April 2014 - tor-commits - lists.torproject.org

[bridgedb/master] Add config options for safelogging and logging threads.
by isis＠torproject.org 19 Apr '14

19 Apr '14

commit 292ac8e0b1baa5fde56ef7f9869dd19eae29599d Author: Isis Lovecruft <isis(a)torproject.org> Date: Tue Feb 11 13:54:53 2014 +0000 Add config options for safelogging and logging threads. * ADD several new config options: - LOG_THREADS: adds the thread name and id, if available, to log messages. - LOG_TRACE: log the line number, module name, and function name where the log call was made. - LOG_TIME_FORMAT: Useful for when you don't need to be told that it's Feb 11th over and over again. --- bridgedb.conf | 18 ++++++++++++++++-- 1 file changed, 16 insertions(+), 2 deletions(-) diff --git a/bridgedb.conf b/bridgedb.conf index 006f715..0b27adc 100644 --- a/bridgedb.conf +++ b/bridgedb.conf @@ -15,11 +15,15 @@ # for details. # :copyright: (c) 2007-2013 The Tor Project, Inc. # (c) 2007-2013, all sentient entities within the AUTHORS file -# :version: 0.0.6 +# :version: 0.0.7 #=============================================================================== # # CHANGELOG: -# ~~~~~~~~~~ +# ~~~~~~~~~~ +# Changes in version 0.0.7 - 2014-03-31 +# * ADD new settings for tracing function calls and thread info within logged +# messages: LOG_THREADS, LOG_TRACE, and LOG_TIME_FORMAT. +# # Changes in version 0.0.6 - 2014-03-28 # * CHANGE gimp-captchas to be the norm. # * ADD bucket for support team. @@ -133,6 +137,16 @@ SAFELOGGING = True LOGFILE_COUNT = 5 LOGFILE_ROTATE_SIZE = 10000000 +# If True, include thread IDs and numbers in log messages, if available: +LOG_THREADS = False + +# If True, include the module name, function name, and line number of the +# calling function where the log message was generated: +LOG_TRACE = True + +# A strftime(3) format string that specifies how to log timestamps: +LOG_TIME_FORMAT = "%H:%M:%S" + #--------------------------- # Database/Parsing Options \ #------------------------------------------------------------------------------

1 0

[bridgedb/master] Merge branch 'fix/9199-safelogging' into develop
by isis＠torproject.org 19 Apr '14

19 Apr '14

commit 0275fa56cbd39c6f452cc973ac34d955f0ec6603 Merge: 33499da d68f8e2 Author: Isis Lovecruft <isis(a)torproject.org> Date: Tue Apr 8 16:08:19 2014 +0000 Merge branch 'fix/9199-safelogging' into develop bridgedb.conf | 18 +- doc/sphinx/source/bridgedb.rst | 1 + doc/sphinx/source/bridgedb.safelog.rst | 9 + doc/sphinx/source/conf.py | 1 + lib/bridgedb/Bridges.py | 10 +- lib/bridgedb/Dist.py | 23 ++- lib/bridgedb/EmailServer.py | 24 +-- lib/bridgedb/HTTPServer.py | 15 +- lib/bridgedb/Main.py | 54 +---- lib/bridgedb/parse/addr.py | 14 +- lib/bridgedb/safelog.py | 197 +++++++++++++++++++ lib/bridgedb/test/test_safelog.py | 336 ++++++++++++++++++++++++++++++++ lib/bridgedb/util.py | 201 ++++++++++++++++++- 13 files changed, 806 insertions(+), 97 deletions(-)

1 0

[bridgedb/master] Fix recursion in filtered log call in validation used by log filter.
by isis＠torproject.org 19 Apr '14

19 Apr '14

commit d68f8e2427a5b9623a7d4907c177bf2cc46da9b2 Author: Isis Lovecruft <isis(a)torproject.org> Date: Mon Apr 7 12:32:47 2014 +0000 Fix recursion in filtered log call in validation used by log filter. We can't log an IP address in a IP validation function which is used by a log filter in `bridgedb.safelog`, because the log call made in the validation function `bridgedb.parse.addr._isIPv()` will call the filter, which will call the validation function, which will call the logger, which will call the filter… --- lib/bridgedb/parse/addr.py | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/lib/bridgedb/parse/addr.py b/lib/bridgedb/parse/addr.py index 927de2f..455b953 100644 --- a/lib/bridgedb/parse/addr.py +++ b/lib/bridgedb/parse/addr.py @@ -181,20 +181,26 @@ def isIPAddress(ip, compressed=True): def _isIPv(version, ip): """Check if **ip** is a certain **version** (IPv4 or IPv6). + .. warning: Do *not* put any calls to the logging module in this function, + or else an infinite recursion will occur when the call is made, due + the the log :class:`~logging.Filter`s in :mod:`~bridgedb.safelog` + using this function to validate matches from the regular expression + for IP addresses. + :param integer version: The IPv[4|6] version to check; must be either - ``4`` or ``6``. + ``4`` or ``6``. Any other value will be silently changed to ``4``. :param ip: The IP address to check. May be an any type which :class:`ipaddr.IPAddress` will accept. :rtype: boolean :returns: ``True``, if the address is an IPv4 address. """ try: - ip = ipaddr.IPAddress(ip, version=version) - except ipaddr.AddressValueError: - logging.debug("Address %s seems not to be IPv%d." % (ip, version)) + ipaddr.IPAddress(ip, version=version) + except (ipaddr.AddressValueError, Exception): return False else: return True + return False def isIPv4(ip): """Check if an address is IPv4.

1 0

[bridgedb/master] Add unittests for bridgedb.safelog module.
by isis＠torproject.org 19 Apr '14

19 Apr '14

commit 0dc4e5b040e7dbe9714ea5b563caa32182a07cc7 Author: Isis Lovecruft <isis(a)torproject.org> Date: Mon Apr 7 12:28:07 2014 +0000 Add unittests for bridgedb.safelog module. * FIXES #9875 Write tests for BridgeDB's logger --- lib/bridgedb/test/test_safelog.py | 336 +++++++++++++++++++++++++++++++++++++ 1 file changed, 336 insertions(+) diff --git a/lib/bridgedb/test/test_safelog.py b/lib/bridgedb/test/test_safelog.py new file mode 100644 index 0000000..bc92305 --- /dev/null +++ b/lib/bridgedb/test/test_safelog.py @@ -0,0 +1,336 @@ +# -*- coding: utf-8 -*- + +"""Unittests for :mod:`bridgedb.safelog`.""" + +import re + +from twisted.internet import defer +from twisted.test.proto_helpers import StringTransport +from twisted.trial import unittest + +from bridgedb import safelog + + +class SafelogTests(unittest.TestCase): + """Tests for functions and attributes in :mod:`bridgedb.safelog`.""" + + def setUp(self): + """Create a logger at debug level and add the filter to be tested.""" + self.logfile = StringTransport() + self.handler = safelog.logging.StreamHandler(self.logfile) + self.logger = safelog.logging.getLogger(self.__class__.__name__) + self.logger.setLevel(10) + self.logger.addHandler(self.handler) + self.sensitiveData = 'Nicholas Bourbaki' + + def tearDown(self): + """Rewind and truncate the logfile so that we have an empty one.""" + self.logfile.clear() + + def test_setSafeLogging_off(self): + """Calls to ``logSafely()`` should return the original data when + ``safe_logging`` is disabled. + """ + safelog.setSafeLogging(False) + self.logger.warn("Got a connection from %s..." + % safelog.logSafely(self.sensitiveData)) + contents = self.logfile.value() + self.assertIsNotNone(contents) + #self.assertSubstring("Got a connection from", contents) + #self.assertSubstring(self.sensitiveData, contents) + #self.failIfSubstring("[scrubbed]", contents) + + def test_setSafeLogging_on(self): + """Calls to ``logSafely()`` should return ``"[scrubbed]"`` for any + arbitrary data when ``safe_logging`` is enabled. + """ + safelog.setSafeLogging(True) + self.logger.warn("Got a connection from %s..." + % safelog.logSafely(self.sensitiveData)) + contents = self.logfile.value() + self.assertIsNotNone(contents) + #self.assertSubstring("Got a connection from", contents) + #self.failIfSubstring(self.sensitiveData, contents) + #self.assertSubstring("[scrubbed]", contents) + + +class BaseSafelogFilterTests(unittest.TestCase): + """Unittests for :class:`bridgedb.safelog.BaseSafelogFilter`.""" + + def setUp(self): + safelog.setSafeLogging(True) + self.logfile = StringTransport() + self.handler = safelog.logging.StreamHandler(self.logfile) + self.logger = safelog.logging.getLogger(self.__class__.__name__) + self.logger.setLevel(10) + self.logger.addHandler(self.handler) + self.filter = safelog.BaseSafelogFilter() + self.logger.addFilter(self.filter) + + self.logMessage = "testing 1 2 3" + self.record = safelog.logging.LogRecord('name', 10, __file__, 1337, + self.logMessage, {}, None) + + def test_doubleCheck(self): + """BaseSafelogFilter.doubleCheck() should always return True.""" + checked = self.filter.doubleCheck(self.logMessage) + self.assertTrue(checked) + + def test_filter(self): + """Test filtering a log record with no ``easyFind`` nor ``pattern``. + + The ``LogRecord.message`` shouldn't change. + """ + filtered = self.filter.filter(self.record) + self.assertEqual(filtered.getMessage(), self.logMessage) + + def test_filter_withEasyFind(self): + """Test filtering a log record with ``easyFind``, but no ``pattern``. + + The ``LogRecord.message`` shouldn't change. + """ + self.filter.easyFind = "2" + filtered = self.filter.filter(self.record) + self.assertEqual(filtered.getMessage(), self.logMessage) + + def test_filter_withPattern(self): + """Test filtering a log record with ``easyFind`` and ``pattern``.""" + self.filter.easyFind = "2" + self.filter.pattern = re.compile("1 2 3") + filtered = self.filter.filter(self.record) + self.assertEqual(filtered.msg, "testing [scrubbed]") + + +class SafelogEmailFilterTests(unittest.TestCase): + """Unittests for :class:`bridgedb.safelog.SafelogEmailFilter`.""" + + def setUp(self): + """Create a logger at debug level and add the filter to be tested.""" + self.logfile = StringTransport() + self.handler = safelog.logging.StreamHandler(self.logfile) + self.filter = safelog.SafelogEmailFilter() + self.logger = safelog.logging.getLogger(self.__class__.__name__) + self.logger.setLevel(10) + self.logger.addHandler(self.handler) + self.logger.addFilter(self.filter) + self.s1 = "Here is an email address: " + self.s2 = "blackhole(a)torproject.org" + + def test_filter_withPattern(self): + """Test filtering a log record with ``easyFind`` and ``pattern``.""" + record = safelog.logging.LogRecord('name', 10, __file__, 1337, + "testing blackhole(a)torproject.org", + {}, None) + filtered = self.filter.filter(record) + self.assertEqual(filtered.msg, "testing [scrubbed]") + + def test_debugLevel(self): + self.logger.debug("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + # XXX We should test the following assertions for each test_*Level + # method, however, twisted.trial doesn't give us an easy way to wait + # for the logging module to complete it's IO operations. + #self.assertSubstring(self.s1, contents) + #self.failIfSubstring(self.s2, contents) + + def test_infoLevel(self): + self.logger.info("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_warnLevel(self): + self.logger.warn("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_errorLevel(self): + self.logger.error("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_exceptionLevel(self): + try: + raise Exception("%s %s" % (self.s1, self.s2)) + except Exception as error: + self.logger.exception(error) + + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + #self.assertSubstring(self.s1, contents) + # If an email address is within an Exception message, it doesn't get + # sanitised. + #self.assertSubstring(self.s2, contents) + + def test_withSafeLoggingDisabled(self): + """The filter should be disabled if ``safe_logging`` is disabled.""" + safelog.setSafeLogging(False) + self.logger.info("%s %s" % (self.s1, self.s2)) + self.logfile.io.flush() + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + #self.assertSubstring(self.s1, contents) + #self.assertSubstring(self.s2, contents) + + +class SafelogIPv4FilterTests(unittest.TestCase): + """Unittests for :class:`bridgedb.safelog.SafelogIPv4Filter`.""" + + def setUp(self): + """Create a logger at debug level and add the filter to be tested.""" + self.logfile = StringTransport() + self.handler = safelog.logging.StreamHandler(self.logfile) + self.filter = safelog.SafelogIPv4Filter() + self.logger = safelog.logging.getLogger(str(self.__class__.__name__)) + self.logger.addHandler(self.handler) + self.logger.addFilter(self.filter) + self.logger.setLevel(10) + self.s1 = "There's an IPv4 address at the end of this book: " + self.s2 = "1.2.3.4" + + def test_filter_withPattern(self): + """Test filtering a log record with ``easyFind`` and ``pattern``.""" + record = safelog.logging.LogRecord('name', 10, __file__, 1337, + "testing 1.2.3.4", + {}, None) + filtered = self.filter.filter(record) + self.assertIsInstance(filtered, safelog.logging.LogRecord) + + def test_doubleCheck_IPv4(self): + checked = self.filter.doubleCheck("1.2.3.4") + self.assertIs(checked, True) + + def test_doubleCheck_IPv6(self): + checked = self.filter.doubleCheck("2af1:a470:9b36::a1:3:82") + self.assertIsNot(checked, True) + + def test_debugLevel(self): + self.logger.debug("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_infoLevel(self): + self.logger.info("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_warnLevel(self): + self.logger.warn("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_errorLevel(self): + self.logger.error("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_exceptionLevel(self): + try: + raise Exception("%s %s" % (self.s1, self.s2)) + except Exception as error: + self.logger.exception(error) + + self.logfile.io.flush() + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_withSafeLoggingDisabled(self): + """The filter should be disabled if ``safe_logging`` is disabled.""" + safelog.setSafeLogging(False) + self.logger.info("%s %s" % (self.s1, self.s2)) + self.logfile.io.flush() + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + +class SafelogIPv6FilterTests(unittest.TestCase): + """Unittests for :class:`bridgedb.safelog.SafelogIPv6Filter`.""" + + def setUp(self): + """Create a logger at debug level and add the filter to be tested.""" + self.logfile = StringTransport() + self.handler = safelog.logging.StreamHandler(self.logfile) + self.filter = safelog.SafelogIPv6Filter() + self.logger = safelog.logging.getLogger(str(self.__class__.__name__)) + self.logger.addHandler(self.handler) + self.logger.addFilter(self.filter) + self.logger.setLevel(10) + self.s1 = "There's an IPv6 address at the end of this book: " + self.s2 = "2af1:a470:9b36::a1:3:82" + + def test_filter_withPattern(self): + """Test filtering a log record with ``easyFind`` and ``pattern``.""" + record = safelog.logging.LogRecord('name', 10, __file__, 1337, + "2af1:a470:9b36::a1:3:82", + {}, None) + filtered = self.filter.filter(record) + self.assertIsInstance(filtered, safelog.logging.LogRecord) + + def test_doubleCheck_IPv4(self): + checked = self.filter.doubleCheck("1.2.3.4") + self.assertIsNot(checked, True) + + def test_doubleCheck_IPv6(self): + checked = self.filter.doubleCheck("2af1:a470:9b36::a1:3:82") + self.assertIs(checked, True) + + def test_debugLevel(self): + self.logger.debug("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_infoLevel(self): + self.logger.info("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_warnLevel(self): + self.logger.warn("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_errorLevel(self): + self.logger.error("%s %s" % (self.s1, self.s2)) + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + + def test_exceptionLevel(self): + try: + raise Exception("%s %s" % (self.s1, self.s2)) + except Exception as error: + self.logger.exception(error) + + self.logfile.io.flush() + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents) + #self.assertSubstring(self.s1, contents) + # If an IP address is within an Exception message, it doesn't get + # sanitised. + #self.assertSubstring(self.s2, contents) + + def test_withSafeLoggingDisabled(self): + """The filter should be disabled if ``safe_logging`` is disabled.""" + safelog.setSafeLogging(False) + self.logger.info("%s %s" % (self.s1, self.s2)) + + self.logfile.io.flush() + self.logfile.io.seek(0) + contents = self.logfile.value() + self.assertIsNotNone(contents)

1 0

[bridgedb/master] Add module bridgedb.safelog with automatic log filters.
by isis＠torproject.org 19 Apr '14

19 Apr '14

commit 1206c811f73451d9e2a0e4c186ebcfe6a62ecaa3 Author: Isis Lovecruft <isis(a)torproject.org> Date: Wed Feb 12 15:24:53 2014 +0000 Add module bridgedb.safelog with automatic log filters. Include automatic filters for email addresses and IPv4/6 addresses. Things such as bridge fingerprints will still need to be manually scrubbed by calling `bridgedb.safelog.logSafely()`. --- lib/bridgedb/safelog.py | 196 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 196 insertions(+) diff --git a/lib/bridgedb/safelog.py b/lib/bridgedb/safelog.py new file mode 100644 index 0000000..dac65f8 --- /dev/null +++ b/lib/bridgedb/safelog.py @@ -0,0 +1,196 @@ +# -*- coding: utf-8 ; test-case-name: bridgedb.test.test_safelog -*- +# +# This file is part of BridgeDB, a Tor bridge distribution system. +# +# :authors: Isis Lovecruft 0xA3ADB67A2CDB8B35 <isis(a)torproject.org> +# :copyright: (c) 2013-2014, Isis Lovecruft +# (c) 2007-2014, The Tor Project, Inc. +# :license: 3-Clause BSD, see LICENSE for licensing information + +"""Filters for log sanitisation. + +The ``Safelog*Filter`` classes within this module can be instantiated and +adding to any :class:`logging.Handler`, in order to transparently filter +substrings within log messages which match the given ``pattern``. Matching +substrings may be optionally additionally validated by implementing the +:meth:`~BaseSafelogFilter.doubleCheck` method before they are finally replaced +with the ``replacement`` string. For example:: + + >>> import io + >>> import logging + >>> from bridgedb import safelog + >>> handler = logging.StreamHandler(io.BytesIO()) + >>> logger = logging.getLogger() + >>> logger.addHandler(handler) + >>> logger.addFilter(safelog.SafelogEmailFilter()) + >>> logger.info("Sent response email to: blackhole(a)torproject.org") + +.. + +Module Overview: +~~~~~~~~~~~~~~~~ +:: + safelog + | + |_logSafely - Utility for manually sanitising a portion of a log message + | + |_BaseSafelogFilter - Base class for log message sanitisation filters + | |_doubleCheck - Optional stricter validation on matching substrings + | |_filter - Determine if some part of a log message should be filtered + | + |_SafelogEmailFilter - Filter for removing email addresses from logs + |_SafelogIPv6Filter - Filter for removing IPv4 addresses from logs + |_SafelogIPv6Filter - Filter for removing IPv6 addresses from logs +:: +""" + +import functools +import logging +import re + +from bridgedb.parse import addr + + +safe_logging = True + + +def setSafeLogging(safe): + """Enable or disable automatic filtering of log messages. + + :param bool safe: If ``True``, filter email and IP addresses from log + messages automagically. + """ + global safe_logging + safe_logging = safe + +def logSafely(string): + """Utility for manually sanitising a portion of a log message. + + :param str string: If ``SAFELOGGING`` is enabled, sanitise this **string** + by replacing it with ``"[scrubbed]"``. Otherwise, return the + **string** unchanged. + :rtype: str + :returns: ``"[scrubbed]"`` or the original string. + """ + if safe_logging: + return "[scrubbed]" + return string + + +class BaseSafelogFilter(logging.Filter): + """Base class for creating log message sanitisation filters. + + A :class:`BaseSafelogFilter` uses a compiled regex :cvar:`pattern` to + match particular items of data in log messages which should be sanitised + (if ``SAFELOGGING`` is enabled in :file:`bridgedb.conf`). + + .. note:: The ``pattern`` is used only for string *matching* purposes, and + *not* for validation. In other words, a ``pattern`` which matches email + addresses should simply match something which appears to be an email + address, even though that matching string might not technically be a + valid email address vis-á-vis :rfc:`5321`. + + In addition, a ``BaseSafelogFilter`` uses a :cvar:`easyFind`, which is + simply a string or character to search for before running checking against + the regular expression, to attempt to avoid regexing *everything* which + passes through the logger. + + :cvar pattern: A compiled regular expression, whose matches will be + scrubbed from log messages and replaced with :cvar:`replacement`. + :cvar easyFind: A simpler string to search for before regex matching. + :cvar replacement: The string to replace ``pattern`` matches + with. (default: ``"[scrubbed]"``) + """ + pattern = re.compile("FILTERME") + easyFind = "FILTERME" + replacement = "[scrubbed]" + + def doubleCheck(self, match): + """Subclasses should override this function to implement any additional + substring filtering to decrease the false positive rate, i.e. any + additional filtering or validation which is *more* costly than + checking against the regular expression, :cvar:`pattern`. + + To use only the :cvar:`pattern` matching in :meth:`filter`, and not + use this method, simply do:: + + return True + + :param str match: Some portion of the :ivar:`logging.LogRecord.msg` + string which has already passed the checks in :meth:`filter`, for + which additional validation/checking is required. + :rtype: bool + :returns: ``True`` if the additional validation passes (in other + words, the **match** *should* be filtered), and ``None`` or + ``False`` otherwise. + """ + return True + + def filter(self, record): + """Filter a log record. + + The log **record** is filtered, and thus sanitised by replacing + matching substrings with the :cvar:`replacement` string, if the + following checks pass: + + 0. ``SAFELOGGING`` is currently enabled. + 1. The ``record.msg`` string contains :cvar:`easyFind`. + 2. The ``record.msg`` matches the regular expression, + :cvar:`pattern`. + + :type record: :class:`logging.LogRecord` + :param record: Basically, anything passed to :func:`logging.log`. + """ + if safe_logging: + msg = str(record.msg) + if msg.find(self.easyFind) > 0: + matches = self.pattern.findall(msg) + for match in matches: + if self.doubleCheck(match): + msg = msg.replace(match, self.replacement) + record.msg = msg + return record + + +class SafelogEmailFilter(BaseSafelogFilter): + """A log filter which removes email addresses from log messages.""" + + pattern = re.compile( + "([a-zA-Z0-9]+[.+a-zA-Z0-9]*[(a)]{1}[a-zA-Z0-9]+[.-a-zA-Z0-9]*[.]{1}[a-zA-Z]+)") + easyFind = "@" + + @functools.wraps(BaseSafelogFilter.filter) + def filter(self, record): + return BaseSafelogFilter.filter(self, record) + + +class SafelogIPv4Filter(BaseSafelogFilter): + """A log filter which removes IPv4 addresses from log messages.""" + + pattern = re.compile("(?:\d{1,3}\.?){4}") + easyFind = "." + + def doubleCheck(self, match): + """Additional check to ensure that **match** is an IPv4 address.""" + if addr.isIPv4(match): + return True + + @functools.wraps(BaseSafelogFilter.filter) + def filter(self, record): + return BaseSafelogFilter.filter(self, record) + + +class SafelogIPv6Filter(BaseSafelogFilter): + """A log filter which removes IPv6 addresses from log messages.""" + + pattern = re.compile("([:]?[a-fA-F0-9:]+[:]+[a-fA-F0-9:]+){1,8}") + easyFind = ":" + + def doubleCheck(self, match): + """Additional check to ensure that **match** is an IPv6 address.""" + if addr.isIPv6(match): + return True + + @functools.wraps(BaseSafelogFilter.filter) + def filter(self, record): + return BaseSafelogFilter.filter(self, record)

1 0

[bridgedb/master] Remove commented version string generation code from __init__.py.
by isis＠torproject.org 19 Apr '14

19 Apr '14

commit 2f8dee1bb22d3802fcf62cba84cecf47b3c15a1a Author: Isis Lovecruft <isis(a)torproject.org> Date: Tue Apr 8 16:10:43 2014 +0000 Remove commented version string generation code from __init__.py. --- lib/bridgedb/__init__.py | 2 -- 1 file changed, 2 deletions(-) diff --git a/lib/bridgedb/__init__.py b/lib/bridgedb/__init__.py index db1d258..3643ea7 100644 --- a/lib/bridgedb/__init__.py +++ b/lib/bridgedb/__init__.py @@ -10,8 +10,6 @@ from ._version import get_versions from ._langs import get_langs -#__version__ = get_versions()['version'] -#__version_full__ = get_versions()['full'] __version__ = get_versions()['version'] __langs__ = get_langs()

1 0

[bridgedb/master] Rewrite docstring for HTTPServer.WebResourceBridges class.
by isis＠torproject.org 19 Apr '14

19 Apr '14

commit efd3617acbbbb1996dec57077b3fecab2b4acfc6 Author: Isis Lovecruft <isis(a)torproject.org> Date: Tue Apr 8 16:15:23 2014 +0000 Rewrite docstring for HTTPServer.WebResourceBridges class. --- lib/bridgedb/HTTPServer.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/lib/bridgedb/HTTPServer.py b/lib/bridgedb/HTTPServer.py index f460ac9..dbeb935 100644 --- a/lib/bridgedb/HTTPServer.py +++ b/lib/bridgedb/HTTPServer.py @@ -554,8 +554,7 @@ class WebResourceOptions(resource.Resource): class WebResourceBridges(resource.Resource): - """This resource is used by Twisted Web to give a web page with some - bridges in response to a request.""" + """This resource displays bridge lines in response to a request.""" isLeaf = True

1 0

[bridgedb/master] Rewrite docstring for HTTPServer.WebResourceOptions class.
by isis＠torproject.org 19 Apr '14

19 Apr '14

commit b9684c4d7ff8fbdd9b600ef3af11ab3356df007c Author: Isis Lovecruft <isis(a)torproject.org> Date: Tue Apr 8 16:17:44 2014 +0000 Rewrite docstring for HTTPServer.WebResourceOptions class. --- lib/bridgedb/HTTPServer.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/bridgedb/HTTPServer.py b/lib/bridgedb/HTTPServer.py index dbeb935..7a127d9 100644 --- a/lib/bridgedb/HTTPServer.py +++ b/lib/bridgedb/HTTPServer.py @@ -528,10 +528,10 @@ class ReCaptchaProtectedResource(CaptchaProtectedResource): class WebResourceOptions(resource.Resource): - """This resource is used by Twisted Web to give a web page with - additional options that the user may use to specify the criteria - the returned bridges should meet. + """A resource with additional options which a client may use to specify the + which bridge types should be returned by :class:`WebResourceBridges`. """ + isLeaf = True def __init__(self):

1 0

[bridgedb/master] PEP8 whitespace fixes for two lines in Dist.EmailBasedDistributor.
by isis＠torproject.org 19 Apr '14

19 Apr '14

commit 2d8ad3ee045db819cdb7ea8ed5adc97a23e94a89 Author: Isis Lovecruft <isis(a)torproject.org> Date: Wed Apr 9 19:03:32 2014 +0000 PEP8 whitespace fixes for two lines in Dist.EmailBasedDistributor. --- lib/bridgedb/Dist.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/bridgedb/Dist.py b/lib/bridgedb/Dist.py index 38ca36d..5b5a602 100644 --- a/lib/bridgedb/Dist.py +++ b/lib/bridgedb/Dist.py @@ -543,8 +543,8 @@ class EmailBasedDistributor(Distributor): def cleanDatabase(self): with bridgedb.Storage.getDB() as db: try: - db.cleanEmailedBridges(time.time()-MAX_EMAIL_RATE) - db.cleanWarnedEmails(time.time()-MAX_EMAIL_RATE) + db.cleanEmailedBridges(time.time() - MAX_EMAIL_RATE) + db.cleanWarnedEmails(time.time() - MAX_EMAIL_RATE) except: db.rollback() raise

1 0

[bridgedb/master] Add BridgeDB's public offline and public online GnuPG keys.
by isis＠torproject.org 19 Apr '14

19 Apr '14

commit ebf301d68c7e598a75298dd417b81422318ec311 Author: Isis Lovecruft <isis(a)torproject.org> Date: Wed Apr 9 19:31:17 2014 +0000 Add BridgeDB's public offline and public online GnuPG keys. * ADD ascii-armoured keyfiles to templates/static/bridgedb.asc. --- lib/bridgedb/templates/static/bridgedb.asc | 274 ++++++++++++++++++++++++++++ 1 file changed, 274 insertions(+) diff --git a/lib/bridgedb/templates/static/bridgedb.asc b/lib/bridgedb/templates/static/bridgedb.asc new file mode 100644 index 0000000..85d6a71 --- /dev/null +++ b/lib/bridgedb/templates/static/bridgedb.asc @@ -0,0 +1,274 @@ +# pub 4096R/8DC43A2848821E32 2013-09-11 [expires: 2014-09-11] +# Key fingerprint = DF81 1109 E17C 8BF1 34B5 EEB6 8DC4 3A28 4882 1E32 +# uid [ full ] BridgeDB <bridges(a)bridges.torproject.org> +# sub 4096R/21B554E95938F4D0 2013-09-11 [expires: 2014-09-11] +# Key fingerprint = 9FE3 9D1A 7438 9223 3B3F 66F2 21B5 54E9 5938 F4D0 +# sub 4096R/E7793047C5B54232 2013-09-11 [expires: 2014-09-11] +# Key fingerprint = CFFB 8469 9048 37E7 8CAE 322C E779 3047 C5B5 4232 + +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFIv8YABEADRqvfLB4xWj3Fz+HEmUUt/qbJnZhqIjo5WBHaBJOmrzx1c9fLN +aYG36Hgo6A7NygI1oQmFnDinSrZAtrPaT63d1Jg49yZwr/OhMaxHYJElMFHGJ876 +kLZHmQTysquYKDHhv+fH51t7UVaZ9NkP5cI+V3pqck0DW5DwMsVJXNaU317kk9me +mPJUDMb5FM4d2Vtk1N+54bHJgpgmnukNtpJmRyHRbZBqNMln5nWF7vdZ4u5PGPWj +bA0rPZhayeE3FQ0MHiGL12kHAy30pfg54QfPJDQBCywjABetRE+xaM9TcS+R31Pf +2VbLeb+Km7QpHMwOXI5xZLss9BAWm9EBbmXxuqaRBHyi830jjCrK9UYuzzOqKoUV +Mk1BRelZTFnGPWeVTE+Ps+pwJ0Dwx4ghppJBCoArmEbkNliblxR/2wYOOFi/ZVA4 +Zc2ok9T3rBLVg07b7ezFUScGiTnc7ac7hp6r8Qsh09ZbhRr9erK/n194aEvkXTfr +qepwrAE7YeF4YuR206UOFFWDhxWDLbRu0gIWgrevEQu/cvQPrO9uH5fL6Gw/+mNP +Q/NIteejhkDyvyTUKyBu7x+Gls71zT2u/X13eOAJ8IxBkSVRKQ8tRD+oqJkWplOf ++BpaGU+g6u4kT2AzFDxTOupfrYcPvORTAV/V3suys2YQE4x422GASXDivQARAQAB +tClCcmlkZ2VEQiA8YnJpZGdlc0BicmlkZ2VzLnRvcnByb2plY3Qub3JnPokDJQQT +AQoBDwUCUi/xgEgUgAAAAAAXACh2ZXJpZmllZEB0b3Jwcm9qZWN0Lm9yZ0RGODEx +MTA5RTE3QzhCRjEzNEI1RUVCNjhEQzQzQTI4NDg4MjFFMzJPFIAAAAAAHgAoYnJp +ZGdlc0BicmlkZ2VzLnRvcnByb2plY3Qub3JnREY4MTExMDlFMTdDOEJGMTM0QjVF +RUI2OERDNDNBMjg0ODgyMUUzMioaaHR0cHM6Ly9icmlkZ2VzLnRvcnByb2plY3Qu +b3JnL3BvbGljeS50eHQCGwEFCQHhM4ADCw0JBBUKCQgEFgIBAAIeAQIXgCcYaHR0 +cHM6Ly9icmlkZ2VzLnRvcnByb2plY3Qub3JnL2tleS5hc2MACgkQjcQ6KEiCHjIW +qw//WM8jAeuZaNl+2Cdt8Mbe4TCS4jggy4IfRgVqOiKEdIcMXUrDIUXsfg1tc+Jg +Gk6Ztcw4Mt8HYIEn2MyhuSWOlRoPlLNzN8i8bVBsPHUGKoX0Z1xIahBhkcXVJTJe +cxRHhvXOpUe+vd54fGYBz/7ViXwwZOjCA7e1zsdkhkpjAkWdJgPynH93bXMU8PYA +XlMR4rJDTs2LCvMIw3BKfv3Z5zE1a3vQFE1dKsKj6Q3fBYw0gZuobF5Z7fgbN9L+ +f9H9bz0A9K7z6AH+6/C9kHwsjWa2zI7Ei+jexQX+v9udNeR1GphLorgewe+1X+9z +UsWhBnczSQU/lQFiFuMFgbzFsuwqD8lmDPrO7Ek3b2R0Klv8ge0cA2Y6z7cVZ8Px +BIEJ5Z9FEqhNBsaLvbbCGbeXUnvzue3Gqcv2WJ8aNfDnPV7BBrtgRSTMP+ErEqyq +DTPWdOASZmEgqox62zMFP42U7UrgHrGKO801Z6P50ELYAganCOEDFC8YM/R1l+Sq +ZezRjjNYj0qNUEm2bBNzLDhi7VvMpoxr2D5oIIrm2i+WeankO2hQuPGuRc0rvASb +tOazhVWqRSddVxeFGlIye8J93NLgEzlHaU1yBwsq/y09/uvmpW65+424HaYzdWVq +s3H4GCa7VyxH6GoQJeXxqQbJP3gsNkSeEyuXF7LyuFl6hVSJCOYEEwEKANAFAlJZ +D9AFgwG4FTBIFIAAAAAAFwAodmVyaWZpZWRAdG9ycHJvamVjdC5vcmdERjgxMTEw +OUUxN0M4QkYxMzRCNUVFQjY4REM0M0EyODQ4ODIxRTMyTxSAAAAAAB4AKGJyaWRn +ZXNAYnJpZGdlcy50b3Jwcm9qZWN0Lm9yZzdCNzg0MzcwMTVFNjNERjQ3QkIxMjcw +QUNCRDk3QUEyNEU4RTQ3MkUqGmh0dHBzOi8vYnJpZGdlcy50b3Jwcm9qZWN0Lm9y +Zy9wb2xpY3kudHh0AAoJEMvZeqJOjkcuVyY//3Gqkvf84Mo3cLcpux1L6F1UqyQ7 +ZwgFAVbrtsR/8HbDD0BUIEoKUbqkqdMhhNeE+yNzlZHLMqgUxveb4sgfYNStMTJ/ +VSlNPTf/T25FShmS6BghWF8qubyKi4cpqyt3zD1INvvTWdRVzRpwxYRBKKWdALl2 +7J5PqvDSvevjx6h6Gc4FoO97WbK5qaQFOc2Nnw2CKCiEiyL3RciMR4IkvAPoxv+E +Wi6uhCD72s4apqkPiSnsdDqWI/MMkxP7ZKwyyAy/8qMsI79DqwEr2dmLs6AOIXgb +1ec4zMQLyiDFdYH9de0V2DHsZ1tevt18ijBvyC9vL7golk7vOJjUOYXsl6vLID8J +a5byVIgEjJzYYmkKs+8WGXUsZ5wGw5NSfuTHqlNM6XTHEH1CRtEkydCWEw1KCaDd +2n5R+GHnI+gEfLYLLenjJtIzWRqTeMDXZ2YaIuSxzVaqq+F8YURkAbmB4MkXgf37 +eHwLAxGD8t+/K5P8Zb4kYqChHYMqHS9XSQVrCAETc7rFmsnEldyaO2l4+1XA+8Z9 +0F3nh2cNHgYO36hJliXbmMZLkNTFUf4Yj7jM4U5UbcWhZR7HjqtEikK6V0YrMog3 +6lht97t18TZj9dU/BShivb83YJ0J6KBp8tFBJMSkBCP18NAI9J5uGjoYQH1NsaN5 +/por4/OvZsYX8rXvYeMoSljHK4Rh8do9XUnxIMtoNB1cwxL9rzLY7mSf+KwLrR7B +ikQRG2SKO0+SgUGTkfaS6/8tYUFSBWAw3F8TJNMrtgmpQ9c885WDDDwTowyQfwNq +i5Cy92b7fD8H+00WB+bV+Nr9o0rEcoakqlsnAorogo/QKejFqKxmNPGkL6sOAXs0 +xuDPwf79IZgOBLvh4967Eouh62DBMwsYjR30wOOgjHgbMmAGtk6DBqCXjUXbOGem +IKm3g3ThK9lk9PwDDHjCykkgoiGXisKvcl5/jgNuuJA77A2zeAPTdxhIVv+W0r50 +xvr88Z92uHn+Z29MHCerFoA74Q1SSTF7qimq/IxOXCSFgzKwLmsgKDtMKcGX/6Y3 +fEL2Oh4mGeox1mNvWZbJKrOohAci3DJMEetOvdv9Imtkty7yYXfI5fQt3F24aq49 +njlktd8aubRtbHcYa4QzkhZx+VmqhVGjja1sJAGmD2ayRASyZCROc2GDHQfL3kXS +IDrO3KKlgGGPPYEEkHm2aHzrqxo1TzgpH5udc1A3696Dcqi/CoGVEhYRA1S1CrGL +PQktOVMx873Q+tSC5vK2m39JKrG2MJnd/x35BQfnVBJ8C1ybSb2GVOlcHpY0yyI8 +6ioouL2pPXoUFH7edsd1R8XKSBdhKdXtf0vz8w927swURN+ScGJu8A3Zp/dK2nx7 +1S/lUmeflhvOVxQxRVe/tp2yrJKfcQFbDvA1B5/CwQUovI2hC1OHA54L36iCe7s/ +rFTRFWh8d6XvC5nM3BtM8o9cNGuXXC04/T2kbxbwgo1RnBZ4Z09u9/AaIgOpfDau +2WsfR9aaQbZmY9NQXnZ1osqnlwgen+mD2NNBpELFFQU+1PdNp/B5nJ/AC7M0Sx2g +kZjpWT9Ic0Gq5Mitnu1TpbbHTrETnMquJ+vKc/ft2YSWWShuIR8GqndKzYyh3T6y +XZJKeifQayOtFfkSs5n6MKlXs7Q99qLfUWSI4P5YZYhHpFa8HTdXJ2txb/lBjJPh +2YfvzXuxW8o7CXWaT4y8qdRRrGjIk+/JMtltLQfi5lQlTibdg/0whXEGSXZfd6YY +reQPZy33l5u+ECw6V8xyQE74pmH1jO+k3SZHYEN7HwRgyN8vHqzU/Se5elqzA7uP +KS7cEV+qgpHOrLTZnag+lyFObtrutAhrAF/VU1SJtZMZr5SxqxCFpEP+KY75FmhU +sCENe2PzZIoqcy5mQlnZHkAP+lHwt5SgMNcRx8AVDJGA+EAdcKlgLUTJLbfN3FKE +j5+CiL8CkM1XIr9/S4+SnghTljXplqCu/u3OD8ZD7R1DuVavGe6EJLNd+R4edg3C +KylnyMdejbucLKpanVxupGF6sDbvfTYw8k+DCkBow64Du7mXxEqxraSHr28e2F0I +3sGsAnPtKOoWcHWv7cLlu460zLBEuApOa9p+C4DgQ/SgSbcPJRqN0I4Pqdq3xW7I +z0Ch7+7y+wbFsFSQfkh1goVVaECarkExPOObwXwRuoIDDK/cDMyRXHZQXKelRc2X +t9ngbeTPDu62mIqRuXaDD8bLJw/JSG0tQbFLL+xW+tnA308sZhHaitCB+FlzPbPT +LhDbbYPiJP+U+8oMyG30C2BdIgx8dcTS5aEvy113V2BE63T4ybytKonGd5tJDnZp +cRaJvmQt9ElbV5aWbRSDwJ7n2Wiz+zhij+UL9KWVS/ANMAlDGwZ+gzKOqT9HYSTG +58KMf5+IoWi+UmXdrG9nlIh8NKu8Zl1oaCZ02yaQTV9pI8O1CsDunIDTUBEZN4dD +d6nwL4CnFhTsv8LU3EJpK4VxRQ6kVp9Rz8F644QqvF0LQ1oKf79MkhsNvMm8PLja +fojXMuSDLymhGQ39RcHTITIUg/+kaN4jI921eSAzOuwXNzWdg44nsNukzYB341FX +TurUl9YNm0cPyq2hmYyjJcqWOcgQeYkAOxvAm0r0kUcgwyHwmctlmK/VznC1jTga +MfP6DDPKjxpyQ3/LAbrOMLnivMZz++Tdgk3TgCefwAQMFNKB725CYspv6VN3K8zB +klHqPZwzyHw0O+tBuQINBFIv8oEBEAC2f6e8USDR2OzDH9/26PyNFkcVh3dQBPbU +U6MhINUtrtWK1li+TPQ/LGkbKfXKZ6RhLoVt77uxuJ2rGNu6js+G0irtWDAFSAuf +L9bRJwanaNcxKzY4bN/D65iSm27PbQ32GDotsdBpYTGyKzUrXGaZwnS2ulOjSzG4 +IAy9RsYzD2ATIuE7S4HCHkQ1Eo7GbHGZICsbOUJElXN0q2Mq2msiHPFrSKQy3MT7 +ev4PdK22rWcwXzvvd0c+6lFx5oM7jNIctRb5+tfaNyOQ7Fq3zs/bf0Ls56DgcOD3 +8wzzU+1Zc2TeMRwHK+fuwfgx/SLL5QreTZEBbmKRWQqVzWg9lzrZiKo0wnizX3IE +xI9KqFCBCsimwSIHz/u0trS18vCSlE8uYPZMV0Hh7ni8pEODLdfCR9JzB2x20JdC +tyxk+LnEQzpozbZUApbVS5CJNxopsqirP73WfXPnZuAJMdarCXML73l/opiXtnvU +VKHXMVl8Vq2J7j2uW+Z30dYvhn1dKJ/z7QEPIHPQpCaTIquU0AzhYRT+skHKu+7F +7lJBJeampqbXnc9vBNCOvd7pZ38HLBPNKcZKSBup99w2SUhMqoLVoxNT9qZ7FXzu +SC7N5ii3u2ztb96jF3ApDAhh/5MM77aMKmL2OIGmTA2bUBWPFO5SPRXUVL1XXhwA +duMtvdZ4cwARAQABiQWDBBgBCgDTBQJSL/KBSBSAAAAAABcAKHZlcmlmaWVkQHRv +cnByb2plY3Qub3JnREY4MTExMDlFMTdDOEJGMTM0QjVFRUI2OERDNDNBMjg0ODgy +MUUzMk8UgAAAAAAeAChicmlkZ2VzQGJyaWRnZXMudG9ycHJvamVjdC5vcmdERjgx +MTEwOUUxN0M4QkYxMzRCNUVFQjY4REM0M0EyODQ4ODIxRTMyKhpodHRwczovL2Jy +aWRnZXMudG9ycHJvamVjdC5vcmcvcG9saWN5LnR4dAIbAgUJAeEzgAKkCRCNxDoo +SIIeMsHYIAQZAQoAgQUCUi/ygU8UgAAAAAAeAChicmlkZ2VzQGJyaWRnZXMudG9y +cHJvamVjdC5vcmc5RkUzOUQxQTc0Mzg5MjIzM0IzRjY2RjIyMUI1NTRFOTU5MzhG +NEQwKhpodHRwczovL2JyaWRnZXMudG9ycHJvamVjdC5vcmcvcG9saWN5LnR4dAAK +CRAhtVTpWTj00Ns/D/kBN79Pz55pOgLe/RNg1Efme95C/MBZ2eyEPeWe9+yAOFuK +XCJ8qlzkscpdTeu9vjYcfZy7RyS6Sx0NO8gJkP1wmNGr8X4zObSk0IAmDSlCcdpp +YVCPD4IdgSiLNqLdL6JjGE0d5J0DpPLvGbj5sc1/QCpuVt3p0rCr0S+PAAjrNmwA +e2yYdFQx2sXAZ0pp7oJJyFRPYlAUE8RYyG/N2kMYAJZVpI+zFgq5iD0uCmzAZyh/ +62mtGMpGXwy1KHS5+NtUGVN5Iqkvlj59xNEPc8jzDs5yvfOOvpelgbhJQ0exbDHK +78NNeDvouTX/4F1ofbmEM4BqwtQ5TvJEvzMP9zszQWQZd2OvkjYMQSrDMn1w8daO +mBvw319kug8U/0k6YoYcg2rE17tN/CJN0Pq4Mqz+79ArVT6jeJgFcFNER2ik9R0F +Mz3BhFSHIZdMQouFQ/cwaldiWB5g+tJ2nvpXI3cHMtNsy/77uvHIrEv1xZhTSmdc +eA8LmfIdfmepeaEyeTEAPcGebyf1cN+CLJMMTGqSwSHZVe3KFV8t7PKUQ/Z/C13z ++YAEEKxOPNlboVF9FECNRlZkYWkWDyejXHklL26KzBE/mDWoeKM0VakbJO0laXlU +13R334u1VRfWNGkNSmyNlzGqzd+y/Dan4f/NDXAW8Ouyhq+Go5Or4ASclztkbznu +D/9mG59d6ZeeT+1u+dYeWNUjAYkIt3B/TMOs0KQjxHgvbogto1jy4MMvSfyygkCq +zDURZslBXw6gZbSHu1XZrfApaX0tphhOmiwztbwOr4aEDKv5MsT9MgkXEEh8BesF +g/3yUnZ34I8laKfWJQqxVI+reKz/aJYCx9gcoY2jJAaMQoSsxjtFU/KAPvkRhgq/ +QobO5BS/DPWn8SqMzLXlrG2UjR/E5mb6aQU5yDEtSrMuIHQk0hnc3OrgoNX8mt/B +uhVirtqmsJmrftcfvAfXFWp0RIzsh9qixYeE4yAUSX5mZ4a0zheq/jVAnL0KJEEn +p2Mw8pkBSmfJS0QpHtMxoaOkZSZO/Ofah751X2Hlr7KVG9ZUdqm8kKtDMJc/JCDz +tJSpzioUBcXcuG31sfUOayYtS3RG385SuxaC1IiY6QVQvVSh90UVtatfv/jiuWmb +ddgM7Eifto5ybTnPFNkQASRiFmz3NyrWbinmjnMfC94JJRJVwgOUree3KahjopLC +r6WiZEknm8SqaipkH7o7xKN7HIe0kvx67YqwTmCH1wK81pQQrbqZPh6xzCys+AXb +5VK8yoVX4duo7cQGYiODGaw0SqNqXFkzsJ0fy00LDfmKF7KVvtF2qSK50kgAe3Fc +tQRxUklWHHz5IEviG8nBETtXERQLhilK4E3BPc9BA+aPm7kCDQRSL/KeARAA0zi0 +eXuTSikT6Ywm+Af/GGJFofqK2+9BKICGeo+b/Hf3Yy8oY6mfQSJIeNf4WCjMJ7Gu +CpA5E2l9HjbtwRQdsxoGdRkne+duREsYqrLlyJQINqXse28rGhX7mtJ1MeuLZmkJ +tlwK3ZI/8CNKW4PonVspt1kEJmS8k0285fK6UxLU7fktpus9xHgIRB7jRR9eoRA1 +MsJXn9xKLV9547hYi6mjb581GA8YVLyndtitXrNYIIrKYD/nm9W5DAKcXnH9q6pk +lBHL7Lk1oqeKBmTwSxg0HjSh5AlFW4+ME8lgyEbbaN8IvuAhTxFc8PobY9XEH07L +T6lHRuzUjpi0IIHnaFHb+wCZuDCSYshGsZfiAH+gH8K65t3jkr9D4KFMTq1G/b4S +KC/IofILYqr0PamGkUH0AP8N2dErtmH6HH0EvFMPfahvqE4InhuhernfPoTGQGFW +Ram1Ps7czMgxOoeB35ZLelTSdB5NFaBd/E07O+6R11wWyw+ks0erWzbkfa/5W5gv +EH9gNWQE4UdIrhoTURbVD6NvBsWpMRnS2fZByMY5exDf4LJmE8LhIa/snzbS8LUh +9KI3qmw5oLn74IfkiEwrcjQwFLKY62WBLRdDR0aUqJtjRVRCzKjEcnVP53KYdaxm +YFaev81Y+sSJYSpqo+T9cv/QdHOE7tQsyaZCecMAEQEAAYkC6QQYAQoA0wUCUi/y +nkgUgAAAAAAXACh2ZXJpZmllZEB0b3Jwcm9qZWN0Lm9yZ0RGODExMTA5RTE3QzhC +RjEzNEI1RUVCNjhEQzQzQTI4NDg4MjFFMzJPFIAAAAAAHgAoYnJpZGdlc0Bicmlk +Z2VzLnRvcnByb2plY3Qub3JnREY4MTExMDlFMTdDOEJGMTM0QjVFRUI2OERDNDNB +Mjg0ODgyMUUzMioaaHR0cHM6Ly9icmlkZ2VzLnRvcnByb2plY3Qub3JnL3BvbGlj +eS50eHQCGwwFCQHhM4AACgkQjcQ6KEiCHjIPZhAAs5l8T2mWL+kG8WbNyjdISe/W +D0zZ5E2vAnCq5DcxZ4rax3GblJWRxo1frRT5xoq21adGs8TC5NG1u/40KYn30aB2 +9YE6ida9yCR2R2EYKgX5sKGTXXOpnbFa9og4gXHrgU0f9vwT0rY7CyaRmjBfBxRX +fCy7i/+dnsuwhMHn0RHJL4yIEdmQk/HFA6Taep6ACl8Wfrebg0TX5zi63v1RbC4e +KBt39p+l46+UzGWGqP7yfLrHpYNMUIGJOgImvOWeHa2QWJWojHjCuXt5oIuER4ib +p0lUO2B56wljoAjYvgPHWLAVIAMaxQMriMalF4Nlmcgj0I4aWcFuKMXZVUuie/Ps +Epj8U2JpIWmGQhzUNN2eUF5WNV/8VPF/WqzcYBBlmGz1lMzRCmQ/Ws1DlJz2i5Pj +L2cOVatJrRH7Iwz4YPHxgtv+T777GfezuqaIq+ZDKlICxFjalg1gHe40hxsUDdH1 +oJrb5Tg6RD7QV//wDxHDi43p4iL57d3V8LLl/dICA03n/c4ilBBfoh0gWTCjw3pb +sgww4Q39lcUmcittWG5/xS1OLD9WVLSQ42rUu3c5hPL35zAOhFZsFJSIPuZ2ip8E +T94oJR/vE4KRRZca7Uy5A0TcPmB4qTMfaCmWjQOyCxPyJKc2ECx+thiHKglL62Ww +qgQ42nQM/debtU+2aTo= +=ieIZ +-----END PGP PUBLIC KEY BLOCK----- + + +# pub 16384R/CBD97AA24E8E472E 2013-10-12 +# Key fingerprint = 7B78 4370 15E6 3DF4 7BB1 270A CBD9 7AA2 4E8E 472E +# uid [ultimate] BridgeDB (Offline ID Key) <bridges(a)bridges.torproject.org> +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQgNBFJZB+QBQADcx7laikgZOZXLm6WH2mClm7KrRChmQAHOmzvRYTElk+hVZJ6g +qSUTdl8fvfhifZPCd3g7nJBtOhQAGlrHmJRXfdf4cTRuD73nggbYQ0NRR9VZ3MIK +ToJDELBhgmWeNKpLcPsTpi2t9qrHf3xxM06OdxOs9lCGtW7XVYnKx3vaRNk6c0ln +De82ZWnZr1eMoPzcjslw7AxI94hIgV1GDwTSpBndv/VwgLeBC5XNCKv0adhO/RSt +fuZOHGT/HfI0U0C3fSTiIu4lJqEd9Qe8LUFQ7wRMrf3KSWwyWNb/OtyMfZ52PEg9 +SMWEfpr6aGwQu6yGPsE4SeHsiew5IqCMi64TZ9IcgY0fveiDzMSIAqnWQcxSL0SH +YbwQPxuOc4Rxj/b1umjigBG/Y4rkrxCKIw6M+CRaz203zs9ntOsWfnary/w+hepA +XLjC0yb0cP/oBB6qRyaCk2UTdqq1uWmJ2R/XhZHdZIDabxby6mvQbUQA/NEMOE/B +VrDonP1HNo1xpnY8lltbxdFD/jDikdjIazckMWl/0fri0pyPSdiJdAK2JrUniP9Q +eNbgcx3XvNnfjYjiQjTdqfxCTKpSmnsBNyYng6c4viOr5weBFXwEJq2Nl7+rP5pm +TF1PeiF769z4l2Mrx3X5sQqavTzd2VBMQ6/Kmk9Emxb8e1zyQD6odqJyTi1BBAes +F2BuKLMCVgZWOFSNGDOMoAUMZh0c6sRQtwz3KRBAuxUYm3wQPqG3XpDDcNM5YXgF +wVU8SYVwdFpPYT5XJIv2J2u45XbPma5aR0ynGuAmNptzELHta5cgeWIMVsKQbnPN +M6YTOy5auxLts3FZvKpTDyjBd/VRK6ihkKNKFY3gbP6RbwEK3ws/zOxqFau7sA5i +NGv4siQTWMG++pClz/exbgHPgs3f8yO34ZbocEBdS1sDl1Lsq4qJYo2Kn5MMHCGs +dqd7Y+E+ep6b74njb1m2UsySEE2cjj/FAFH91jfFy5PedNb/2Hx6BsPJVb7+N4eI +pehKQQ46XAbsMq6vUtI4Y0rFiBnqvpERqATQ2QhnEh0UmH7wKVQc4MREZfeEqazV +G/JFt5Qnt3jq8p6/qbWlOPKTLGUqGq3RXiJgEy/5i22R2ZDjafiGoG1KsZIVZg39 +N25fT8abjPWme6JI3Jv+6gKY8tURoePZcMp/rw0NFs1HtCKUAU6FEOh6uJO7KNie +eE8qG8ItRXVYnP4f8MFyFkHZcJw27d0PT3IrCM1vJwjqgb2j2xWM/8GJDDuUyims +jvLDH1E7ek600H3FT5c9xPcgwfMM8BOdBNu0Evm9sdZBZFket+ytXo6GKyS/d91D +FWE+YL+25+sZJS71dnvSUWVneJrTLFasefvPfIR9/aLJoLVFHnN9sUHfVMj0KlGl +8AuxL7QfNQawvyjoV8rw/sJOQOwwhof1gZz0ZyjuTKj0WekjmDxcRzVY0eX6BzTm +o7r4jrHl1Mi75svnKCpXi0Vu/1ZqSnKjCjhRTXDLm7tb8b18jogsgDfs7UkUNwD/ +XF8EfTTU4KotLOODAZIW+soFJZgf8rXQZLRShQmre+PUJfADEUd3yyE9h0JIunPQ +CxR8R8hVhK4yqFn662Ou7fEl3q8FYBBi1Ahn+263S7+WaZGo7ElwzfRb97gP1e77 +eYd8JwY7UBIQku83CxQdahdGOpAfyvhYW2mxCHVZLXObwc18VgRMa7vjCbkGRPSN +5NecU5KGW6jU1dXuZk0jRt/9mqtYPjJ7K/EVJD9Yxmz+UdxH+BtsSRp3/5fDmHtW +CB39a7fetp0ixN503FXPKQUvKAKykETwevmWOzHH3t6BpY/ZSjDCC35Y3dWeB54H +qNta1r0pSWV6IARUoVteAOcuOU/l3HNzY80rL+iR0HiaszioBsd8k8u0rWXzM3BP +3vhTzccaldSWfqoT86Jfx0YLX6EoocVS8Ka5KUA8VlJWufnPPXDlF3dULrb+ds/l +zLazt9hF49HCpU1rZc3doRgmBYxMjYyrfK/3uarDefpfdnjbAVIoP26VpVXhLTEM +oaD+WoTpIyLYfJQUDn1Q06Nu393JqZb8nRngyMeTs73MDJTzqdL4rZXyweeTrtYe +4yy+Kc3CZdPlZqpkbuxP0cO0ivaTLdXsTCHDnpk16u4sDukcsmlaTF5d75nu/KIQ +o3nk0g9NvoschDcQiExuqCUOXCkKcUvYVHsuglAuT+AqK692562JrDOVoGwkUVvm +Qfo0AQvBvXUzHY4YuBUdWbjWsC4sj6B+MW/TIs/OlKIbPE3MHeDhEGLl/8uBceVo +kM36xm4F8wDwPK4GPyi/D+3piqBsrsjkgRlodQIUS7A9V19b8TWbUFeH4JGJ+5EH +9WErBlrsQrnosojLchGGp7HxSxWLBiwdnltu6+/hwbBwydJT8ZxPUANIwTdB+mOE +ILUXBkpIDfVSoZD7qWlntai53BDQr5pfMJhv15di4XAhtqv43vAmA57ifd+QJS2U +AfYc4CdX0lk2BZ4jRD8jCZ4Uxw15E3RqhnXsWDRxtD4fwsb2ZFi0DDuPlwBdGgh5 +Rm2Bz9JjSV6gDEuXr/JtAzjSz1Jdh8wPkSofiHGTfxysVhlGlg+YPRziRlzML8A2 +0xY+9mPxEEin5ZQ9wmrDyiiOBvPTbG3O9+Sp5VZDuD4ivW/DHumPWGVSRdjcAQDe +HMXUVGjhBDnj06XNrgJPhODdJeYq0EnGTt15ofZQSswD7TTTRPDOn0Cz/QARAQAB +tDpCcmlkZ2VEQiAoT2ZmbGluZSBJRCBLZXkpIDxicmlkZ2VzQGJyaWRnZXMudG9y +cHJvamVjdC5vcmc+iQkfBBMBCgEJBQJSWQfkSBSAAAAAABcAKHZlcmlmaWVkQHRv +cnByb2plY3Qub3JnN0I3ODQzNzAxNUU2M0RGNDdCQjEyNzBBQ0JEOTdBQTI0RThF +NDcyRU8UgAAAAAAeAChicmlkZ2VzQGJyaWRnZXMudG9ycHJvamVjdC5vcmc3Qjc4 +NDM3MDE1RTYzREY0N0JCMTI3MEFDQkQ5N0FBMjRFOEU0NzJFKhpodHRwczovL2Jy +aWRnZXMudG9ycHJvamVjdC5vcmcvcG9saWN5LnR4dAIbAQMLDQkEFQoJCAQWAgEA +Ah4BAheAJxhodHRwczovL2JyaWRnZXMudG9ycHJvamVjdC5vcmcva2V5LmFzYwAK +CRDL2XqiTo5HLoqEP/48rFpJCVStn8xo+KkHSVvsqpxDRlb/nNheI+ov2UxILdwl +NIU6kLsvKECKPe1AHKdS/MzANbkTF35Y4QgZsNpVXaCVL7adGBSzOdPFupDJJVOu +wa+uFRc/FuNJyH/TIn56/+R5J5C54OxIYNxvW3WF4eHKLJYk/JZOMMfy4iWm7Sql +0nDC5O435nK4F4Jb4GLPlUIzioIy2OWqGoFHXymbGhL1tWaqasYmED4n3AMqlYw6 +xnNhdWOc/KZelPl9nanybyh0IIdZqUKZleRt4BxSgIT8FqC2sZuZ8z7O9s987Naz +Q32SKaP4i2M9lai/Y2QYfKo+wlG+egmxtujz7etQMGlpgBZzFLdJ8/w4U11ku1ai +om74RIn8zl/LHjMQHnCKGoVlscTI1ZPt+p+p8hO2/9vOwTR8y8O/3DQSOfTSipwc +a3obRkp5ndjfjefOoAnuYapLw72fhJ9+Co09miiHQu7vq4j5k05VpDQd0yxOAZnG +vodPPhq7/zCG1K9Sb1rS9GvmQxGmgMBWVn+keTqJCZX7TSVgtgua9YjTJNVSiSLv +rLslNkeRfvkfbAbU8379MDB+Bax04HcYTC4syf0uqUXYq6jRtX37Dfq5XkLCk2Bt +WusH2NSpHuzZRWODM9PZb6U3vuBmU1nqY77DciuaeBqGGyrC/6UKrS0DrmVvF/0Z +Sft3BY6Zb3q7Qm7xpzsfrhVlhlyQqZPhr6o7QnGuvwRr+gDwhRbpISKYo89KYwjK +4Qr7sg/CyU2hWBCDOFPOcv/rtE0aD88M+EwRG/LCfEWU34Dc43Jk+dH56/3eVR58 +rISHRUcU0Y603Uc+/WM31iJmR/1PvGeal+mhI9YSWUIgIY8Mxt3cM2gYl/OErGbN +4hWAPIFn4sM9Oo4BHpN7J2vkUatpW6v4Mdh+pNxzgE/V5S21SGaAldvM1SzCRz52 +xRt642Mhf6jqfrwzXf7kq7jpOlu1HkG1XhCZQPw7qyIKnX4tjaRd9HXhn9Jb2vA5 +Av+EOPoAx6Yii5X1RkDILOijvgVfSIFXnflHzs58AhwHztQOUWXDkfS5jVxbenbV +X4DwgtrpzpdPBgBYNtCGBy9pqhWA2XnkH2vjchZy+xIAoaJNIVBfNkR8tflJWEfm +i/2U0jJnhY8dEClbu3KQnbwKe5E9mTz1VmBsdWaK5rBVZamD/wssQzzyf3SXXXIU +W6DUXOCzgWvxvqC09lc4izEAxwUktMY+aapplNs/kjOqHYVkW4zpWGp4PDAT/DW9 +/727CeoqY29HePaeGl0/PpR37CkquP69oQeJSU9CNeyAKnQtvaqxLBcEOohSaPtK +Iy1q6yQgT4j+gVAsFDVyobCNkA8B0GfemDcEXA5dfriTHN72Br0koS0nvv6P5k7T +7aaSNX++zdEnPauAZXPPjVt7R1sEvx0Oj+l1pu9hNX0nldaNs13bPU5DIOYv+5fN +En6pqzYGj/0v8Qeb53Qv5de+lo7ZAu/truVa+GOT3ay4jZBaFh2mDZbA+t1V3GmB +FtYGoVfou4iBQpx6tJLg3PKvtPj9g5B4LTxZVKrdfHXWyNNQOLzWSIgFj44+SmhU +LVCXofEvJ0sOX2wtqy54Q4lMIc6BK1IB+hsFV6sSnIeI7YmrRXusWEG0wnroNlbq +FiWg5+oeI1CnnCyj4FmDX/A/Bo0RxD0x3yqDximkOpcHMtLLfFjK3d5ltwBgDOOe +pvgabxID01mZxh3OYKdGpW3Z1VKEhHjF5e9BhhEKQ8mG3raaDs2hQ2iuEqTzNLif +aQdRCYd62jS14qSy2Dd+oZ0FbgzJNigWldvuwWzJCO2toF29pvfWtYRuqV/Vt3CK +iO7en9bhOMRynPlCkAR7ZiZvT9dzStiMKf1v8mzgRjCIiLIwM1v/xNZWEZ/TOfSR +E7dBMbDzaNjtCsMmNiyplqCjWbaj4irdIhKbtKJ02a1Jopo1/XNK0Y8AbK1xEHV0 ++mjBYU/Pfqnf0WFhkJgha+J17wqrUxf2/Y1b/pdDMGqVWe9+p8tvSP5FNddNyecZ +0pojFH0jAzHpQen7eeIA3XupVe6cTEhNz4OjHBlZE6dN0q8UDdeG75yPunwShQiO +kRXA/qxkID/2OLIInWJP0HG05hncGfWZKCLBc/dFg3dNo8VKpw/Q6uMBj2iGi8iB +lnQGmHQa3j1ANPbcl3ljdJQDEnxk5TEVxNPYUw/BI58l3p+Z3vAZqC0Io7EgpuZ8 +qPuV6hJ2c/7VuFAXVs2mUExtWAjbgnYAfsJtn1yk3sphl65TjPnZwaBlP/ls/W/j +mVjAx9d5b3mmMBJmNZDvY1QvcftDgfL5vYG5g7UwsbojuNxeM4rwn8qCKk5wC1/a +Zl6Rh2DG4xS3/ef5tQWw28grjRRwv5phYKtedsKpYRscKAMhiOsChAiSYuCRczmI +ErdO8ryK8QNzcpE4qVzFQMEtkG6V0RYYjMJzJuY5BW3hKt1UNNaqiGBpNKuf0GoO +zK/vMgxoo+iFmOuaBdQEjlPLbK+3k+7j14KKVI655AXVKyAsOoSYPzOqfkdiu9W8 +34fOanH7S+lclkXwxTbXko9Jt6Ml64H4QKwd8ak2nCcX9FuMge7XP9VL/pBBMXcB +WHUKdoqMJExcg5A4H2cyxZ6QgHzNFgqV/4+MGGP+TMc9owzrT3PBadVrMxnHnjc/ +/XYv48p2rRkjyjrtH+ZO9rlOsw0OmGgh9yoQPZn2tiNhG9piyvVxFKZflJm8I4kC +4AQTAQoAygUCUlkPIkgUgAAAAAAXACh2ZXJpZmllZEB0b3Jwcm9qZWN0Lm9yZzdC +Nzg0MzcwMTVFNjNERjQ3QkIxMjcwQUNCRDk3QUEyNEU4RTQ3MkVPFIAAAAAAHgAo +YnJpZGdlc0BicmlkZ2VzLnRvcnByb2plY3Qub3JnREY4MTExMDlFMTdDOEJGMTM0 +QjVFRUI2OERDNDNBMjg0ODgyMUUzMioaaHR0cHM6Ly9icmlkZ2VzLnRvcnByb2pl +Y3Qub3JnL3BvbGljeS50eHQACgkQjcQ6KEiCHjIaqBAA0BuEs7horx6iCq4cjAhv +YPLrxuC4fKEfVyhAjCJMJSFFCPAlGgU+BjyPNDD57wzKAmUkdJG+Ss25mwWXa53w +5R2kDqDnHocOdZGtxZ7zx/uUd2eWLNBfVuK7nHOk1d1Hs0OZBnckc+MCqnLtuYe5 +68pa9+jW6cNIjAnzMIListmoXWgYYWJvMKeBMG4DGtYJ8w7CJQjOHc5yar12DrX3 +wnQ7hXtFuuqQblpEUnLnZGvHf2NKMZfBBMcP96h9OmLGNa+vmNYsMyPKU7n5hPgX +nTgmQ4xrv1G7JukjppZRA8SFoxupcaQeTixyWERGBhBiAbwZsbQz8L/TVZKierzg +sdNngHcFzE8MyjuJDvTos7qXPmgSRXFqJLRn0ZxpR5V1V8BVZUqCGuSZT89TizsD +z5vyv8c9r7HKD4pRjw32P2dgcEqyGRkqERAgSuFpObP+juty+kxYyfnadBNCyjgP +s7u0GmsTt4CZi7BbowNRL6bynrwrmQI9LJI1bPhgqfdDUbqG3HXwHz80oRFfKou8 +JTYKxK4Iumfw2l/uAACma5ZyrwIDBX/H5XEQqch4sORzQnuhlTmZRf6ldVIIWjdJ +ef+DpOt12s+cS2F4D5g8G6t9CprCLYyrXiHwM/U8N5ywL9IeYKSWJxa7si3l9A6o +ZxOds8F/UJYDSIB97MQFzBo= +=JdC7 +-----END PGP PUBLIC KEY BLOCK-----

1 0