September 2015 - tor-commits - lists.torproject.org

[torspec/master] Make a bunch of notes in proposal-status.txt
by nickm＠torproject.org 09 Sep '15

09 Sep '15

commit 99a660b440a46ba9e25c02273acda6dfd36c7ff7 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 9 12:24:02 2015 -0400 Make a bunch of notes in proposal-status.txt --- proposals/proposal-status.txt | 133 ++++++++++++++++++++++++++++++++++++++--- 1 file changed, 124 insertions(+), 9 deletions(-) diff --git a/proposals/proposal-status.txt b/proposals/proposal-status.txt index f094583..869ef1b 100644 --- a/proposals/proposal-status.txt +++ b/proposals/proposal-status.… [View More]txt @@ -65,6 +65,8 @@ again to remind me! Probably, there are better choices when it comes to distributing software and updates. (11/2013) + I say, mark it OBSOLETE. (9/2015) + 131 Help users to verify they are using Tor [NEEDS-REVISION] This one is not a crazy idea, but I marked it as @@ -72,6 +74,9 @@ again to remind me! our current designs. It seems mostly superseded by proposal 211. (11/2013) + I say, mark it as OBSOLETE and make a note on proposal 211 to see it for + historical information. (9/2015) + 132 A Tor Web Service For Verifying Correct Browser Configuration This proposal was meant to give users a way to see if their @@ -81,6 +86,8 @@ again to remind me! that run webservers on localhost, since they become a target for cross-site attacks. (11/2013) + I say mark as OBSOLETE. (9/2015) + 133 Incorporate Unreachable ORs into the Tor Network This proposal had an idea for letting ORs that can only make @@ -90,13 +97,20 @@ again to remind me! who wants to analyze new network topologies should definitely have a look. (5/2011) + For this I think we should introduce a new proposal status, + "RESERVE". A proposal is "on reserve" if we're not currently + planning to implement it, but we might someday want to do so if we + decide that what it provides is a great idea. (9/2015) + 140 Provide diffs between consensuses This proposal describes a way to transmit less directory traffic by sending only differences between consensuses, rather than the consensuses themselves. Daniel Marti implemented this for his GSoC project last summer; it is still under revision and on target - for merge into 0.2.7. (See ticket #13339) (2/2015) + for merge into 0.2.8. (See ticket #13339) (9/2015) + + This needs code review, and needs to marked as ACCCEPTED. (9/2015) 141 Download server descriptors on demand @@ -110,6 +124,8 @@ again to remind me! some difficulties in using in a way compatible with it. (6/2012) + I say mark this as OBSOLETE or RESERVE. (9/2015) + 143 Improvements of Distributed Storage for Tor Hidden Service Descriptors @@ -130,6 +146,7 @@ again to remind me! This is probably superseded by proposal 224; we should close it IMO. (2/2014) + Time to mark this as SUPERSEDED. (9/2015) 144 Increase the diversity of circuits by detecting nodes belonging the same provider @@ -142,6 +159,10 @@ again to remind me! did in 2008, particularly in light of the relevant paper(s) by Matt Edmann and Paul Syverson. (5/2011) + Mark as OBSOLETE. The research field has advanced very far since + this proposal, and new papers on this topic come out every year. + (9/2015) + 145 Separate "suitable as a guard" from "suitable as a new guard" [NEEDS-RESEARCH] @@ -160,6 +181,8 @@ again to remind me! approach for weighting guard node selection probabilities; we should probably close this ticket. (2/2015) + I say, mark as OBSOLETE. (9/2015) + 156 Tracking blocked ports on the client side This proposal provides a way for clients to learn which ports @@ -192,6 +215,8 @@ again to remind me! This is an overview of SoaT, with some ideas for how to integrate it into Tor. (5/2011) + (Mark as HISTORICAL? INFORMATIONAL?) (9/2015) + 164 Reporting the status of server votes This proposal explains a way for authorities to provide a @@ -203,6 +228,8 @@ again to remind me! implement, and would be a fine project for somebody who wants to get to know the directory code. (5/2011) + Mark as RESERVE. (9/2015) + 165 Easy migration for voting authority sets This is a design for how to change the set of authorities without @@ -222,6 +249,8 @@ again to remind me! 0.2.1.20? If so, we should make sure that tor-spec.txt is updated and close it. (11/2013) + Should update Tor-spec, should close this. (9/2015) + 172 GETINFO controller option for circuit information 173 GETINFO Option Expansion @@ -230,6 +259,9 @@ again to remind me! accepted and some parts of 173 are even implemented: somebody just needs to implement the rest. (5/2011) + Should mark as ACCEPTED; should open tickets for them; should + consider whether they're needed, though. (9/2015) + 175 Automatically promoting Tor clients to nodes Here's Steven's proposal for adding a mode between "client @@ -238,6 +270,9 @@ again to remind me! attention when it was posted to the list; more people should review it. (5/2011) + Mark as REJECTED. I don't see us doing this any time soon. + (9/2015) + 177 Abstaining from votes on individual flags Here's my proposal for letting authorities have opinions about some @@ -246,6 +281,9 @@ again to remind me! right. With more discussion and review, somebody could/should build it, I think. (11/2013) + Mark as RESERVE. I still love this idea, but nobody else seems + to think it's necessary (9/2015) + 182 Credit Bucket This proposal suggests an alternative approach to our current @@ -260,12 +298,19 @@ again to remind me! explains how we can get rid of the requirement that non-bridge directories have an open directory port. (6/2012) + Mark as ACCEPTED, after updating it to match in-progress work for + "everybody is a directory", which is ontrack for 0.2.8. Or maybe + that work is closer to 237? (9/2015) + 188 Bridge Guards and other anti-enumeration defenses This proposal suggests some ways to make it harder for a relay on the Tor network to enumerate a list of Tor bridges. Worth investigating and possibly implementing. (6/2012) + Update and then mark as ACCEPTED; isis has code for this for 0.2.8. + (9/2015) + 189 AUTHORIZE and AUTHORIZED cells 190 Bridge Client Authorization Based on a Shared Secret [NEEDS-REVISION] 191 Bridge Detection Resistance against MITM-capable Adversaries @@ -277,6 +322,8 @@ again to remind me! Number 190 needs revision, since its protocol isn't actually so great. (11/2013) + Mark as RESERVE. (9/2015) + 192 Automatically retrieve and store information about bridges This proposal gives an enhancement to the bridge information @@ -284,6 +331,8 @@ again to remind me! are able to update what they know about them over time. Could help a lot with bridge churn. (6/2012) + Mark as RESERVE? Do we still even want this? (9/2015) + 194 Mnemonic .onion URLs Here's one of several competing "let's make .onion URLs @@ -292,6 +341,9 @@ again to remind me! we go ahead with current plans for hidden services that would make .onion addresses much longer, though. (11/2013) + We're not going to do this like this, I think. Mark as + SUPERSEDED. (9/2015) + 195 TLS certificate normalization for Tor 0.2.4.x Here's the followup to proposal 179, containing all the parts @@ -306,6 +358,9 @@ again to remind me! fingerprinting can be helpful for snoops; we should take another look at it. (2/2015) + I think we should take a pass over this, pick the parts we still + think are relevant, and call them ACCEPTED. (9/2015) + 196 Extended ORPort and TransportControlPort Here are some remaining pieces of the pluggable transport @@ -314,6 +369,9 @@ again to remind me! now; we should figure out what's left, and whether we want to build that. (11/2013) + I think we should mark this FINISHED. We're not going to do more + than we have now, afaik. (9/2015) + 197 Message-based Inter-Controller IPC Channel This proposal is for an architectural enhancement in Tor @@ -321,6 +379,9 @@ again to remind me! various programs (Vidalia, TorBrowser, etc) that are using it. (6/2012) + Mark as RESERVE or REJECTED. Nobody's asked for this in a really + long time, and I don't want to be dbus. (9/2015) + 199 Integration of BridgeFinder and BridgeFinderHelper Here's a proposal for how Tor can integrate with a client @@ -328,6 +389,8 @@ again to remind me! done on things called "BridgeFinder"; I don't know what the status of the current proposal is, though. (11/2013) + Mark as OBSOLETE? I don't think this is still a thing. (9/2015) + 201 Make bridges report statistics on daily v3 network status requests Here's a proposal for bridges to better estimate the number of @@ -336,9 +399,11 @@ again to remind me! 202 Two improved relay encryption protocols for Tor cells Here's a sketch of the two broad classes of alternatives for - improving how relay encryption works. Right now, progress on - this proposal is stalled waiting for the ideal wide-block - construction to come along the line. (11/2013) + improving how relay encryption works. Right now, progress on this + proposal is stalled waiting for the ideal wide-block construction + to come along the line. AEZ seems like it might be close to what + we need. Other cryptographers are also looking at designs that + might be a good match. (9/2015) 203 Avoiding censorship by impersonating an HTTPS server @@ -346,6 +411,8 @@ again to remind me! HTTPS server (by *being* an HTTPS server) until the user proves they know it's a bridge. (11/2013) + Didn't we do something like this? (9/2015) + 209 Tuning the Parameters for the Path Bias Defense In this proposal, Mike discusses alternative parameters for @@ -361,6 +428,9 @@ again to remind me! consensus from non-Authority DirSources, but we shouldnt' do anything to increase the load on authorities. (11/2013) + This needs an update; it's a pretty good idea, and Mike and Roger + like it. It goes will with FallbackDirSource stuff. (9/2015) + 211 Internal Mapaddress for Tor Configuration Testing Here, the idea is to serve an XML document over HTTP that @@ -371,6 +441,8 @@ again to remind me! the idea of having any more magical addresses like this; we got rid of .noconnect for a reason, after all. (11/2013) + Mark as REJECTED. (9/2015) + 212 Increase Acceptable Consensus Age This proposal suggests that we increase the maximum age of a @@ -381,6 +453,8 @@ again to remind me! was some tor-dev discussion on this one that should get incorporated into a final, implementable version. (11/2013) + Mark as ACCEPTED? (9/2015) + 219 Support for full DNS and DNSSEC resolution in Tor Here's a design to allow Tor to support a full range of DNS @@ -394,8 +468,10 @@ again to remind me! done with reasonable confidence, and figure out the client side once more servers have upgraded. (12/2013) + Mark as NEEDS-REVISION? (9/2015) + 220 Migrate server identity keys to Ed25519 -v + This one is a design to migrate server identity keys to Ed25519 for improved security margin. It needs more analysis of long-term migration to other signing key types -- what do we do @@ -408,6 +484,9 @@ v out out fairly soon. Other proposals, like 224, depend on this one. (2/2015) + Mark as ACCEPTED. Some is implemented in 0.2.7; the rest is + in-progress. (9/2015) + 223 Ace: Improved circuit-creation key exchange Here's an interesting one. It proposes a replacement for the @@ -446,12 +525,16 @@ v something better. Some alternatives have already been discussed on tor-dev; more work is needed, though. (12/2013) + Mark as SUPERSEDED by proposal 250. (9/2015) + 226 Scalability and Stability Improvements to BridgeDB: Switching to a Distributed Database System and RDBMS This one outlines design and behavior changes for a seriously refactored bridgedb. (2/2014) + I should find out if Isis has a status update for this. (9/2015) + 228 Cross-certifying identity keys with onion keys This proposal signs each server's identity key with its onion @@ -460,6 +543,8 @@ v fixes an annoying gap in our key authentication. I have it coded up in my #12498 branch, targetting 0.2.7. (2/2015) + Implemented; should mark as CLOSED. (9/2015) + 229 Further SOCKS5 extensions Here's a nice idea for how we can support a new SOCKS5 protocol @@ -478,6 +563,9 @@ v sure we'll be able to build thee, though: implementating proposal 220 above seems cleverer to me. (2/2015) + Proposal 220 is in progress, and will retroactively SUPERSEDE this + one. (9/2015) + 232 Pluggable Transport through SOCKS proxy [OPEN] Arturo Filastò wrote this proposal for chaining pluggable @@ -527,6 +615,9 @@ v DirServer. He has an implementation, possibly for 0.2.6 or 0.2.7, in ticket #12538. (2/2015) + Compare to proposal 185; it may supersede that one. Review again + and mark as accepted maybe? (9/2015) + 238 Better hidden service stats from Tor relays [DRAFT] Here's an important one that needs many eyes. George Kadianakis, @@ -536,6 +627,8 @@ v sensitive intermediate results. This has an implementation in 0.2.6 and should probably be marked closed. (2/2015) + Indeed, mark as closed. (9/2015) + 239 Consensus Hash Chaining [DRAFT] Here's the start of a good idea that Andrea Shepard wrote up (with @@ -546,6 +639,9 @@ v improvements and had good questions (thanks, Leif and Sebastian G!) (2/2015) + Needs revisions while we still remember what those revisions are. + (9/2015) + 240 Early signing key revocation for directory authorities [DRAFT] This one is another Andrea+Nick collaboration about certificate @@ -554,6 +650,9 @@ v circulation as fast as possible. Peter Palfrader on tor-dev had some ideas for making this better. (2/2015) + Needs revisions while we still remember what those revisions are. + (9/2015) + 241 Resisting guard-turnover attacks [DRAFT] I wrote this one with good ideas from Aaron Johnson and Rob @@ -565,11 +664,27 @@ v paranoia. So, this proposal could use more analysis. (2/2015) -Since last time: +TAKE ANOTHER LOOK AT THESE: - Proposal 140 and 227 have been implemented and closed. +242 Better performance and usability for the MyFamily option [OPEN] +243 Give out HSDir flag only to relays with Stable flag [OPEN] - Proposal 215 was implemented and closed + (I think we impleented this one! Mark as FINISHED?) - Proposals 230 through 241 are new. +244 Use RFC5705 Key Exporting in our AUTHENTICATE calls [DRAFT] + + (Mark as ACCEPTED?) + +245 Deprecating and removing the TAP circuit extension protocol [DRAFT] +246 Merging Hidden Service Directories and Introduction Points [OPEN] +247 Defending Against Guard Discovery Attacks using Vanguards [DRAFT] +248 Remove all RSA identity keys [DRAFT] +249 Allow CREATE cells with >505 bytes of handshake data [DRAFT] +250 Random Number Generation During Tor Voting [DRAFT] +251 Padding for netflow record resolution reduction [DRAFT] +252 Single Onion Services [DRAFT] + + +Since last time: + Proposals 242-252 are new. [View Less]

1 0

[tor/master] Check NoKeepAliveIsolateSOCKSAuth in a better place.
by nickm＠torproject.org 09 Sep '15

09 Sep '15

commit f6c446db47cb7dd08b1098312bf05f1442b8bb19 Author: Yawning Angel <yawning(a)schwanenlied.me> Date: Wed Sep 9 13:52:30 2015 +0000 Check NoKeepAliveIsolateSOCKSAuth in a better place. No functional changes, but since NoKeepAliveIsolateSOCKSAuth isn't part of isoflag, it should be checked where all other similar options are, and bypass the (no-op) masking at the end. --- src/or/config.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/… [View More]

1 0

[tor/master] Merge remote-tracking branch 'yawning/feature15482_fixup'
by nickm＠torproject.org 09 Sep '15

09 Sep '15

commit fa89eb60e952b964147bddd8d40e503e6872a291 Merge: 2f8c058 f6c446d Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 9 09:56:59 2015 -0400 Merge remote-tracking branch 'yawning/feature15482_fixup' src/or/config.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-)

1 0

[tor/master] Fix warnings from lintChanges
by nickm＠torproject.org 09 Sep '15

09 Sep '15

commit 638e5f976b038942043b8f053af7470345e810f5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 9 09:35:05 2015 -0400 Fix warnings from lintChanges --- changes/16679_16685_etc | 1 - changes/bug14917 | 5 +++-- changes/bug15963 | 6 +++--- changes/bug16274 | 2 +- changes/bug16389 | 3 ++- changes/bug16697 | 6 +++--… [View More]- changes/bug16913 | 2 +- changes/bug16924 | 2 +- changes/bug16965 | 2 +- changes/feature14175-chutney-performance | 10 +++++----- changes/ticket15254-hs-stats-default | 2 +- 11 files changed, 21 insertions(+), 20 deletions(-) diff --git a/changes/16679_16685_etc b/changes/16679_16685_etc index 8284614..46f3e33 100644 --- a/changes/16679_16685_etc +++ b/changes/16679_16685_etc @@ -1,4 +1,3 @@ - o Major features (relay, Ed25519): - Significant improvements to the usability of relay-side Ed25519 key management. Log messages are better, and the code can diff --git a/changes/bug14917 b/changes/bug14917 index 92a985c..f26f7c2 100644 --- a/changes/bug14917 +++ b/changes/bug14917 @@ -1,5 +1,6 @@ - o Major bugfix + o Major features (security, hidden services): - For an hidden service, it is now prohibited to use one single EntryNodes to avoid a very easy guard discovery attack. For more details, see the ticket description here: - https://trac.torproject.org/projects/tor/ticket/14917. Fixes #14917. + https://trac.torproject.org/projects/tor/ticket/14917. Fixes ticket 14917. + diff --git a/changes/bug15963 b/changes/bug15963 index 8c903d2..5d109fe 100644 --- a/changes/bug15963 +++ b/changes/bug15963 @@ -1,4 +1,4 @@ - o Hidden service directory enhancement - - Relays need to have the Fast flag to ge the HSDir flag. As this is + o Minor features (Hidden service directory) + - Relays need to have the Fast flag to get the HSDir flag. As this is being written, we'll go from 2745 HSDirs down to 2342, a ~14% drop. - Fixes #15983. + Fixes ticket 15963. diff --git a/changes/bug16274 b/changes/bug16274 index 4eec571..6c415e8 100644 --- a/changes/bug16274 +++ b/changes/bug16274 @@ -1,5 +1,5 @@ o Minor bugfix (open file limit): - Fix set_max_file_descriptors() to set by default the max open file limit to the current limit in case setrlimit() fails so we at least - have a usable value; Fixes #16274; bugfix on tor-0.2.0.10-alpha~71; + have a usable value; Fixes bug 16274; bugfix on tor-0.2.0.10-alpha. Patch by dgoulet. diff --git a/changes/bug16389 b/changes/bug16389 index b7eb350..c9b10e5 100644 --- a/changes/bug16389 +++ b/changes/bug16389 @@ -1,4 +1,4 @@ - o Hidden Service Enhancement + o Minor features (hidden service) Client now uses an introduction point failure cache to know when to fetch or keep a descriptor in their cache. @@ -10,3 +10,4 @@ discard the descriptor and fetch a new one. See rendcache.c for a detailed explanation of the cache's behavior. + Closes ticket 16389. \ No newline at end of file diff --git a/changes/bug16697 b/changes/bug16697 index ae6cf2b..eb65a88 100644 --- a/changes/bug16697 +++ b/changes/bug16697 @@ -1,10 +1,10 @@ - o Minor bugfixes + o Minor bugfixes (control port): - Control port was using set_max_file_descriptors() with a limit set to 0 to get the max value. A recent fix made this use case return an error and introduced dead code in that function. This triggered a warning that our limit (ConnLimit) was invalid but in reality it was not. - + Now, to the control port uses a specific getter function to query the value and set_max_file_descriptors() should never be used again for - that purpose. Fixes #16697; bugfix on 0.2.7.2-alpha. + that purpose. Fixes bug 16697; bugfix on 0.2.7.2-alpha. diff --git a/changes/bug16913 b/changes/bug16913 index 464140b..b07a782 100644 --- a/changes/bug16913 +++ b/changes/bug16913 @@ -1,4 +1,4 @@ o Minor bugfixes: - Fix an usage message of tor-resolve(1) so that it no longer lists - the removed -F option. Resolves ticket #16913; bugfix on Tor + the removed -F option. Fixes bug 16913; bugfix on Tor 0.2.2.28-beta. diff --git a/changes/bug16924 b/changes/bug16924 index a1bc96e..2d8b372 100644 --- a/changes/bug16924 +++ b/changes/bug16924 @@ -2,5 +2,5 @@ - When calling channel_free_list(), avoid calling smartlist_remove() while inside a FOREACH loop. This partially reverts commit 17356fe7fd96af where the correct SMARTLIST_DEL_CURRENT was - removed. Fixes bug 16929; bugfix on 0.2.4.4-alpha. + removed. Fixes bug 16924; bugfix on 0.2.4.4-alpha. diff --git a/changes/bug16965 b/changes/bug16965 index 841d723..13af137 100644 --- a/changes/bug16965 +++ b/changes/bug16965 @@ -1,4 +1,4 @@ o Minor bugfixes (linux seccomp2 sandbox): - Allow routers with ed25519 keys to run correctly under the seccomp2 - sandbox. Fixes bug 16964; bugfix on 0.2.7.2-alpha. + sandbox. Fixes bug 16965; bugfix on 0.2.7.2-alpha. diff --git a/changes/feature14175-chutney-performance b/changes/feature14175-chutney-performance index ba3a6fe..1dd03f5 100644 --- a/changes/feature14175-chutney-performance +++ b/changes/feature14175-chutney-performance @@ -1,9 +1,9 @@ o Major enhancements (performance testing): - Add chutney performance testing support to src/test/test-network.sh The following arguments change how chutney verifies the network: - --bytes n sends n bytes per test connection (10 KBytes) - --connections n makes n test connections per client (1) - --hs-multi-client 1 makes each client connect to each HS (0) + "--bytes n" sends n bytes per test connection; + "--connections n" makes n test connections per client; and + "--hs-multi-client 1" makes each client connect to each HS. Requires the corresponding chutney performance testing changes. - Note: using --connections 7 or greater on a HS will trigger #15937. - Patch by "teor". + Note: using --connections 7 or greater on a HS will trigger issue 15937. + Patch by "teor". Closes ticket 14175. diff --git a/changes/ticket15254-hs-stats-default b/changes/ticket15254-hs-stats-default index 14913ea..e447c24 100644 --- a/changes/ticket15254-hs-stats-default +++ b/changes/ticket15254-hs-stats-default @@ -1,4 +1,4 @@ o Hidden Service Statistics - Turn on hidden service statistics collection by setting the torrc option HiddenServiceStatistics to "1" by default. Closes ticket - #15254. + 15254. [View Less]

1 0

[tor/master] Fold changes files into changelog
by nickm＠torproject.org 09 Sep '15

09 Sep '15

commit 2f8c0584bf3fa960f2cd1f63f57e5e908699cd1f Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 9 09:44:02 2015 -0400 Fold changes files into changelog --- ChangeLog | 246 +++++++++++++++++++++++ changes/16679_16685_etc | 12 -- changes/autodetect-chutney-path | 4 - changes/bug14917 | 6 - changes/bug15963 | 4 - … [View More]changes/bug16274 | 5 - changes/bug16286 | 8 - changes/bug16389 | 13 -- changes/bug16524 | 3 - changes/bug16539 | 4 - changes/bug16644 | 3 - changes/bug16697 | 10 - changes/bug16741 | 3 - changes/bug16742 | 3 - changes/bug16901 | 3 - changes/bug16913 | 4 - changes/bug16924 | 6 - changes/bug16929 | 5 - changes/bug16964 | 4 - changes/bug16965 | 4 - changes/bug16980 | 6 - changes/callgraph | 5 - changes/chutney-coverage | 3 - changes/decouple-write-handle_write | 7 - changes/decouple_control_events | 8 - changes/decouple_dir_all_unreachable | 4 - changes/decouple_init_keys | 3 - changes/decouple_lost_owner | 4 - changes/decouple_retry_directory | 6 - changes/early-check-paths | 3 - changes/feature14175-chutney-performance | 9 - changes/feature14882-TestingDirAuthVoteIsStrict | 18 -- changes/feature15482 | 5 - changes/feature16533 | 4 - changes/feature16535 | 4 - changes/geoip-july2015 | 3 - changes/malformed-hostname-safe-logging | 3 - changes/microdesc_cycle | 4 - changes/move_formatting_functions | 3 - changes/normalize_exit | 4 - changes/pullup_nulterm | 2 - changes/test-full | 3 - changes/test-net-all | 3 - changes/test-network-bridges-hs | 6 - changes/test-workqueue-windows | 3 - changes/ticket13338 | 6 - changes/ticket15254-hs-stats-default | 4 - changes/ticket16831_part1 | 3 - changes/windows_only_files | 4 - changes/workqueue_reply_t | 6 - 50 files changed, 246 insertions(+), 250 deletions(-) diff --git a/ChangeLog b/ChangeLog index 80f7785..6342995 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,249 @@ +Changes in version 0.2.7.3-????? - 2015-09-1? + XXXX write a blurb + + o Major features (security, hidden services): + - For an hidden service, it is now prohibited to use one single + EntryNodes to avoid a very easy guard discovery attack. For more + details, see the ticket description here: + https://trac.torproject.org/projects/tor/ticket/14917. Fixes + ticket 14917. + + o Major features (relay, Ed25519): + - Significant improvements to the usability of relay-side Ed25519 + key management. Log messages are better, and the code can recover + from far more failure conditions. Thanks to "s7r" for reporting + and diagnosing so many of these! + + o Major bugfixes (relay, Ed25519): + - Avoid crashing on 'tor --keygen'. Fixes bug 16679; bugfix on + 0.2.7.2-alpha. Reported by "s7r". + - Improve handling of expired signing keys along with offline master + keys. Fixes bug 16685; bugfix on 0.2.7.2-alpha. Reported by "s7r". + + o Major enhancements (performance testing): + - Add chutney performance testing support to src/test/test- + network.sh The following arguments change how chutney verifies the + network: "--bytes n" sends n bytes per test connection; + "--connections n" makes n test connections per client; and + "--hs-multi-client 1" makes each client connect to each HS. + Requires the corresponding chutney performance testing changes. + Note: using --connections 7 or greater on a HS will trigger issue + 15937. Patch by "teor". Closes ticket 14175. + + o Minor features: + - Try harder to normalize the exit status of the Tor process to the + standard-provided range. Fixes bug 16975; bugfix on every version + of Tor ever. + - Update geoip and geoip6 to the July 8 2015 Maxmind GeoLite2 + Country database. + + o Minor features (client-side privacy): + - Indefinitely extend circuit lifespan by resetting dirtyness, if + IsolateSOCKSAuth is in use, the new `KeepAliveIsolateSOCKSAuth` + option is set, and streams with SOCKS authentication are attached + to the circuit. Implements feature 15482. + + o Minor features (compilation): + - Give a warning as early as possible when trying to build with an + unsupported OpenSSL version. Closes ticket 16901. + + o Minor features (Hidden service directory): + - Relays need to have the Fast flag to get the HSDir flag. As this + is being written, we'll go from 2745 HSDirs down to 2342, a ~14% + drop. Fixes ticket 15963. + + o Minor features (hidden Service Statistics): + - Turn on hidden service statistics collection by setting the torrc + option HiddenServiceStatistics to "1" by default. Closes + ticket 15254. + + o Minor features (hidden service): + - Client now uses an introduction point failure cache to know when + to fetch or keep a descriptor in their cache. + + When fetching a descriptor, for every introduction points in it, + we look them up in the failure cache to know if we keep the + descriptor or not. For this to work, everytime an introduction + points is discarded (ex: receiving a NACK), we note it down in our + introduction cache. If all introduction points for an onion + service are in our failure cache, we discard the descriptor and + fetch a new one. + + See rendcache.c for a detailed explanation of the cache's + behavior. Closes ticket 16389. + + o Minor features (performance): + - Improve the runtime speed of Ed25519 operations and Curve25519 + keypair generation when built targeting 32 bit x86 platforms with + SSE2 available. Implements ticket 16535. + - Improve the runtime speed of Ed25519 signature verification by + using Ed25519-donna's batch verification support when there are a + lot of signatures to verify at once. Implements ticket 16533. + + o Minor features (testing): + - Autodetect CHUTNEY_PATH if the chutney and tor sources are side- + by-side in the same parent directory. Closes ticket 16903. Patch + by "teor". + + o Minor features (testing, authorities): + - New TestingDirAuthVote{Exit,Guard,HSDir}IsStrict flags. "A node + will never receive the corresponding flag unless that node is + specified in the TestingDirAuthVote{Exit,Guard,HSDir} list, + regardless of its uptime, bandwidth, exit policy, or DirPort". + Closes ticket 14882. Patch by "robgjansen", modified by "teor" as + VoteOnHidServDirectoriesV2 is now obsolete. Commit message and + changes file by "teor" & "robgjansen". + + o Minor features (testing, authorities, documentation): + - Fix an error in the manual page and comments for + TestingDirAuthVoteHSDir[IsStrict], which suggested that a HSDir + required "ORPort connectivity". While this is true, it is in no + way unique to the HSDir flag. Of all the flags, only HSDirs need a + DirPort configured in order for the authorities to assign that + particular flag. Fixed as part of 14882. Patch by "teor". Bugfix + on 0.2.6.3 (f9d57473e1ff on 10 January 2015). + + o Minor features (testing, bridges, hidden services): + - Make "bridges+hs" the default test network. This tests almost all + tor functionality during make test-network, while allowing tests + to succeed on non-IPv6 systems. Requires chutney commit 396da92 in + test-network-bridges-hs. Closes tickets 16945 (tor), 16946 + (chutney) . Patches by "teor". + + o Minor bugfixes: + - Check correctly for windows socket errors in the workqueue + backend. Fixes bug 16741; bugfix on 0.2.6.3-alpha. + - Ensure that worker threads actually exit when a fatal error or + shutdown is indicated. This doesn't currently affect the behaviour + of Tor, because Tor never indicates fatal error or shutdown except + in its unit tests. Fixes bug 16868; bugfix on 0.2.6.3-alpha. + - Fix an usage message of tor-resolve(1) so that it no longer lists + the removed -F option. Fixes bug 16913; bugfix on + Tor 0.2.2.28-beta. + - Fix the behavior of crypto_time_t when told to consider times + before 1970. (These times were possible when running in a + simulated network environment where time()'s output starts at + zero.) Fixes bug 16980; bugfix on 0.2.7.1-alpha. + - When calling channel_free_list(), avoid calling smartlist_remove() + while inside a FOREACH loop. This partially reverts commit + 17356fe7fd96af where the correct SMARTLIST_DEL_CURRENT was + removed. Fixes bug 16924; bugfix on 0.2.4.4-alpha. + - When logging malformed hostnames in socks5 requests, respect + SafeLogging configuration. Fixes bug 16891; bugfix on 0.1.1.16-rc. + - include the TUNING document in our source tarball. It is referred + to in the ChangeLog and an error message. Fixes bug 16929; bugfix + on 0.2.6.1-alpha. + + o Minor bugfix (open file limit): + - Fix set_max_file_descriptors() to set by default the max open file + limit to the current limit in case setrlimit() fails so we at + least have a usable value; Fixes bug 16274; bugfix on tor- + 0.2.0.10-alpha. Patch by dgoulet. + + o Minor bugfixes (authority): + - Don't assign "HSDir" to a router if it isn't Valid and Running. + Fixes bug 16524; bugfix on 0.2.7.2-alpha. + - Downgrade log messages about Ed25519 key issues, if they are in + old cached router descriptors. Fixes part of bug 16286; bugfix + on 0.2.7.2-alpha. + - When we find an Ed25519 key issue in a cached descriptor, stop + saying the descriptor was just "uploaded". Fixes another part of + bug 16286; bugfix on 0.2.7.2-alpha. + + o Minor bugfixes (control port): + - Control port was using set_max_file_descriptors() with a limit set + to 0 to get the max value. A recent fix made this use case return + an error and introduced dead code in that function. This triggered + a warning that our limit (ConnLimit) was invalid but in reality it + was not. + + Now, to the control port uses a specific getter function to query + the value and set_max_file_descriptors() should never be used + again for that purpose. Fixes bug 16697; bugfix on 0.2.7.2-alpha. + + o Minor bugfixes (Ed25519): + - Fix a memory leak when reading router descriptors with expired + Ed25519 certificate. Fixes bug 16539; bugfix on 0.2.7.2-alpha. + + o Minor bugfixes (linux seccomp2 sandbox): + - Allow bridge authorities to run correctly under the seccomp2 + sandbox. Fixes bug 16964; bugfix on 0.2.5.1-alpha. + - Allow routers with ed25519 keys to run correctly under the + seccomp2 sandbox. Fixes bug 16965; bugfix on 0.2.7.2-alpha. + + o Minor bugfixes (relay): + - Unblock threads before releasing the mutex to ensure predictable + scheduling behavior. Fixes bug 16644; bugfix on 0.2.6.3-alpha. + + o Code simplification and refactoring: + - Change the function that's called when we need to retry all + downloads so that it only reschedules the downloads to happen + immediately, rather than launching them all at once itself. This + further simplifies Tor's callgraph. + - Move some format-parsing functions out of crypto.c and + crypto_curve25519.c into crypto_format.c and/or util_format.c. + - Move the client-only parts of init_keys() into a separate + function. Closes ticket 16763. + - Simplify the microdesc_free() implementation so that it no longer + appears (to code analysis tools) to potentially invoke a huge + suite of other microdesc functions. + - Simply the control graph further by deferring the inner body of + directory_all_unreachable() into a callback. Closes ticket 16762. + - Treat the loss of an owning controller as equivalent to a SIGTERM + signal. This removes a tiny amount of duplicated code, and + simplifies our callgraph. Closes ticekt 16788. + - When generating an event to send to the controller, we no longer + put the event over the network immediately. Instead, we queue + these events, and use a Libevent callback to deliver them. This + change simplifies Tor's callgraph by reducing the number of + functions from which all other Tor functions are reachable. Closes + ticket 16695. + - Wrap windows-only C files inside '#ifdef _WIN32' so that tools + that try to scan or compile every file on Unix won't decide that + they are broken. + + o Code simplifications and refactoring: + - Remove the unused "nulterminate" argument from buf_pullup(). + + o Documentation: + - Recommend a 40 GB example AccountingMax in torrc.sample rather + than a 4 GB max. Closes ticket 16742. + + o Removed code: + - The internal pure-C tor-fw-helper tool is now removed from the Tor + distribution, in favor of the pure-Go clone available from + https://github.com/Yawning/tor-fw-helper . The libraries used by + the C tor-fw-helper are not, in our opinion, very confidence- + inspiring in their secure-proggramming techniques. Closes + ticket 13338. + + o Removed features: + - Remove the code that would try to aggressively flush controller + connections while writing to them. This code was introduced in + 0.1.2.7-alpha, in order to keep output buffers from exceeding + their limits. But there is no longer a maximum output buffer size, + and flushing data in this way caused some undesirable recursions + in our call graph. Closes ticket 16480. + + o Testing: + - Add a new set of callgraph analysis scripts that use clang to + produce a list of which Tor functions are reachable from which + other Tor functions. We're planning to use these to help simplify + our code structure by identifying illogical dependencies. + - Add new 'test-full' and 'test-full-online' targets to run all + tests, including integration tests with stem and chutney. + - Make the test-workqueue test work on windows by initializing the + network before we begin. + - New make target (make test-network-all) to run multiple applicable + chutney test cases. Patch from Teor; closes 16953. + - Unit test dns_resolve(), dns_clip_ttl() and dns_get_expiry_ttl() + functions in dns.c. Implements a portion of ticket 16831. + - When building Tor with testing coverage enabled, run Chutney tests + (if any) using the 'tor-cov' coverage binary. + - When running test-network or test-stem, check for the absence of + stem/chutney before doing any build operations. + + Changes in version 0.2.7.2-alpha - 2015-07-27 This, the second alpha in the Tor 0.2.7 series, has a number of new features, including a way to manually pick the number of introduction diff --git a/changes/16679_16685_etc b/changes/16679_16685_etc deleted file mode 100644 index 46f3e33..0000000 --- a/changes/16679_16685_etc +++ /dev/null @@ -1,12 +0,0 @@ - o Major features (relay, Ed25519): - - Significant improvements to the usability of relay-side Ed25519 - key management. Log messages are better, and the code can - recover from far more failure conditions. Thanks to "s7r" for - reporting and diagnosing so many of these! - - o Major bugfixes (relay, Ed25519): - - Avoid crashing on 'tor --keygen'. Fixes bug 16679; bugfix on - 0.2.7.2-alpha. Reported by "s7r". - - Improve handling of expired signing keys along with offline - master keys. Fixes bug 16685; bugfix on 0.2.7.2-alpha. Reported - by "s7r". diff --git a/changes/autodetect-chutney-path b/changes/autodetect-chutney-path deleted file mode 100644 index 4da6b24..0000000 --- a/changes/autodetect-chutney-path +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (testing): - - Autodetect CHUTNEY_PATH if the chutney and tor sources are - side-by-side in the same parent directory. - Closes ticket 16903. Patch by "teor". diff --git a/changes/bug14917 b/changes/bug14917 deleted file mode 100644 index f26f7c2..0000000 --- a/changes/bug14917 +++ /dev/null @@ -1,6 +0,0 @@ - o Major features (security, hidden services): - - For an hidden service, it is now prohibited to use one single - EntryNodes to avoid a very easy guard discovery attack. For more - details, see the ticket description here: - https://trac.torproject.org/projects/tor/ticket/14917. Fixes ticket 14917. - diff --git a/changes/bug15963 b/changes/bug15963 deleted file mode 100644 index 5d109fe..0000000 --- a/changes/bug15963 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (Hidden service directory) - - Relays need to have the Fast flag to get the HSDir flag. As this is - being written, we'll go from 2745 HSDirs down to 2342, a ~14% drop. - Fixes ticket 15963. diff --git a/changes/bug16274 b/changes/bug16274 deleted file mode 100644 index 6c415e8..0000000 --- a/changes/bug16274 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfix (open file limit): - - Fix set_max_file_descriptors() to set by default the max open file - limit to the current limit in case setrlimit() fails so we at least - have a usable value; Fixes bug 16274; bugfix on tor-0.2.0.10-alpha. - Patch by dgoulet. diff --git a/changes/bug16286 b/changes/bug16286 deleted file mode 100644 index 7b30493..0000000 --- a/changes/bug16286 +++ /dev/null @@ -1,8 +0,0 @@ - o Minor bugfixes (authority): - - Downgrade log messages about Ed25519 key issues, if they are in - old cached router descriptors. Fixes part of bug 16286; bugfix on - 0.2.7.2-alpha. - - - When we find an Ed25519 key issue in a cached descriptor, stop saying - the descriptor was just "uploaded". Fixes another part of bug 16286; - bugfix on 0.2.7.2-alpha. diff --git a/changes/bug16389 b/changes/bug16389 deleted file mode 100644 index c9b10e5..0000000 --- a/changes/bug16389 +++ /dev/null @@ -1,13 +0,0 @@ - o Minor features (hidden service) - Client now uses an introduction point failure cache to know when to - fetch or keep a descriptor in their cache. - - When fetching a descriptor, for every introduction points in it, we look - them up in the failure cache to know if we keep the descriptor or not. - For this to work, everytime an introduction points is discarded (ex: - receiving a NACK), we note it down in our introduction cache. If all - introduction points for an onion service are in our failure cache, we - discard the descriptor and fetch a new one. - - See rendcache.c for a detailed explanation of the cache's behavior. - Closes ticket 16389. \ No newline at end of file diff --git a/changes/bug16524 b/changes/bug16524 deleted file mode 100644 index 1268fe8..0000000 --- a/changes/bug16524 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (authority): - - Don't assign "HSDir" to a router if it isn't Valid and Running. - Fixes bug 16524; bugfix on 0.2.7.2-alpha. \ No newline at end of file diff --git a/changes/bug16539 b/changes/bug16539 deleted file mode 100644 index 8a0b6d2..0000000 --- a/changes/bug16539 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (Ed25519): - - Fix a memory leak when reading router descriptors with - expired Ed25519 certificate. Fixes bug 16539; bugfix on 0.2.7.2-alpha. - diff --git a/changes/bug16644 b/changes/bug16644 deleted file mode 100644 index f7126bd..0000000 --- a/changes/bug16644 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (relay): - - Unblock threads before releasing the mutex to ensure predictable - scheduling behavior. Fixes bug 16644; bugfix on 0.2.6.3-alpha. diff --git a/changes/bug16697 b/changes/bug16697 deleted file mode 100644 index eb65a88..0000000 --- a/changes/bug16697 +++ /dev/null @@ -1,10 +0,0 @@ - o Minor bugfixes (control port): - - Control port was using set_max_file_descriptors() with a limit set to - 0 to get the max value. A recent fix made this use case return an - error and introduced dead code in that function. This triggered a - warning that our limit (ConnLimit) was invalid but in reality it was - not. - - Now, to the control port uses a specific getter function to query the - value and set_max_file_descriptors() should never be used again for - that purpose. Fixes bug 16697; bugfix on 0.2.7.2-alpha. diff --git a/changes/bug16741 b/changes/bug16741 deleted file mode 100644 index ce3dfdc..0000000 --- a/changes/bug16741 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes: - - Check correctly for windows socket errors in the workqueue backend. - Fixes bug 16741; bugfix on 0.2.6.3-alpha. diff --git a/changes/bug16742 b/changes/bug16742 deleted file mode 100644 index 2002cb7..0000000 --- a/changes/bug16742 +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation: - - Recommend a 40 GB example AccountingMax in torrc.sample rather - than a 4 GB max. Closes ticket 16742. diff --git a/changes/bug16901 b/changes/bug16901 deleted file mode 100644 index c008ebd..0000000 --- a/changes/bug16901 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (compilation): - - Give a warning as early as possible when trying to build with an - unsupported OpenSSL version. Closes ticket 16901. diff --git a/changes/bug16913 b/changes/bug16913 deleted file mode 100644 index b07a782..0000000 --- a/changes/bug16913 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes: - - Fix an usage message of tor-resolve(1) so that it no longer lists - the removed -F option. Fixes bug 16913; bugfix on Tor - 0.2.2.28-beta. diff --git a/changes/bug16924 b/changes/bug16924 deleted file mode 100644 index 2d8b372..0000000 --- a/changes/bug16924 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes: - - When calling channel_free_list(), avoid calling smartlist_remove() - while inside a FOREACH loop. This partially reverts commit - 17356fe7fd96af where the correct SMARTLIST_DEL_CURRENT was - removed. Fixes bug 16924; bugfix on 0.2.4.4-alpha. - diff --git a/changes/bug16929 b/changes/bug16929 deleted file mode 100644 index 83e60d7..0000000 --- a/changes/bug16929 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes: - - include the TUNING document in our source tarball. It is referred - to in the ChangeLog and an error message. Fixes bug 16929; bugfix - on 0.2.6.1-alpha. - diff --git a/changes/bug16964 b/changes/bug16964 deleted file mode 100644 index 46ff565..0000000 --- a/changes/bug16964 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (linux seccomp2 sandbox): - - Allow bridge authorities to run correctly under the seccomp2 - sandbox. Fixes bug 16964; bugfix on 0.2.5.1-alpha. - diff --git a/changes/bug16965 b/changes/bug16965 deleted file mode 100644 index 13af137..0000000 --- a/changes/bug16965 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (linux seccomp2 sandbox): - - Allow routers with ed25519 keys to run correctly under the seccomp2 - sandbox. Fixes bug 16965; bugfix on 0.2.7.2-alpha. - diff --git a/changes/bug16980 b/changes/bug16980 deleted file mode 100644 index 43a817e..0000000 --- a/changes/bug16980 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes: - - - Fix the behavior of crypto_time_t when told to consider times - before 1970. (These times were possible when running in a - simulated network environment where time()'s output starts at - zero.) Fixes bug 16980; bugfix on 0.2.7.1-alpha. diff --git a/changes/callgraph b/changes/callgraph deleted file mode 100644 index 64f7f9c..0000000 --- a/changes/callgraph +++ /dev/null @@ -1,5 +0,0 @@ - o Testing: - - Add a new set of callgraph analysis scripts that use clang to - produce a list of which Tor functions are reachable from which - other Tor functions. We're planning to use these to help simplify - our code structure by identifying illogical dependencies. diff --git a/changes/chutney-coverage b/changes/chutney-coverage deleted file mode 100644 index 53983c8..0000000 --- a/changes/chutney-coverage +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - When building Tor with testing coverage enabled, run Chutney tests - (if any) using the 'tor-cov' coverage binary. diff --git a/changes/decouple-write-handle_write b/changes/decouple-write-handle_write deleted file mode 100644 index 4ef9b3f..0000000 --- a/changes/decouple-write-handle_write +++ /dev/null @@ -1,7 +0,0 @@ - o Removed features: - - Remove the code that would try to aggressively flush controller - connections while writing to them. This code was introduced in - 0.1.2.7-alpha, in order to keep output buffers from exceeding their - limits. But there is no longer a maximum output buffer size, and - flushing data in this way caused some undesirable recursions - in our call graph. Closes ticket 16480. diff --git a/changes/decouple_control_events b/changes/decouple_control_events deleted file mode 100644 index 67c9c11..0000000 --- a/changes/decouple_control_events +++ /dev/null @@ -1,8 +0,0 @@ - o Code simplification and refactoring: - - When generating an event to send to the controller, we no longer - put the event over the network immediately. Instead, we queue - these events, and use a Libevent callback to deliver them. - This change simplifies Tor's callgraph by reducing the number - of functions from which all other Tor functions are reachable. - Closes ticket 16695. - diff --git a/changes/decouple_dir_all_unreachable b/changes/decouple_dir_all_unreachable deleted file mode 100644 index 1e57b3d..0000000 --- a/changes/decouple_dir_all_unreachable +++ /dev/null @@ -1,4 +0,0 @@ - o Code simplification and refactoring: - - Simply the control graph further by deferring the inner body of - directory_all_unreachable() into a callback. Closes ticket - 16762. \ No newline at end of file diff --git a/changes/decouple_init_keys b/changes/decouple_init_keys deleted file mode 100644 index 7f48d2b..0000000 --- a/changes/decouple_init_keys +++ /dev/null @@ -1,3 +0,0 @@ - o Code simplification and refactoring: - - Move the client-only parts of init_keys() into a separate function. - Closes ticket 16763. diff --git a/changes/decouple_lost_owner b/changes/decouple_lost_owner deleted file mode 100644 index 88adb18..0000000 --- a/changes/decouple_lost_owner +++ /dev/null @@ -1,4 +0,0 @@ - o Code simplification and refactoring: - - Treat the loss of an owning controller as equivalent to a SIGTERM - signal. This removes a tiny amount of duplicated code, and simplifies - our callgraph. Closes ticekt 16788. diff --git a/changes/decouple_retry_directory b/changes/decouple_retry_directory deleted file mode 100644 index 11f901b..0000000 --- a/changes/decouple_retry_directory +++ /dev/null @@ -1,6 +0,0 @@ - o Code simplification and refactoring: - - Change the function that's called when we need to retry all downloads - so that it only reschedules the downloads to happen immediately, rather - than launching them all at once itself. This further simplifies - Tor's callgraph. - diff --git a/changes/early-check-paths b/changes/early-check-paths deleted file mode 100644 index 44bebbe..0000000 --- a/changes/early-check-paths +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - When running test-network or test-stem, check for the absence - of stem/chutney before doing any build operations. \ No newline at end of file diff --git a/changes/feature14175-chutney-performance b/changes/feature14175-chutney-performance deleted file mode 100644 index 1dd03f5..0000000 --- a/changes/feature14175-chutney-performance +++ /dev/null @@ -1,9 +0,0 @@ - o Major enhancements (performance testing): - - Add chutney performance testing support to src/test/test-network.sh - The following arguments change how chutney verifies the network: - "--bytes n" sends n bytes per test connection; - "--connections n" makes n test connections per client; and - "--hs-multi-client 1" makes each client connect to each HS. - Requires the corresponding chutney performance testing changes. - Note: using --connections 7 or greater on a HS will trigger issue 15937. - Patch by "teor". Closes ticket 14175. diff --git a/changes/feature14882-TestingDirAuthVoteIsStrict b/changes/feature14882-TestingDirAuthVoteIsStrict deleted file mode 100644 index 62d513e..0000000 --- a/changes/feature14882-TestingDirAuthVoteIsStrict +++ /dev/null @@ -1,18 +0,0 @@ - o Minor features (testing, authorities): - - New TestingDirAuthVote{Exit,Guard,HSDir}IsStrict flags. - "A node will never receive the corresponding flag unless - that node is specified in the - TestingDirAuthVote{Exit,Guard,HSDir} list, regardless of - its uptime, bandwidth, exit policy, or DirPort". - Closes ticket 14882. Patch by "robgjansen", modified by - "teor" as VoteOnHidServDirectoriesV2 is now obsolete. - Commit message and changes file by "teor" & "robgjansen". - o Minor features (testing, authorities, documentation): - - Fix an error in the manual page and comments for - TestingDirAuthVoteHSDir[IsStrict], which suggested that a - HSDir required "ORPort connectivity". While this is true, - it is in no way unique to the HSDir flag. Of all the flags, - only HSDirs need a DirPort configured in order for the - authorities to assign that particular flag. - Fixed as part of 14882. Patch by "teor". - Bugfix on 0.2.6.3 (f9d57473e1ff on 10 January 2015). diff --git a/changes/feature15482 b/changes/feature15482 deleted file mode 100644 index 4e32d39..0000000 --- a/changes/feature15482 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (client-side privacy) - - Indefinitely extend circuit lifespan by resetting dirtyness, if - IsolateSOCKSAuth is in use, the new `KeepAliveIsolateSOCKSAuth` - option is set, and streams with SOCKS authentication are attached - to the circuit. Implements feature 15482. diff --git a/changes/feature16533 b/changes/feature16533 deleted file mode 100644 index e9fea94..0000000 --- a/changes/feature16533 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (performance) - - Improve the runtime speed of Ed25519 signature verification by using - Ed25519-donna's batch verification support when there are a lot of - signatures to verify at once. Implements ticket 16533. diff --git a/changes/feature16535 b/changes/feature16535 deleted file mode 100644 index 3df46b6..0000000 --- a/changes/feature16535 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (performance) - - Improve the runtime speed of Ed25519 operations and Curve25519 keypair - generation when built targeting 32 bit x86 platforms with SSE2 - available. Implements ticket 16535. diff --git a/changes/geoip-july2015 b/changes/geoip-july2015 deleted file mode 100644 index 381c2df..0000000 --- a/changes/geoip-july2015 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features: - - Update geoip and geoip6 to the July 8 2015 Maxmind GeoLite2 Country database. - diff --git a/changes/malformed-hostname-safe-logging b/changes/malformed-hostname-safe-logging deleted file mode 100644 index e561425..0000000 --- a/changes/malformed-hostname-safe-logging +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes: - - When logging malformed hostnames in socks5 requests, respect - SafeLogging configuration. Fixes bug 16891; bugfix on 0.1.1.16-rc. diff --git a/changes/microdesc_cycle b/changes/microdesc_cycle deleted file mode 100644 index fddc2be..0000000 --- a/changes/microdesc_cycle +++ /dev/null @@ -1,4 +0,0 @@ - o Code simplification and refactoring: - - Simplify the microdesc_free() implementation so that it no longer - appears (to code analysis tools) to potentially invoke a huge suite - of other microdesc functions. diff --git a/changes/move_formatting_functions b/changes/move_formatting_functions deleted file mode 100644 index 4ad5806..0000000 --- a/changes/move_formatting_functions +++ /dev/null @@ -1,3 +0,0 @@ - o Code simplification and refactoring: - - Move some format-parsing functions out of crypto.c and - crypto_curve25519.c into crypto_format.c and/or util_format.c. diff --git a/changes/normalize_exit b/changes/normalize_exit deleted file mode 100644 index 300aace..0000000 --- a/changes/normalize_exit +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features: - - Try harder to normalize the exit status of the Tor process to the - standard-provided range. Fixes bug 16975; bugfix on every version - of Tor ever. diff --git a/changes/pullup_nulterm b/changes/pullup_nulterm deleted file mode 100644 index 3f3bd54..0000000 --- a/changes/pullup_nulterm +++ /dev/null @@ -1,2 +0,0 @@ - o Code simplifications and refactoring: - - Remove the unused "nulterminate" argument from buf_pullup(). diff --git a/changes/test-full b/changes/test-full deleted file mode 100644 index 5ff51db..0000000 --- a/changes/test-full +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - Add new 'test-full' and 'test-full-online' targets to run all tests, - including integration tests with stem and chutney. diff --git a/changes/test-net-all b/changes/test-net-all deleted file mode 100644 index 9a2e5ed..0000000 --- a/changes/test-net-all +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - New make target (make test-network-all) to run multiple applicable - chutney test cases. Patch from Teor; closes 16953. diff --git a/changes/test-network-bridges-hs b/changes/test-network-bridges-hs deleted file mode 100644 index a8f3521..0000000 --- a/changes/test-network-bridges-hs +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (testing, bridges, hidden services): - - Make "bridges+hs" the default test network. This tests almost all - tor functionality during make test-network, while allowing tests - to succeed on non-IPv6 systems. - Requires chutney commit 396da92 in test-network-bridges-hs. - Closes tickets 16945 (tor), 16946 (chutney) . Patches by "teor". diff --git a/changes/test-workqueue-windows b/changes/test-workqueue-windows deleted file mode 100644 index 8d7b7f6..0000000 --- a/changes/test-workqueue-windows +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - Make the test-workqueue test work on windows by initializing the - network before we begin. diff --git a/changes/ticket13338 b/changes/ticket13338 deleted file mode 100644 index a1d242f..0000000 --- a/changes/ticket13338 +++ /dev/null @@ -1,6 +0,0 @@ - o Removed code: - - The internal pure-C tor-fw-helper tool is now removed from the - Tor distribution, in favor of the pure-Go clone available from - https://github.com/Yawning/tor-fw-helper . The libraries used - by the C tor-fw-helper are not, in our opinion, very confidence- - inspiring in their secure-proggramming techniques. Closes ticket 13338. diff --git a/changes/ticket15254-hs-stats-default b/changes/ticket15254-hs-stats-default deleted file mode 100644 index e447c24..0000000 --- a/changes/ticket15254-hs-stats-default +++ /dev/null @@ -1,4 +0,0 @@ - o Hidden Service Statistics - - Turn on hidden service statistics collection by setting the torrc - option HiddenServiceStatistics to "1" by default. Closes ticket - 15254. diff --git a/changes/ticket16831_part1 b/changes/ticket16831_part1 deleted file mode 100644 index 3ced089..0000000 --- a/changes/ticket16831_part1 +++ /dev/null @@ -1,3 +0,0 @@ - o Testing: - - Unit test dns_resolve(), dns_clip_ttl() and dns_get_expiry_ttl() - functions in dns.c. Implements a portion of ticket 16831. diff --git a/changes/windows_only_files b/changes/windows_only_files deleted file mode 100644 index 0ec64b9..0000000 --- a/changes/windows_only_files +++ /dev/null @@ -1,4 +0,0 @@ - o Code simplification and refactoring: - - Wrap windows-only C files inside '#ifdef _WIN32' so that tools that - try to scan or compile every file on Unix won't decide that they - are broken. diff --git a/changes/workqueue_reply_t b/changes/workqueue_reply_t deleted file mode 100644 index c2d3f4a..0000000 --- a/changes/workqueue_reply_t +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes: - - Ensure that worker threads actually exit when a fatal error or - shutdown is indicated. This doesn't currently affect the behaviour - of Tor, because Tor never indicates fatal error or shutdown except - in its unit tests. Fixes bug 16868; bugfix on 0.2.6.3-alpha. - [View Less]

1 0

[tor-browser/tor-browser-38.2.1esr-5.0-2] fixup! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 09 Sep '15

09 Sep '15

commit dd27a46185405a87cf5a8a56e4d293bddedde52a Author: Georg Koppen <gk(a)torproject.org> Date: Wed Sep 9 13:02:51 2015 +0000 fixup! TB4: Tor Browser's Firefox preference overrides. This fixes bug 13579. Thanks to anonym for proposing this patch. --- browser/app/profile/000-tor-browser.js | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index 20e2f3a..c80c119 100644 --- a/browser/… [View More]

1 0

[tor-browser/tor-browser-38.2.1esr-5.5-2] fixup! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 09 Sep '15

09 Sep '15

commit 2e79f3111bc999b6f30f3ec43d47913a3f0e5002 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Sep 9 13:02:51 2015 +0000 fixup! TB4: Tor Browser's Firefox preference overrides. This fixes bug 13579. Thanks to anonym for proposing this patch. --- browser/app/profile/000-tor-browser.js | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index 34b8e6e..3e77a82 100644 --- a/browser/… [View More]

1 0

[tor-browser-bundle/maint-5.0] Bug 16910: Mac OS app bundle has wrong copyright year.
by gk＠torproject.org 09 Sep '15

09 Sep '15

commit 7d0d8bb670f93be292997d6483825f661a29583f Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Tue Sep 8 10:29:10 2015 -0400 Bug 16910: Mac OS app bundle has wrong copyright year. Insert the year associated with the last tor-browser commit when generating the Info.plist file for Mac OS. --- gitian/build-helpers/fix-info-plist.py | 6 +++--- gitian/descriptors/mac/gitian-firefox.yml | 4 +++- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git … [View More]

1 0

[tor-browser-bundle/master] Bug 16910: Mac OS app bundle has wrong copyright year.
by gk＠torproject.org 09 Sep '15

09 Sep '15

commit 5019358bcac86508260703ae9cd99a4dfd2983e1 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Tue Sep 8 10:29:10 2015 -0400 Bug 16910: Mac OS app bundle has wrong copyright year. Insert the year associated with the last tor-browser commit when generating the Info.plist file for Mac OS. --- gitian/build-helpers/fix-info-plist.py | 6 +++--- gitian/descriptors/mac/gitian-firefox.yml | 4 +++- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git … [View More]

1 0

[tor-browser/tor-browser-38.2.1esr-5.5-2] fixup! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 09 Sep '15

09 Sep '15

commit 45666d66cbd1e51e0926e3ad14831af47aa8a44d Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Fri Sep 4 21:57:43 2015 -0700 fixup! TB4: Tor Browser's Firefox preference overrides. Bug #16707 - Use more system fonts for OS X and Windows --- browser/app/profile/000-tor-browser.js | 18 ++++++++++++++---- 1 file changed, 14 insertions(+), 4 deletions(-) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index … [View More]b32728b..34b8e6e 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -247,21 +247,29 @@ pref("security.cert_pinning.enforcement_level", 2); #expand pref("torbrowser.version", __TOR_BROWSER_VERSION__); #endif -// If we are bundling fonts, only allow bundled fonts to be used. +// If we are bundling fonts, whitelist those bundled fonts, and restrict system fonts to a selection. #ifdef MOZ_BUNDLED_FONTS #ifdef XP_MACOSX -pref("font.system.whitelist", "Courier, Georgia, Verdana, Noto Naskh Arabic, Noto Sans Armenian, Noto Sans Bengali, Noto Sans Buginese, Noto Sans CJK SC Regular, Noto Sans Canadian Aboriginal, Noto Sans Cherokee, Noto Sans Devanagari, Noto Sans Ethiopic, Noto Sans Georgian, Noto Sans Gujarati, Noto Sans Gurmukhi, Noto Sans Hebrew, Noto Sans Kannada, Noto Sans Khmer, Noto Sans Lao, Noto Sans Malayalam, Noto Sans Mongolian, Noto Sans Myanmar, Noto Sans Oriya, Noto Sans Sinhala, Noto Sans Tamil, Noto Sans Telugu, Noto Sans Thaana, Noto Sans Thai, Noto Sans Tibetan, Noto Sans Yi, Noto Serif Armenian, Noto Serif Khmer, Noto Serif Lao, Noto Serif Thai"); +pref("font.system.whitelist", "AppleGothic, Arial, Courier, Geneva, Georgia, Heiti TC, Helvetica, Helvetica Neue, Hiragino Kaku Gothic ProN, Lucida Grande, Monaco, Noto Sans Armenian, Noto Sans Bengali, Noto Sans Canadian Aboriginal, Noto Sans Cherokee, Noto Sans Devanagari, Noto Sans Ethiopic, Noto Sans Gujarati, Noto Sans Gurmukhi, Noto Sans Kannada, Noto Sans Khmer, Noto Sans Lao, Noto Sans Malayalam, Noto Sans Mongolian, Noto Sans Myanmar, Noto Sans Oriya, Noto Sans Sinhala, Noto Sans Tamil, Noto Sans Telugu, Noto Sans Thaana, Noto Sans Tibetan, Noto Sans Yi, STHeiti, Tahoma, Thonburi, Times, Times New Roman, Verdana"); +pref("font.name-list.cursive.x-unicode", "Apple Chancery, Noto Sans Armenian, Noto Sans Bengali, Noto Sans Canadian Aboriginal, Noto Sans Cherokee, Noto Sans Devanagari, Noto Sans Ethiopic, Noto Sans Gujarati, Noto Sans Gurmukhi, Noto Sans Kannada, Noto Sans Khmer, Noto Sans Lao, Noto Sans Malayalam, Noto Sans Mongolian, Noto Sans Myanmar, Noto Sans Oriya, Noto Sans Sinhala, Noto Sans Tamil, Noto Sans Telugu, Noto Sans Thaana, Noto Sans Tibetan, Noto Sans Yi"); +pref("font.name-list.fantasy.x-unicode", "Papyrus, Noto Sans Armenian, Noto Sans Bengali, Noto Sans Canadian Aboriginal, Noto Sans Cherokee, Noto Sans Devanagari, Noto Sans Ethiopic, Noto Sans Gujarati, Noto Sans Gurmukhi, Noto Sans Kannada, Noto Sans Khmer, Noto Sans Lao, Noto Sans Malayalam, Noto Sans Mongolian, Noto Sans Myanmar, Noto Sans Oriya, Noto Sans Sinhala, Noto Sans Tamil, Noto Sans Telugu, Noto Sans Thaana, Noto Sans Tibetan, Noto Sans Yi"); +pref("font.name-list.monospace.x-unicode", "Courier, Arial, Noto Sans Armenian, Noto Sans Bengali, Noto Sans Canadian Aboriginal, Noto Sans Cherokee, Noto Sans Devanagari, Noto Sans Ethiopic, Noto Sans Gujarati, Noto Sans Gurmukhi, Noto Sans Kannada, Noto Sans Khmer, Noto Sans Lao, Noto Sans Malayalam, Noto Sans Mongolian, Noto Sans Myanmar, Noto Sans Oriya, Noto Sans Sinhala, Noto Sans Tamil, Noto Sans Telugu, Noto Sans Thaana, Noto Sans Tibetan, Noto Sans Yi"); +pref("font.name-list.sans-serif.x-unicode", "Helvetica, Tahoma, Arial, Noto Sans Armenian, Noto Sans Bengali, Noto Sans Canadian Aboriginal, Noto Sans Cherokee, Noto Sans Devanagari, Noto Sans Ethiopic, Noto Sans Gujarati, Noto Sans Gurmukhi, Noto Sans Kannada, Noto Sans Khmer, Noto Sans Lao, Noto Sans Malayalam, Noto Sans Mongolian, Noto Sans Myanmar, Noto Sans Oriya, Noto Sans Sinhala, Noto Sans Tamil, Noto Sans Telugu, Noto Sans Thaana, Noto Sans Tibetan, Noto Sans Yi"); +pref("font.name-list.serif.x-unicode", "Times, Arial, Noto Sans Armenian, Noto Sans Bengali, Noto Sans Canadian Aboriginal, Noto Sans Cherokee, Noto Sans Devanagari, Noto Sans Ethiopic, Noto Sans Gujarati, Noto Sans Gurmukhi, Noto Sans Kannada, Noto Sans Khmer, Noto Sans Lao, Noto Sans Malayalam, Noto Sans Mongolian, Noto Sans Myanmar, Noto Sans Oriya, Noto Sans Sinhala, Noto Sans Tamil, Noto Sans Telugu, Noto Sans Thaana, Noto Sans Tibetan, Noto Sans Yi"); +pref("font.name.cursive.ar", "Arial"); +pref("font.name.fantasy.ar", "Arial"); +pref("font.name.monospace.ar", "Arial"); +pref("font.name.sans-serif.ar", "Arial"); #endif #ifdef XP_WIN -pref("font.system.whitelist", "Courier New, Georgia, Arial, Noto Naskh Arabic, Noto Sans Armenian, Noto Sans Bengali, Noto Sans Buginese, Noto Sans CJK SC Regular, Noto Sans Canadian Aboriginal, Noto Sans Cherokee, Noto Sans Devanagari, Noto Sans Ethiopic, Noto Sans Georgian, Noto Sans Gujarati, Noto Sans Gurmukhi, Noto Sans Hebrew, Noto Sans Kannada, Noto Sans Khmer, Noto Sans Lao, Noto Sans Malayalam, Noto Sans Mongolian, Noto Sans Myanmar, Noto Sans Oriya, Noto Sans Sinhala, Noto Sans Tamil, Noto Sans Telugu, Noto Sans Thaana, Noto Sans Thai, Noto Sans Tibetan, Noto Sans Yi, Noto Serif Armenian, Noto Serif Khmer, Noto Serif Lao, Noto Serif Thai"); +pref("font.system.whitelist", "Arial, Batang, Courier New, Euphemia, Gautami, Georgia, Gulim, GulimChe, Iskoola Pota, Kalinga, Kartika, Latha, Lucida Console, MS Gothic, MS Mincho, MS PGothic, MS PMincho, MV Boli, Mangal, Microsoft Himalaya, Microsoft YaHei, MingLiU, Noto Sans Buginese, Noto Sans Khmer, Noto Sans Lao, Noto Sans Myanmar, Noto Sans Yi, Nyala, PMingLiU, Plantagenet Cherokee, Raavi, Segoe UI, Shruti, SimSun, Sylfaen, Tahoma, Times New Roman, Tunga, Verdana, Vrinda"); #endif #ifdef XP_LINUX pref("font.system.whitelist", "Arimo, Arimo Bold, Arimo Italic, Arimo Bold Italic, Cousine, Tinos, Tinos Bold, Tinos Italic, Tinos Bold Italic, Noto Naskh Arabic, Noto Sans Armenian, Noto Sans Bengali, Noto Sans Buginese, Noto Sans CJK SC Regular, Noto Sans Canadian Aboriginal, Noto Sans Cherokee, Noto Sans Devanagari, Noto Sans Ethiopic, Noto Sans Georgian, Noto Sans Gujarati, Noto Sans Gurmukhi, Noto Sans Hebrew, Noto Sans Kannada, Noto Sans Khmer, Noto Sans Lao, Noto Sans Malayalam, Noto Sans Mongolian, Noto Sans Myanmar, Noto Sans Oriya, Noto Sans Sinhala, Noto Sans Tamil, Noto Sans Telugu, Noto Sans Thaana, Noto Sans Thai, Noto Sans Tibetan, Noto Sans Yi, Noto Serif Armenian, Noto Serif Khmer, Noto Serif Lao, Noto Serif Thai"); -#endif pref("font.default.lo", "Noto Sans Lao"); pref("font.default.my", "Noto Sans Myanmar"); @@ -456,3 +464,5 @@ pref("font.name.serif.zh-HK", "Noto Sans CJK SC Regular"); pref("font.name.serif.zh-TW", "Noto Sans CJK SC Regular"); #endif + +#endif [View Less]

1 0