a circuit timed out for at least 3 minutes check if we have a new + external IP address the next time we run our routine checks. If our + IP address has changed, then publish a new descriptor with the new + IP address. Resolves ticket 2454. + + o Major bugfixes (undefined behavior): + - Fix two instances of possible undefined behavior in channeltls.c + that could, under unlucky circumstances, have led to a pointer + overflow. Fixes bug #10363; bugfixes on 0.2.0.10-alpha and + 0.2.3.6-alpha. Reported by "bobnomnom". + - Fix another possibly undefined pointer operations in tor_memmem + fallback implementation. Another case of bug #10363; bugfix on + 0.1.1.1-alpha. + - Fix another possibly undefined pointer operations in the eventdns + fallback implementation. Another case of bug #10363; bugfix on + 0.1.2.1-alpha. + + o Minor bugfixes (build): + - Build the torify.1 manpage again. Previously, we were only + trying to build it when also building tor-fw-helper. That's why + we didn't notice that we'd broken the ability to build it. + Fixes bug 11321; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (logging): + - Log only one message when we start logging in an unsafe + way. Previously, we would log as many messages as we had + problems. Fix for #9870; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (tor-fw-helper): + - Allow tor-fw-helper to build again by adding src/ext to its + CPPFLAGS. Fixes bug 11296; bugfix on 0.2.5.3-alpha. + + o Minor bugfixes (bridges): + - Avoid potential crashes or bad behavior when launching a + server-side managed proxy with ORPort or ExtORPort temporarily + disabled. Fixes bug 9650; bugfix on 0.2.3.16-alpha. + + o Minor bugfixes (misc): + - Don't re-initialize a second set of openssl mutexes when starting + up. Fixes bug 11726; bugfix on 0.2.5.3-alpha. + + o Minor bugfixes (memory leaks): + - Fix a minor memory leak that occurred when signing a directory + object. Fixes bug 11275; bugfix on 0.2.4.13-alpha. + + o Minor bugfixes (build): + - Fix compilation on Solaris, which does not have <endian.h>. + Fixes bug 11426; bugfix on 0.2.5.3-alpha. + + o Minor bugfixes (misc): + - Free placeholder entries in our circuit table at exit; fixes + a harmless memory leak. Fixes bug 11278; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (hidden service): + - Only retry attempts to connect to a chosen rendezvous point 8 times, + not 30. Fixes bug #4241; bugfix on 0.1.0.1-rc. + + o Minor bugfixes (misc): + - Resolve some memory leaks found by coverity in the unit tests, + on exit in tor-gencert, and on a failure to compute digests + for our own keys when generating a v3 networkstatus vote. + These leaks should never have affected anyone in practice. + + o Minor bugfixes (bridge client): + - Stop accepting bridge lines containing hostnames. Doing so allowed + clients to perform DNS requests on the hostnames, which was not + sensible behavior. Fixes bug 10801; bugfix on 0.2.0.1-alpha. + + o Minor bugfixes (exit): + - Stop leaking memory when we successfully resolve a PTR record. + Fixes bug 11437; bugfix on 0.2.4.7-alpha. + + o Minor bugfixes (undefined behavior): + - Use AddressSanitizer and Ubsan sanitizers (in clang-3.4) to fix some + miscellaneous errors in our tests and codebase. Fix for bug 11232. + Bugfixes on versions back as far as 0.2.1.11-alpha. + + o Minor bugfixes (windows): + - When dumping a malformed directory object to disk, save it in binary + mode on windows, not text mode. Fixes bug 11342; bugfix on + 0.2.2.1-alpha. + + o Minor bugfixes (IPv6): + - When using DNSPort and AutomapHostsOnResolve, respond to AAAA + requests with AAAA automapped answers. Fixes bug 10468; bugfix + on 0.2.4.7-alpha. + + o Minor features (controller): + - Make the entire exit policy available from the control port via + GETINFO exit-policy/*. Implements enhancement #7952. Patch from + "rl1987". + + o Minor features (performance): + - Faster server-side lookups of rendezvous and introduction point + circuits by using hashtables instead of linear searches over all + the circuits. These functions previously accounted between 3 and + 7% of CPU usage on some busy relays. + + o Minor features (misc): + - Always check return values for unlink, munmap, UnmapViewOfFile; + check strftime return values more often. In some cases all we + can do is report a warning, but this may help prevent deeper + bugs from going unnoticed. Closes ticket 8787. + + o Minor features (bridge client): + - Report a failure to connect to a bridge because its transport + type has no configured pluggable transport as a new type of bootstrap + failure. Resolves ticket 9665. Patch from Fábio J. Bertinatto. + + o Minor features (diagnostic): + - Try harder to diagnose a possible cause of bug 7164, which causes + intermittent "microdesc_free() called but md was still referenced" + warnings. We now log more information about the likely error case, + to try to figure out why we might be cleaning a microdescriptor + as old if it's still referenced by a live node. + + o Minor features (relay): + - Warn less verbosely when receiving a misformed ESTABLISH_RENDEZVOUS + cell. Fixes ticket 11279. + + o Minor features (relay, OSX): + - When reporting a failure from make_socket_reuseable(), don't + report a warning when we get a failure from an incoming socket + on OSX. Fix for bug 10081. + + o Documentation fixes: + - Fix the layout of the SOCKSPort flags in the manpage. Fixes bug + 11061; bugfix on 0.2.4.7-alpha. + + o Documentation: + - Correctly document that we search for a system torrc file before + looking in ~/.torrc. Fixes documentation side of 9213; bugfix + on 0.2.3.18-rc. + + o Documentation: + - Resolve warnings from Doxygen. + + o Code simplifications and refactoring: + - Removing is_internal_IP() function. Resolves ticket 4645. + + o Code simplifications and refactoring: + - Remove unused function circuit_dump_by_chan from circuitlist.c. Closes + issue #9107; patch from "marek". + + o Code simplification and refactoring: + - Change our use of the ENUM_BF macro to avoid declarations that + confuse Doxygen. + + o Removed code: + - Remove all code for the long unused v1 directory protocol. Resolves + ticket 11070. + + + Changes in version 0.2.5.3-alpha - 2014-03-22 Tor 0.2.5.3-alpha includes all the fixes from 0.2.4.21. It contains two new anti-DoS features for Tor relays, resolves a bug that kept

1 0

[tor/master] Teach the get_mozilla_ciphers.py script to parse recent firefoxen
by nickm＠torproject.org 09 Apr '14

09 Apr '14

commit d00dc9f7d1b98dd80bbc890db1ddf497aae3bb9e Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Apr 8 03:19:38 2014 -0400 Teach the get_mozilla_ciphers.py script to parse recent firefoxen --- src/common/get_mozilla_ciphers.py | 30 ++++++++++++++++++++++++------ 1 file changed, 24 insertions(+), 6 deletions(-) diff --git a/src/common/get_mozilla_ciphers.py b/src/common/get_mozilla_ciphers.py index c7e9a84..0636eb3 100644 --- a/src/common/get_mozilla_ciphers.py +++ b/src/common/get_mozilla_ciphers.py @@ -41,12 +41,12 @@ fileA = open(ff('security/manager/ssl/src/nsNSSComponent.cpp'),'r') inCipherSection = False cipherLines = [] for line in fileA: - if line.startswith('static CipherPref CipherPrefs'): + if line.startswith('static const CipherPref sCipherPrefs[]'): # Get the starting boundary of the Cipher Preferences inCipherSection = True elif inCipherSection: line = line.strip() - if line.startswith('{NULL, 0}'): + if line.startswith('{ nullptr, 0}'): # At the ending boundary of the Cipher Prefs break else: @@ -56,12 +56,30 @@ fileA.close() # Parse the lines and put them into a dict ciphers = {} cipher_pref = {} +key_pending = None for line in cipherLines: - m = re.search(r'^{\s*\"([^\"]+)\",\s*(\S*)\s*}', line) + m = re.search(r'^{\s*\"([^\"]+)\",\s*(\S+)\s*(?:,\s*(true|false))?\s*}', line) if m: - key,value = m.groups() - ciphers[key] = value - cipher_pref[value] = key + assert not key_pending + key,value,enabled = m.groups() + if enabled == 'true': + ciphers[key] = value + cipher_pref[value] = key + continue + m = re.search(r'^{\s*\"([^\"]+)\",', line) + if m: + assert not key_pending + key_pending = m.group(1) + continue + m = re.search(r'^\s*(\S+)(?:,\s*(true|false))?\s*}', line) + if m: + assert key_pending + key = key_pending + value,enabled = m.groups() + key_pending = None + if enabled == 'true': + ciphers[key] = value + cipher_pref[value] = key #### # Now find the correct order for the ciphers

1 0

[tor/master] Update ciphers.inc to match ff28
by nickm＠torproject.org 09 Apr '14

09 Apr '14

commit 4231729176c63d28f7adb61074f79464e2ee73a7 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Apr 8 11:31:48 2014 -0400 Update ciphers.inc to match ff28 The major changes are to re-order some ciphers, to drop the ECDH suites (note: *not* ECDHE: ECDHE is still there), to kill off some made-up stuff (like the SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA suite), to drop some of the DSS suites... *and* to enable the ECDHE+GCM ciphersuites. This change is autogenerated by get_mozilla_ciphers.py from Firefox 28 and OpenSSL 1.0.1g. Resolves ticket 11438. --- changes/ff28_ciphers | 6 ++ src/common/ciphers.inc | 169 ++++++++++++++++-------------------------------- 2 files changed, 60 insertions(+), 115 deletions(-) diff --git a/changes/ff28_ciphers b/changes/ff28_ciphers new file mode 100644 index 0000000..05eb4e9 --- /dev/null +++ b/changes/ff28_ciphers @@ -0,0 +1,6 @@ + o Minor features (performance, compatibility): + - Update the list of TLS cipehrsuites that a client advertises + to match those advertised by Firefox 28. This enables selection of + (fast) GCM ciphersuites, disables some strange old ciphers, and + disables the ECDH (not to be confused with ECDHE) ciphersuites. + Resolves ticket 11438. diff --git a/src/common/ciphers.inc b/src/common/ciphers.inc index 137d78b..ab4ac40 100644 --- a/src/common/ciphers.inc +++ b/src/common/ciphers.inc @@ -4,86 +4,51 @@ * * This file was automatically generated by get_mozilla_ciphers.py. */ -#ifdef TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA - CIPHER(0xc00a, TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA) -#else - XCIPHER(0xc00a, TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA) -#endif -#ifdef TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA - CIPHER(0xc014, TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA) -#else - XCIPHER(0xc014, TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA) -#endif -#ifdef TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA - CIPHER(0x0088, TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA) -#else - XCIPHER(0x0088, TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA) -#endif -#ifdef TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA - CIPHER(0x0087, TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA) +#ifdef TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 + CIPHER(0xc02b, TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256) #else - XCIPHER(0x0087, TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA) + XCIPHER(0xc02b, TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256) #endif -#ifdef TLS1_TXT_DHE_RSA_WITH_AES_256_SHA - CIPHER(0x0039, TLS1_TXT_DHE_RSA_WITH_AES_256_SHA) +#ifdef TLS1_TXT_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + CIPHER(0xc02f, TLS1_TXT_ECDHE_RSA_WITH_AES_128_GCM_SHA256) #else - XCIPHER(0x0039, TLS1_TXT_DHE_RSA_WITH_AES_256_SHA) + XCIPHER(0xc02f, TLS1_TXT_ECDHE_RSA_WITH_AES_128_GCM_SHA256) #endif -#ifdef TLS1_TXT_DHE_DSS_WITH_AES_256_SHA - CIPHER(0x0038, TLS1_TXT_DHE_DSS_WITH_AES_256_SHA) +#ifdef TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA + CIPHER(0xc00a, TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA) #else - XCIPHER(0x0038, TLS1_TXT_DHE_DSS_WITH_AES_256_SHA) + XCIPHER(0xc00a, TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA) #endif -#ifdef TLS1_TXT_ECDH_RSA_WITH_AES_256_CBC_SHA - CIPHER(0xc00f, TLS1_TXT_ECDH_RSA_WITH_AES_256_CBC_SHA) +#ifdef TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA + CIPHER(0xc009, TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA) #else - XCIPHER(0xc00f, TLS1_TXT_ECDH_RSA_WITH_AES_256_CBC_SHA) + XCIPHER(0xc009, TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA) #endif -#ifdef TLS1_TXT_ECDH_ECDSA_WITH_AES_256_CBC_SHA - CIPHER(0xc005, TLS1_TXT_ECDH_ECDSA_WITH_AES_256_CBC_SHA) +#ifdef TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA + CIPHER(0xc013, TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA) #else - XCIPHER(0xc005, TLS1_TXT_ECDH_ECDSA_WITH_AES_256_CBC_SHA) + XCIPHER(0xc013, TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA) #endif -#ifdef TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA - CIPHER(0x0084, TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA) +#ifdef TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA + CIPHER(0xc014, TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA) #else - XCIPHER(0x0084, TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA) + XCIPHER(0xc014, TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA) #endif -#ifdef TLS1_TXT_RSA_WITH_AES_256_SHA - CIPHER(0x0035, TLS1_TXT_RSA_WITH_AES_256_SHA) +#ifdef TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA + CIPHER(0xc012, TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA) #else - XCIPHER(0x0035, TLS1_TXT_RSA_WITH_AES_256_SHA) + XCIPHER(0xc012, TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA) #endif #ifdef TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA CIPHER(0xc007, TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA) #else XCIPHER(0xc007, TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA) #endif -#ifdef TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA - CIPHER(0xc009, TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA) -#else - XCIPHER(0xc009, TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA) -#endif #ifdef TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA CIPHER(0xc011, TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA) #else XCIPHER(0xc011, TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA) #endif -#ifdef TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA - CIPHER(0xc013, TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA) -#else - XCIPHER(0xc013, TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA) -#endif -#ifdef TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA - CIPHER(0x0045, TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA) -#else - XCIPHER(0x0045, TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA) -#endif -#ifdef TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA - CIPHER(0x0044, TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA) -#else - XCIPHER(0x0044, TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA) -#endif #ifdef TLS1_TXT_DHE_RSA_WITH_AES_128_SHA CIPHER(0x0033, TLS1_TXT_DHE_RSA_WITH_AES_128_SHA) #else @@ -94,89 +59,63 @@ #else XCIPHER(0x0032, TLS1_TXT_DHE_DSS_WITH_AES_128_SHA) #endif -#ifdef TLS1_TXT_ECDH_RSA_WITH_RC4_128_SHA - CIPHER(0xc00c, TLS1_TXT_ECDH_RSA_WITH_RC4_128_SHA) -#else - XCIPHER(0xc00c, TLS1_TXT_ECDH_RSA_WITH_RC4_128_SHA) -#endif -#ifdef TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA - CIPHER(0xc00e, TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA) -#else - XCIPHER(0xc00e, TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA) -#endif -#ifdef TLS1_TXT_ECDH_ECDSA_WITH_RC4_128_SHA - CIPHER(0xc002, TLS1_TXT_ECDH_ECDSA_WITH_RC4_128_SHA) -#else - XCIPHER(0xc002, TLS1_TXT_ECDH_ECDSA_WITH_RC4_128_SHA) -#endif -#ifdef TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA - CIPHER(0xc004, TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA) +#ifdef TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA + CIPHER(0x0045, TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA) #else - XCIPHER(0xc004, TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA) + XCIPHER(0x0045, TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA) #endif -#ifdef TLS1_TXT_RSA_WITH_SEED_SHA - CIPHER(0x0096, TLS1_TXT_RSA_WITH_SEED_SHA) +#ifdef TLS1_TXT_DHE_RSA_WITH_AES_256_SHA + CIPHER(0x0039, TLS1_TXT_DHE_RSA_WITH_AES_256_SHA) #else - XCIPHER(0x0096, TLS1_TXT_RSA_WITH_SEED_SHA) + XCIPHER(0x0039, TLS1_TXT_DHE_RSA_WITH_AES_256_SHA) #endif -#ifdef TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA - CIPHER(0x0041, TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA) +#ifdef TLS1_TXT_DHE_DSS_WITH_AES_256_SHA + CIPHER(0x0038, TLS1_TXT_DHE_DSS_WITH_AES_256_SHA) #else - XCIPHER(0x0041, TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA) + XCIPHER(0x0038, TLS1_TXT_DHE_DSS_WITH_AES_256_SHA) #endif -#ifdef SSL3_TXT_RSA_RC4_128_MD5 - CIPHER(0x0004, SSL3_TXT_RSA_RC4_128_MD5) +#ifdef TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA + CIPHER(0x0088, TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA) #else - XCIPHER(0x0004, SSL3_TXT_RSA_RC4_128_MD5) + XCIPHER(0x0088, TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA) #endif -#ifdef SSL3_TXT_RSA_RC4_128_SHA - CIPHER(0x0005, SSL3_TXT_RSA_RC4_128_SHA) +#ifdef SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA + CIPHER(0x0016, SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA) #else - XCIPHER(0x0005, SSL3_TXT_RSA_RC4_128_SHA) + XCIPHER(0x0016, SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA) #endif #ifdef TLS1_TXT_RSA_WITH_AES_128_SHA CIPHER(0x002f, TLS1_TXT_RSA_WITH_AES_128_SHA) #else XCIPHER(0x002f, TLS1_TXT_RSA_WITH_AES_128_SHA) #endif -#ifdef TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA - CIPHER(0xc008, TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA) -#else - XCIPHER(0xc008, TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA) -#endif -#ifdef TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA - CIPHER(0xc012, TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA) -#else - XCIPHER(0xc012, TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA) -#endif -#ifdef SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA - CIPHER(0x0016, SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA) +#ifdef TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA + CIPHER(0x0041, TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA) #else - XCIPHER(0x0016, SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA) + XCIPHER(0x0041, TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA) #endif -#ifdef SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA - CIPHER(0x0013, SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA) +#ifdef TLS1_TXT_RSA_WITH_AES_256_SHA + CIPHER(0x0035, TLS1_TXT_RSA_WITH_AES_256_SHA) #else - XCIPHER(0x0013, SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA) + XCIPHER(0x0035, TLS1_TXT_RSA_WITH_AES_256_SHA) #endif -#ifdef TLS1_TXT_ECDH_RSA_WITH_DES_192_CBC3_SHA - CIPHER(0xc00d, TLS1_TXT_ECDH_RSA_WITH_DES_192_CBC3_SHA) +#ifdef TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA + CIPHER(0x0084, TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA) #else - XCIPHER(0xc00d, TLS1_TXT_ECDH_RSA_WITH_DES_192_CBC3_SHA) + XCIPHER(0x0084, TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA) #endif -#ifdef TLS1_TXT_ECDH_ECDSA_WITH_DES_192_CBC3_SHA - CIPHER(0xc003, TLS1_TXT_ECDH_ECDSA_WITH_DES_192_CBC3_SHA) +#ifdef SSL3_TXT_RSA_DES_192_CBC3_SHA + CIPHER(0x000a, SSL3_TXT_RSA_DES_192_CBC3_SHA) #else - XCIPHER(0xc003, TLS1_TXT_ECDH_ECDSA_WITH_DES_192_CBC3_SHA) + XCIPHER(0x000a, SSL3_TXT_RSA_DES_192_CBC3_SHA) #endif -/* No openssl macro found for 0xfeff */ -#ifdef SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA - CIPHER(0xfeff, SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA) +#ifdef SSL3_TXT_RSA_RC4_128_SHA + CIPHER(0x0005, SSL3_TXT_RSA_RC4_128_SHA) #else - XCIPHER(0xfeff, SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA) + XCIPHER(0x0005, SSL3_TXT_RSA_RC4_128_SHA) #endif -#ifdef SSL3_TXT_RSA_DES_192_CBC3_SHA - CIPHER(0x000a, SSL3_TXT_RSA_DES_192_CBC3_SHA) +#ifdef SSL3_TXT_RSA_RC4_128_MD5 + CIPHER(0x0004, SSL3_TXT_RSA_RC4_128_MD5) #else - XCIPHER(0x000a, SSL3_TXT_RSA_DES_192_CBC3_SHA) + XCIPHER(0x0004, SSL3_TXT_RSA_RC4_128_MD5) #endif

1 0

[tor/master] Merge remote-tracking branch 'public/update_ciphers_ff28'
by nickm＠torproject.org 09 Apr '14

09 Apr '14

commit 88179bd9b644032f84aed51a7a682e11e5067c11 Merge: 53676e7 4231729 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Apr 8 20:43:21 2014 -0400 Merge remote-tracking branch 'public/update_ciphers_ff28' changes/ff28_ciphers | 6 ++ src/common/ciphers.inc | 169 ++++++++++++------------------------- src/common/get_mozilla_ciphers.py | 30 +++++-- 3 files changed, 84 insertions(+), 121 deletions(-)

1 0

[tor/master] Start work on the changelog for 0.2.5.4-alpha
by nickm＠torproject.org 09 Apr '14

09 Apr '14

commit 53676e71b52a7a52c007cab55ecf020a1beeeefa Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Apr 8 20:34:23 2014 -0400 Start work on the changelog for 0.2.5.4-alpha This commit does nothing other than pull the changes/* files into ChangeLog, sorted by declared type. I haven't comined any entries or vetted anything yet. --- changes/bug10081 | 5 ----- changes/bug10363 | 12 ------------ changes/bug10468 | 4 ---- changes/bug10801 | 4 ---- changes/bug11061 | 3 --- changes/bug11070 | 4 ---- changes/bug11232 | 4 ---- changes/bug11275 | 3 --- changes/bug11276 | 3 --- changes/bug11278 | 3 --- changes/bug11279 | 3 --- changes/bug11296 | 3 --- changes/bug11321 | 5 ----- changes/bug11342 | 4 ---- changes/bug11426 | 3 --- changes/bug11437 | 3 --- changes/bug2454 | 6 ------ changes/bug4241 | 3 --- changes/bug7164_diagnose_harder | 6 ------ changes/bug8787 | 5 ----- changes/bug9107 | 3 --- changes/bug9213_doc | 5 ----- changes/bug9650 | 4 ---- changes/bug9665 | 4 ---- changes/bug9841 | 7 ------- changes/bug9870 | 5 ----- changes/cov-leaks | 6 ------ changes/doxygen_fixes | 6 ------ changes/require_023 | 6 ------ changes/ticket4645 | 3 --- changes/ticket7952 | 4 ---- 31 files changed, 139 deletions(-) diff --git a/changes/bug10081 b/changes/bug10081 deleted file mode 100644 index 654b83c..0000000 --- a/changes/bug10081 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features: - - When reporting a failure from make_socket_reuseable(), don't - report a warning when we get a failure from an incoming socket - on OSX. Fix for bug 10081. - diff --git a/changes/bug10363 b/changes/bug10363 deleted file mode 100644 index 0cdfd9a..0000000 --- a/changes/bug10363 +++ /dev/null @@ -1,12 +0,0 @@ - o Major bugfixes: - - Fix two instances of possible undefined behavior in channeltls.c - that could, under unlucky circumstances, have led to a pointer - overflow. Fixes bug #10363; bugfixes on 0.2.0.10-alpha and - 0.2.3.6-alpha. Reported by "bobnomnom". - - Fix another possibly undefined pointer operations in tor_memmem - fallback implementation. Another case of bug #10363; bugfix on - 0.1.1.1-alpha. - - Fix another possibly undefined pointer operations in the eventdns - fallback implementation. Another case of bug #10363; bugfix on - 0.1.2.1-alpha. - diff --git a/changes/bug10468 b/changes/bug10468 deleted file mode 100644 index 128eb3a..0000000 --- a/changes/bug10468 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes: - - When using DNSPort and AutomapHostsOnResolve, respond to AAAA - requests with AAAA automapped answers. Fixes bug 10468; bugfix - on 0.2.4.7-alpha. diff --git a/changes/bug10801 b/changes/bug10801 deleted file mode 100644 index 201bbea..0000000 --- a/changes/bug10801 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes: - - Stop accepting bridge lines containing hostnames. Doing so allowed - clients to perform DNS requests on the hostnames, which was not - sensible behavior. Fixes bug 10801; bugfix on 0.2.0.1-alpha. diff --git a/changes/bug11061 b/changes/bug11061 deleted file mode 100644 index 5035e87..0000000 --- a/changes/bug11061 +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation fixes: - - Fix the layout of the SOCKSPort flags in the manpage. Fixes bug - 11061; bugfix on 0.2.4.7-alpha. diff --git a/changes/bug11070 b/changes/bug11070 deleted file mode 100644 index 88fecf9..0000000 --- a/changes/bug11070 +++ /dev/null @@ -1,4 +0,0 @@ - o Removed code: - - Remove all code for the long unused v1 directory protocol. Resolves - ticket 11070. - diff --git a/changes/bug11232 b/changes/bug11232 deleted file mode 100644 index c1a8780..0000000 --- a/changes/bug11232 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes: - - Use AddressSanitizer and Ubsan sanitizers (in clang-3.4) to fix some - miscellaneous errors in our tests and codebase. Fix for bug 11232. - Bugfixes on versions back as far as 0.2.1.11-alpha. diff --git a/changes/bug11275 b/changes/bug11275 deleted file mode 100644 index b9b019f..0000000 --- a/changes/bug11275 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes: - - Fix a minor memory leak that occurred when signing a directory - object. Fixes bug 11275; bugfix on 0.2.4.13-alpha. diff --git a/changes/bug11276 b/changes/bug11276 deleted file mode 100644 index be37534..0000000 --- a/changes/bug11276 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes: - - Don't re-initialize a second set of openssl mutexes when starting - up. Fixes bug 11726; bugfix on 0.2.5.3-alpha. diff --git a/changes/bug11278 b/changes/bug11278 deleted file mode 100644 index 4fa59fc..0000000 --- a/changes/bug11278 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes: - - Free placeholder entries in our circuit table at exit; fixes - a harmless memory leak. Fixes bug 11278; bugfix on 0.2.5.1-alpha. diff --git a/changes/bug11279 b/changes/bug11279 deleted file mode 100644 index 1e9da41..0000000 --- a/changes/bug11279 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features: - - Warn less verbosely when receiving a misformed ESTABLISH_RENDEZVOUS - cell. Fixes ticket 11279. diff --git a/changes/bug11296 b/changes/bug11296 deleted file mode 100644 index 1567497..0000000 --- a/changes/bug11296 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes: - - Allow tor-fw-helper to build again by adding src/ext to its - CPPFLAGS. Fixes bug 11296; bugfix on 0.2.5.3-alpha. diff --git a/changes/bug11321 b/changes/bug11321 deleted file mode 100644 index d737a1f..0000000 --- a/changes/bug11321 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (build): - - Build the torify.1 manpage again. Previously, we were only - trying to build it when also building tor-fw-helper. That's why - we didn't notice that we'd broken the ability to build it. - Fixes bug 11321; bugfix on 0.2.5.1-alpha. diff --git a/changes/bug11342 b/changes/bug11342 deleted file mode 100644 index a52a551..0000000 --- a/changes/bug11342 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes: - - When dumping a malformed directory object to disk, save it in binary - mode on windows, not text mode. Fixes bug 11342; bugfix on - 0.2.2.1-alpha. diff --git a/changes/bug11426 b/changes/bug11426 deleted file mode 100644 index 23b1e7d..0000000 --- a/changes/bug11426 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes: - - Fix compilation on Solaris, which does not have <endian.h>. - Fixes bug 11426; bugfix on 0.2.5.3-alpha. diff --git a/changes/bug11437 b/changes/bug11437 deleted file mode 100644 index f5117ca..0000000 --- a/changes/bug11437 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes: - - Stop leaking memory when we successfully resolve a PTR record. - Fixes bug 11437; bugfix on 0.2.4.7-alpha. diff --git a/changes/bug2454 b/changes/bug2454 deleted file mode 100644 index 18e327b..0000000 --- a/changes/bug2454 +++ /dev/null @@ -1,6 +0,0 @@ - o Enhancement: - - If a circuit timed out for at least 3 minutes check if we have a new - external IP address the next time we run our routine checks. If our - IP address has changed, then publish a new descriptor with the new - IP address. Resolves ticket 2454. - diff --git a/changes/bug4241 b/changes/bug4241 deleted file mode 100644 index a7d34bf..0000000 --- a/changes/bug4241 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes: - - Only retry attempts to connect to a chosen rendezvous point 8 times, - not 30. Fixes bug #4241; bugfix on 0.1.0.1-rc. diff --git a/changes/bug7164_diagnose_harder b/changes/bug7164_diagnose_harder deleted file mode 100644 index 28c36b6..0000000 --- a/changes/bug7164_diagnose_harder +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features: - - Try harder to diagnose a possible cause of bug 7164, which causes - intermittent "microdesc_free() called but md was still referenced" - warnings. We now log more information about the likely error case, - to try to figure out why we might be cleaning a microdescriptor - as old if it's still referenced by a live node. diff --git a/changes/bug8787 b/changes/bug8787 deleted file mode 100644 index 212844a..0000000 --- a/changes/bug8787 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features: - - Always check return values for unlink, munmap, UnmapViewOfFile; - check strftime return values more often. In some cases all we - can do is report a warning, but this may help prevent deeper - bugs from going unnoticed. Closes ticket 8787. diff --git a/changes/bug9107 b/changes/bug9107 deleted file mode 100644 index dba1669..0000000 --- a/changes/bug9107 +++ /dev/null @@ -1,3 +0,0 @@ - o Code simplifications and refactoring: - - Remove unused function circuit_dump_by_chan from circuitlist.c. Closes - issue #9107; patch from "marek". diff --git a/changes/bug9213_doc b/changes/bug9213_doc deleted file mode 100644 index 2f959dd..0000000 --- a/changes/bug9213_doc +++ /dev/null @@ -1,5 +0,0 @@ - o Documentation: - - Correctly document that we search for a system torrc file before - looking in ~/.torrc. Fixes documentation side of 9213; bugfix - on 0.2.3.18-rc. - diff --git a/changes/bug9650 b/changes/bug9650 deleted file mode 100644 index c49cc24..0000000 --- a/changes/bug9650 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes: - - Avoid potential crashes or bad behavior when launching a - server-side managed proxy with ORPort or ExtORPort temporarily - disabled. Fixes bug 9650; bugfix on 0.2.3.16-alpha. diff --git a/changes/bug9665 b/changes/bug9665 deleted file mode 100644 index d9e5859..0000000 --- a/changes/bug9665 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features: - - Report a failure to connect to a bridge because its transport - type has no configured pluggable transport as a new type of bootstrap - failure. Resolves ticket 9665. Patch from Fábio J. Bertinatto. diff --git a/changes/bug9841 b/changes/bug9841 deleted file mode 100644 index 8b40dda0..0000000 --- a/changes/bug9841 +++ /dev/null @@ -1,7 +0,0 @@ - o Minor features (performance): - - - Faster server-side lookups of rendezvous and introduction point - circuits by using hashtables instead of linear searches over all - the circuits. These functions previously accounted between 3 and - 7% of CPU usage on some busy relays. - diff --git a/changes/bug9870 b/changes/bug9870 deleted file mode 100644 index b4b2c2d..0000000 --- a/changes/bug9870 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes: - - - Log only one message when we start logging in an unsafe - way. Previously, we would log as many messages as we had - problems. Fix for #9870; bugfix on 0.2.5.1-alpha. diff --git a/changes/cov-leaks b/changes/cov-leaks deleted file mode 100644 index 302d247..0000000 --- a/changes/cov-leaks +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes: - - Resolve some memory leaks found by coverity in the unit tests, - on exit in tor-gencert, and on a failure to compute digests - for our own keys when generating a v3 networkstatus vote. - These leaks should never have affected anyone in practice. - diff --git a/changes/doxygen_fixes b/changes/doxygen_fixes deleted file mode 100644 index a9add9d..0000000 --- a/changes/doxygen_fixes +++ /dev/null @@ -1,6 +0,0 @@ - o Documentation: - - Resolve warnings from Doxygen. - - o Code simplification and refactoring: - - Change our use of the ENUM_BF macro to avoid declarations that - confuse Doxygen. diff --git a/changes/require_023 b/changes/require_023 deleted file mode 100644 index f3a5a14..0000000 --- a/changes/require_023 +++ /dev/null @@ -1,6 +0,0 @@ - o Deprecated versions: - - Tor 0.2.2.x is no longer supported, and has not been for a while. - Directory authorities no longer accept descriptors from - Tor relays running any version of Tor prior to Tor 0.2.3.16-alpha. - Resolves ticket 11149. - diff --git a/changes/ticket4645 b/changes/ticket4645 deleted file mode 100644 index cc665ba..0000000 --- a/changes/ticket4645 +++ /dev/null @@ -1,3 +0,0 @@ - o Code simplifications and refactoring: - - Removing is_internal_IP() function. Resolves ticket 4645. - diff --git a/changes/ticket7952 b/changes/ticket7952 deleted file mode 100644 index 8ba20dc..0000000 --- a/changes/ticket7952 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (controller): - - Make the entire exit policy available from the control port via - GETINFO exit-policy/*. Implements enhancement #7952. Patch from - "rl1987".

1 0