September 2015 - tor-commits - lists.torproject.org

[tor/master] Add "OfflineMasterKey" option
by nickm＠torproject.org 22 Sep '15

22 Sep '15

commit 0ba4e0895ae2395a528aacd1625715a7ffc29211 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Sep 1 10:22:24 2015 -0400 Add "OfflineMasterKey" option When this is set, and Tor is running as a relay, it will not generate or load its secret identity key. You can manage the secret identity key with --keygen. Implements ticket 16944. --- changes/feature16944 | 5 +++++ doc/tor.1.txt | 5 +++++ src/or/config.c | 1 + src/or/or.h | 5 +++++ src/or/routerkeys.c | 32 ++++++++++++++++++++++++++------ 5 files changed, 42 insertions(+), 6 deletions(-) diff --git a/changes/feature16944 b/changes/feature16944 new file mode 100644 index 0000000..1728bef --- /dev/null +++ b/changes/feature16944 @@ -0,0 +1,5 @@ + o Minor features (relay, ed25519): + - Add a new OfflineMasterKey option to tell Tor never to try + loading or generating a secret ed25519 identity key. You can use + this in combination with tor --keygen to manage offline and/or + encrypted ed25519 keys. Implements ticket 16944. diff --git a/doc/tor.1.txt b/doc/tor.1.txt index af99570..e34b19e 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -1877,6 +1877,11 @@ is non-zero): configures their lifetime. (Default: 30 days) +[[OfflineMasterKey]] **OfflineMasterKey** **0**|**1**:: + If non-zero, the Tor relay will never generate or load its master secret + key. Instead, you'll have to use "tor --keygen" to manage the master + secret key. (Default: 0) + DIRECTORY SERVER OPTIONS ------------------------ diff --git a/src/or/config.c b/src/or/config.c index 6e782de..3b8bf55 100644 --- a/src/or/config.c +++ b/src/or/config.c @@ -333,6 +333,7 @@ static config_var_t option_vars_[] = { V(NumCPUs, UINT, "0"), V(NumDirectoryGuards, UINT, "0"), V(NumEntryGuards, UINT, "0"), + V(OfflineMasterKey, BOOL, "0"), V(ORListenAddress, LINELIST, NULL), VPORT(ORPort, LINELIST, NULL), V(OutboundBindAddress, LINELIST, NULL), diff --git a/src/or/or.h b/src/or/or.h index 8c40f1a..b753f7c 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -4295,6 +4295,10 @@ typedef struct { /** How long before auth keys expire will we try to make a new one? */ int TestingAuthKeySlop; + /** Force use of offline master key features: never generate a master + * ed25519 identity key except from tor --keygen */ + int OfflineMasterKey; + enum { FORCE_PASSPHRASE_AUTO=0, FORCE_PASSPHRASE_ON, @@ -4302,6 +4306,7 @@ typedef struct { } keygen_force_passphrase; int use_keygen_passphrase_fd; int keygen_passphrase_fd; + } or_options_t; /** Persistent state for an onion router, as saved to disk. */ diff --git a/src/or/routerkeys.c b/src/or/routerkeys.c index 50659fc..283effa 100644 --- a/src/or/routerkeys.c +++ b/src/or/routerkeys.c @@ -668,6 +668,9 @@ load_ed_keys(const or_options_t *options, time_t now) use_signing = sign; } + const int offline_master = + options->OfflineMasterKey && options->command != CMD_KEYGEN; + const int need_new_signing_key = NULL == use_signing || EXPIRES_SOON(check_signing_cert, 0) || @@ -676,29 +679,43 @@ load_ed_keys(const or_options_t *options, time_t now) need_new_signing_key || EXPIRES_SOON(check_signing_cert, options->TestingSigningKeySlop); + /* We can only create a master key if we haven't been told that the + * master key will always be offline. Also, if we have a signing key, + * then we shouldn't make a new master ID key. */ + const int can_make_master_id_key = !offline_master && + NULL == use_signing; + if (need_new_signing_key) { log_notice(LD_OR, "It looks like I need to generate and sign a new " "medium-term signing key, because %s. To do that, I need to " - "load (or create) the permanent master identity key.", + "load%s the permanent master identity key.", (NULL == use_signing) ? "I don't have one" : EXPIRES_SOON(check_signing_cert, 0) ? "the one I have is expired" : - "you asked me to make one with --keygen"); - } else if (want_new_signing_key) { + "you asked me to make one with --keygen", + can_make_master_id_key ? " (or create)" : ""); + } else if (want_new_signing_key && !offline_master) { log_notice(LD_OR, "It looks like I should try to generate and sign a " "new medium-term signing key, because the one I have is " "going to expire soon. To do that, I'm going to have to try to " "load the permanent master identity key."); + } else if (want_new_signing_key) { + log_notice(LD_OR, "It looks like I should try to generate and sign a " + "new medium-term signing key, because the one I have is " + "going to expire soon. But OfflineMasterKey is set, so I " + "won't try to load a permanent master identity key is set. " + "You will need to use 'tor --keygen' make a new signing key " + "and certificate."); } { uint32_t flags = (INIT_ED_KEY_SPLIT| INIT_ED_KEY_EXTRA_STRONG|INIT_ED_KEY_NO_REPAIR); - if (! use_signing) + if (can_make_master_id_key) flags |= INIT_ED_KEY_CREATE; if (! need_new_signing_key) flags |= INIT_ED_KEY_MISSING_SECRET_OK; - if (! want_new_signing_key) + if (! want_new_signing_key || offline_master) flags |= INIT_ED_KEY_OMIT_SECRET; if (options->command == CMD_KEYGEN) flags |= INIT_ED_KEY_TRY_ENCRYPTED; @@ -724,7 +741,10 @@ load_ed_keys(const or_options_t *options, time_t now) tor_free(fname); if (!id) { if (need_new_signing_key) { - FAIL("Missing identity key"); + if (offline_master) + FAIL("Can't load master identity key; OfflineMasterKey is set."); + else + FAIL("Missing identity key"); } else { log_warn(LD_OR, "Master public key was absent; inferring from " "public key in signing certificate and saving to disk.");

1 0

[tor/master] Never ever try to load the secret key if offline_master is set
by nickm＠torproject.org 22 Sep '15

22 Sep '15

commit d70b1b4da13d30f16ba0604103a1ebe915a2a20a Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 2 11:49:28 2015 -0400 Never ever try to load the secret key if offline_master is set (Not even if we can't find the public key.) --- src/or/routerkeys.c | 18 ++++++++++++++---- src/or/routerkeys.h | 1 + 2 files changed, 15 insertions(+), 4 deletions(-) diff --git a/src/or/routerkeys.c b/src/or/routerkeys.c index 283effa..d65b629 100644 --- a/src/or/routerkeys.c +++ b/src/or/routerkeys.c @@ -237,8 +237,12 @@ write_secret_key(const ed25519_secret_key_t *key, int encrypted, * If INIT_ED_KEY_MISSING_SECRET_OK is set in flags, and we find a * public key file but no secret key file, return successfully anyway. * - * If INIT_ED_KEY_OMIT_SECRET is set in flags, do not even try to - * load or return a secret key (but create and save one if needed). + * If INIT_ED_KEY_OMIT_SECRET is set in flags, do not try to load a + * secret key unless no public key is found. Do not return a secret key. (but + * create and save one if needed). + * + * If INIT_ED_KEY_NO_LOAD_SECRET is set in flags, don't try to load + * a secret key, no matter what. * * If INIT_ED_KEY_TRY_ENCRYPTED is set, we look for an encrypted secret key * and consider encrypting any new secret key. @@ -269,7 +273,8 @@ ed_key_init_from_file(const char *fname, uint32_t flags, const int encrypt_key = !! (flags & INIT_ED_KEY_TRY_ENCRYPTED); const int norepair = !! (flags & INIT_ED_KEY_NO_REPAIR); const int split = !! (flags & INIT_ED_KEY_SPLIT); - const int omit_secret = !! (flags & INIT_ED_KEY_OMIT_SECRET); + const int omit_secret = !! (flags & INIT_ED_KEY_OMIT_SECRET); + const int offline_secret = !! (flags & INIT_ED_KEY_OFFLINE_SECRET); /* we don't support setting both of these flags at once. */ tor_assert((flags & (INIT_ED_KEY_NO_REPAIR|INIT_ED_KEY_NEEDCERT)) != @@ -289,7 +294,10 @@ ed_key_init_from_file(const char *fname, uint32_t flags, /* Try to read the secret key. */ int have_secret = 0; - if (try_to_load && (!omit_secret || file_status(public_fname)==FN_NOENT )) { + int load_secret = try_to_load && + !offline_secret && + (!omit_secret || file_status(public_fname)==FN_NOENT); + if (load_secret) { int rv = ed25519_seckey_read_from_file(&keypair->seckey, &got_tag, secret_fname); if (rv == 0) { @@ -717,6 +725,8 @@ load_ed_keys(const or_options_t *options, time_t now) flags |= INIT_ED_KEY_MISSING_SECRET_OK; if (! want_new_signing_key || offline_master) flags |= INIT_ED_KEY_OMIT_SECRET; + if (offline_master) + flags |= INIT_ED_KEY_OFFLINE_SECRET; if (options->command == CMD_KEYGEN) flags |= INIT_ED_KEY_TRY_ENCRYPTED; diff --git a/src/or/routerkeys.h b/src/or/routerkeys.h index b4e73aa..b396779 100644 --- a/src/or/routerkeys.h +++ b/src/or/routerkeys.h @@ -17,6 +17,7 @@ #define INIT_ED_KEY_TRY_ENCRYPTED (1u<<8) #define INIT_ED_KEY_NO_REPAIR (1u<<9) #define INIT_ED_KEY_SUGGEST_KEYGEN (1u<<10) +#define INIT_ED_KEY_OFFLINE_SECRET (1u<<11) struct tor_cert_st; ed25519_keypair_t *ed_key_init_from_file(const char *fname, uint32_t flags,

1 0

[tor/master] Merge branch 'feature16944_v2'
by nickm＠torproject.org 22 Sep '15

22 Sep '15

commit e94ef30a2fa6ef0197fe9fafbb2469475d868627 Merge: 2a96506 d70b1b4 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Sep 22 09:19:28 2015 -0400 Merge branch 'feature16944_v2' changes/feature16944 | 5 +++++ doc/tor.1.txt | 5 +++++ src/or/config.c | 1 + src/or/or.h | 5 +++++ src/or/routerkeys.c | 49 +++++++++++++++++++++++++++++++++++++++---------- src/or/routerkeys.h | 1 + 6 files changed, 56 insertions(+), 10 deletions(-) diff --cc src/or/routerkeys.c index f7c65c2,d65b629..b1e9ed3 --- a/src/or/routerkeys.c +++ b/src/or/routerkeys.c @@@ -668,11 -676,9 +676,13 @@@ load_ed_keys(const or_options_t *option use_signing = sign; } + if (!use_signing && master_signing_key) { + check_signing_cert = signing_key_cert; + use_signing = master_signing_key; + } + + const int offline_master = + options->OfflineMasterKey && options->command != CMD_KEYGEN; - const int need_new_signing_key = NULL == use_signing || EXPIRES_SOON(check_signing_cert, 0) ||

1 0

[translation/torbutton-brandproperties_completed] Update translations for torbutton-brandproperties_completed
by translation＠torproject.org 22 Sep '15

22 Sep '15

commit 279bf737ed95974c8b8f292802a4f2bb2657a53b Author: Translation commit bot <translation(a)torproject.org> Date: Tue Sep 22 13:16:06 2015 +0000 Update translations for torbutton-brandproperties_completed --- sl/brand.properties | 1 + 1 file changed, 1 insertion(+) diff --git a/sl/brand.properties b/sl/brand.properties index a137164..df7eec0 100644 --- a/sl/brand.properties +++ b/sl/brand.properties @@ -2,6 +2,7 @@ # License, v. 2.0. If a copy of the MPL was not distributed with this # file, You can obtain one at http://mozilla.org/MPL/2.0/. +brandShorterName=Tor Browser brandShortName=Tor Browser brandFullName=Tor Browser vendorShortName=Tor Project

1 0

[translation/abouttor-homepage_completed] Update translations for abouttor-homepage_completed
by translation＠torproject.org 22 Sep '15

22 Sep '15

commit f81130d319f6da621e07691707f0c71ca4a58d1f Author: Translation commit bot <translation(a)torproject.org> Date: Tue Sep 22 13:16:00 2015 +0000 Update translations for abouttor-homepage_completed --- sl_SI/aboutTor.dtd | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/sl_SI/aboutTor.dtd b/sl_SI/aboutTor.dtd index 3e5cf73..067c8db 100644 --- a/sl_SI/aboutTor.dtd +++ b/sl_SI/aboutTor.dtd @@ -1,15 +1,14 @@  -<!ENTITY aboutTor.title "O Tor"> +<!ENTITY aboutTor.title "O Toru"> -<!ENTITY aboutTor.outOfDateTorOn.label "VENDAR, pa je ta brskalnik zastarel."> -<!ENTITY aboutTor.outOfDateTorOff.label "TUDI, ta brskalnik je zastarel."> -<!ENTITY aboutTor.outOfDate2.label "Kliknite na "čebulo" in nato izberite Download Tor Browser Bundle Update. -"> +<!ENTITY aboutTor.outOfDateTorOn.label "Vendar, je ta brskalnik zastarel."> +<!ENTITY aboutTor.outOfDateTorOff.label "Tudi, ta brskalnik je zastarel."> +<!ENTITY aboutTor.outOfDate2.label "Klikni na čebulo in nato izberi Preglej za Tor posodobitve."> <!ENTITY aboutTor.check.label "Preizkusi Tor omrežne nastavitve"> @@ -26,6 +25,7 @@ <!ENTITY aboutTor.searchSPPost.link "https://startpage.com/rth/search"> <!ENTITY aboutTor.searchDDGPost.link "https://duckduckgo.com/html/"> +<!ENTITY aboutTor.searchDCPost.link "https://search.disconnect.me/searchTerms/search?ses=Google&location_opt…"> <!ENTITY aboutTor.torInfo1.label "Dodatne informacije:"> <!ENTITY aboutTor.torInfo2.label "Država & IP naslov:">

1 0

[translation/tails-misc] Update translations for tails-misc
by translation＠torproject.org 22 Sep '15

22 Sep '15

commit ee14ee7dd0d515b6ea1b4572e7f200fe7fa528cb Author: Translation commit bot <translation(a)torproject.org> Date: Tue Sep 22 13:15:55 2015 +0000 Update translations for tails-misc --- sl.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sl.po b/sl.po index 5f7918a..f225253 100644 --- a/sl.po +++ b/sl.po @@ -9,7 +9,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2015-09-20 19:32+0200\n" -"PO-Revision-Date: 2015-09-21 09:20+0000\n" +"PO-Revision-Date: 2015-09-22 12:55+0000\n" "Last-Translator: carolyn <carolyn(a)anhalt.org>\n" "Language-Team: Slovenian (http://www.transifex.com/otf/torproject/language/sl/)\n" "MIME-Version: 1.0\n"

1 0

[translation/liveusb-creator] Update translations for liveusb-creator
by translation＠torproject.org 22 Sep '15

22 Sep '15

commit 31a8475ae917cc75af3ccec2a6d996b1fbc8734c Author: Translation commit bot <translation(a)torproject.org> Date: Tue Sep 22 13:15:31 2015 +0000 Update translations for liveusb-creator --- sl/sl.po | 6 +++--- sl_SI/sl_SI.po | 11 ++++++----- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/sl/sl.po b/sl/sl.po index b4bdea5..280d152 100644 --- a/sl/sl.po +++ b/sl/sl.po @@ -8,8 +8,8 @@ msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2015-08-04 10:45+0200\n" -"PO-Revision-Date: 2015-08-05 08:28+0000\n" +"POT-Creation-Date: 2015-08-10 16:01+0200\n" +"PO-Revision-Date: 2015-09-22 12:53+0000\n" "Last-Translator: carolyn <carolyn(a)anhalt.org>\n" "Language-Team: Slovenian (http://www.transifex.com/otf/torproject/language/sl/)\n" "MIME-Version: 1.0\n" @@ -595,4 +595,4 @@ msgstr "" #: ../liveusb/dialog.py:155 msgid "or" -msgstr "" +msgstr "ali" diff --git a/sl_SI/sl_SI.po b/sl_SI/sl_SI.po index 1d0db96..de06e63 100644 --- a/sl_SI/sl_SI.po +++ b/sl_SI/sl_SI.po @@ -3,15 +3,16 @@ # This file is distributed under the same license as the PACKAGE package. # # Translators: +# David <popotnikpp(a)gmail.com>, 2015 # Dušan <dusan.k(a)zoho.com>, 2014 # Matija <matija(a)srebrni-galeb.si>, 2015 msgid "" msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2015-08-04 10:45+0200\n" -"PO-Revision-Date: 2015-08-05 08:28+0000\n" -"Last-Translator: carolyn <carolyn(a)anhalt.org>\n" +"POT-Creation-Date: 2015-08-10 16:01+0200\n" +"PO-Revision-Date: 2015-09-22 12:58+0000\n" +"Last-Translator: David <popotnikpp(a)gmail.com>\n" "Language-Team: Slovenian (Slovenia) (http://www.transifex.com/otf/torproject/language/sl_SI/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -21,11 +22,11 @@ msgstr "" #: ../liveusb/gui.py:451 msgid "\"Clone & Install\"" -msgstr "" +msgstr "\"Kloniraj & Namesti\"" #: ../liveusb/gui.py:453 msgid "\"Install from ISO\"" -msgstr "" +msgstr "\"Namesti iz ISO\"" #: ../liveusb/dialog.py:150 ../liveusb/launcher_ui.py:149 #, python-format

1 0

[translation/https_everywhere_completed] Update translations for https_everywhere_completed
by translation＠torproject.org 22 Sep '15

22 Sep '15

commit 56394ed663ee186ba76de71c0477f2f9df303c83 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Sep 22 13:15:24 2015 +0000 Update translations for https_everywhere_completed --- sl/https-everywhere.dtd | 3 +++ sl/ssl-observatory.dtd | 8 +++++++- sl_SI/https-everywhere.dtd | 1 + 3 files changed, 11 insertions(+), 1 deletion(-) diff --git a/sl/https-everywhere.dtd b/sl/https-everywhere.dtd index 1c0097e..ea58b6f 100644 --- a/sl/https-everywhere.dtd +++ b/sl/https-everywhere.dtd @@ -8,13 +8,16 @@ <!ENTITY https-everywhere.about.contribute "Če vam je HTTPS Everywhere všeč, razmislite o"> <!ENTITY https-everywhere.about.donate_tor "donaciji za Tor"> <!ENTITY https-everywhere.about.tor_lang_code "en"> +<!ENTITY https-everywhere.about.or "ali"> <!ENTITY https-everywhere.about.donate_eff "donaciji za EFF"> <!ENTITY https-everywhere.menu.about "O HTTPS Everywhere"> <!ENTITY https-everywhere.menu.observatory "Nastavitve SSL Observatorija"> <!ENTITY https-everywhere.menu.globalEnable "Omogoči HTTPS Everywhere"> <!ENTITY https-everywhere.menu.globalDisable "Onemogoči HTTPS Everywhere"> +<!ENTITY https-everywhere.menu.blockHttpRequests "Blokiraj vse HTTP zahteve"> <!ENTITY https-everywhere.menu.showCounter "Prikaži števec"> +<!ENTITY https-everywhere.menu.viewAllRules "Preglej vsa pravila"> <!ENTITY https-everywhere.prefs.title "Nastavitve HTTPS Everywhere"> <!ENTITY https-everywhere.prefs.enable_all "Omogoči vse"> diff --git a/sl/ssl-observatory.dtd b/sl/ssl-observatory.dtd index 8819513..250dad9 100644 --- a/sl/ssl-observatory.dtd +++ b/sl/ssl-observatory.dtd @@ -44,6 +44,12 @@ vsiljivo poslovno omrežje:"> <!ENTITY ssl-observatory.prefs.asn_tooltip "To bo pridobilo in poslalo "Avtonomno številko sistema" (ASN) vašega omrežja. To nam bo pomagalo locirati napade na HTTPS in določiti, ali so opažanja iz omrežij na področjih kot so Iran in Sirija, kjer so napadi razmeroma pogosti."> +<!ENTITY ssl-observatory.prefs.show_cert_warning +"Pokaži opozorilo ko Observatorij zazna preklicane certifikate, ki jih vaš brskalnik ni našel."> + +<!ENTITY ssl-observatory.prefs.show_cert_warning_tooltip +"To bo preverilo predložene certifikate s seznamom preklicanih potrdil. Žal vam ne moremo zagotoviti, da bomo označili vsako preklicano potrdilo, če pa vidite opozorilo je možno, da je nekaj narobe."> + <!ENTITY ssl-observatory.prefs.done "Končano"> <!ENTITY ssl-observatory.prefs.explanation @@ -84,7 +90,7 @@ Pridržite miško nad možnosti za več podrobnosti:"> <!ENTITY ssl-observatory.warning.showcert "Pokaži certifikatno verigo"> <!ENTITY ssl-observatory.warning.okay "Razumem"> <!ENTITY ssl-observatory.warning.text "EFF SSL Observatorij je izdal opozorilo za HTTPS certifikat(e) za to stran:"> -<!ENTITY ssl-observatory.warning.defense "Če ste vpisani na tej strani je priporočljivo, da spremenite geslo, ko boste varno povezani."> +<!ENTITY ssl-observatory.warning.defense "Če ste vpisani na tej strani je priporočljivo da spremenite geslo, ko boste varno povezani. (Ta opozorila lahko onemogočite v nastavitvah HTTPS Everywhere, v zavihku "SSL Observatorij".)"> <!ENTITY ssl-observatory.prefs.self_signed "Predložite in preverite samopodpisana potrdila"> diff --git a/sl_SI/https-everywhere.dtd b/sl_SI/https-everywhere.dtd index 705a735..b938707 100644 --- a/sl_SI/https-everywhere.dtd +++ b/sl_SI/https-everywhere.dtd @@ -17,6 +17,7 @@ <!ENTITY https-everywhere.menu.globalDisable "Onemogoči HTTPS Everywhere"> <!ENTITY https-everywhere.menu.blockHttpRequests "Ustavi vse HTTP zahtevke"> <!ENTITY https-everywhere.menu.showCounter "Prikaži števec"> +<!ENTITY https-everywhere.menu.viewAllRules "Preglej vsa pravila"> <!ENTITY https-everywhere.prefs.title "HTTPS Everywhere možnosti"> <!ENTITY https-everywhere.prefs.enable_all "Omogoči vse">

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 22 Sep '15

22 Sep '15

commit 244c3b8e2607968a7363ce81f4801667580288a9 Author: Translation commit bot <translation(a)torproject.org> Date: Tue Sep 22 13:15:19 2015 +0000 Update translations for https_everywhere --- sl/https-everywhere.dtd | 6 +++--- sl/ssl-observatory.dtd | 2 +- sl_SI/https-everywhere.dtd | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/sl/https-everywhere.dtd b/sl/https-everywhere.dtd index c9a3d28..ea58b6f 100644 --- a/sl/https-everywhere.dtd +++ b/sl/https-everywhere.dtd @@ -8,16 +8,16 @@ <!ENTITY https-everywhere.about.contribute "Če vam je HTTPS Everywhere všeč, razmislite o"> <!ENTITY https-everywhere.about.donate_tor "donaciji za Tor"> <!ENTITY https-everywhere.about.tor_lang_code "en"> -<!ENTITY https-everywhere.about.or "or"> +<!ENTITY https-everywhere.about.or "ali"> <!ENTITY https-everywhere.about.donate_eff "donaciji za EFF"> <!ENTITY https-everywhere.menu.about "O HTTPS Everywhere"> <!ENTITY https-everywhere.menu.observatory "Nastavitve SSL Observatorija"> <!ENTITY https-everywhere.menu.globalEnable "Omogoči HTTPS Everywhere"> <!ENTITY https-everywhere.menu.globalDisable "Onemogoči HTTPS Everywhere"> -<!ENTITY https-everywhere.menu.blockHttpRequests "Block all HTTP requests"> +<!ENTITY https-everywhere.menu.blockHttpRequests "Blokiraj vse HTTP zahteve"> <!ENTITY https-everywhere.menu.showCounter "Prikaži števec"> -<!ENTITY https-everywhere.menu.viewAllRules "View All Rules"> +<!ENTITY https-everywhere.menu.viewAllRules "Preglej vsa pravila"> <!ENTITY https-everywhere.prefs.title "Nastavitve HTTPS Everywhere"> <!ENTITY https-everywhere.prefs.enable_all "Omogoči vse"> diff --git a/sl/ssl-observatory.dtd b/sl/ssl-observatory.dtd index 907af64..250dad9 100644 --- a/sl/ssl-observatory.dtd +++ b/sl/ssl-observatory.dtd @@ -48,7 +48,7 @@ vsiljivo poslovno omrežje:"> "Pokaži opozorilo ko Observatorij zazna preklicane certifikate, ki jih vaš brskalnik ni našel."> <!ENTITY ssl-observatory.prefs.show_cert_warning_tooltip -"This will check submitted certificates against known Certificate Revocation Lists. Unfortunately we cannot guarantee that we will flag every revoked certificate, but if you do see a warning there's a good chance something is wrong."> +"To bo preverilo predložene certifikate s seznamom preklicanih potrdil. Žal vam ne moremo zagotoviti, da bomo označili vsako preklicano potrdilo, če pa vidite opozorilo je možno, da je nekaj narobe."> <!ENTITY ssl-observatory.prefs.done "Končano"> diff --git a/sl_SI/https-everywhere.dtd b/sl_SI/https-everywhere.dtd index bf623b0..b938707 100644 --- a/sl_SI/https-everywhere.dtd +++ b/sl_SI/https-everywhere.dtd @@ -17,7 +17,7 @@ <!ENTITY https-everywhere.menu.globalDisable "Onemogoči HTTPS Everywhere"> <!ENTITY https-everywhere.menu.blockHttpRequests "Ustavi vse HTTP zahtevke"> <!ENTITY https-everywhere.menu.showCounter "Prikaži števec"> -<!ENTITY https-everywhere.menu.viewAllRules "View All Rules"> +<!ENTITY https-everywhere.menu.viewAllRules "Preglej vsa pravila"> <!ENTITY https-everywhere.prefs.title "HTTPS Everywhere možnosti"> <!ENTITY https-everywhere.prefs.enable_all "Omogoči vse">

1 0

[tor/master] Sort changelog entries a little more
by nickm＠torproject.org 22 Sep '15

22 Sep '15

commit 2a9650625f5ce2cbad67299ce57c92bc70677a9b Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Sep 22 09:14:07 2015 -0400 Sort changelog entries a little more --- ChangeLog | 101 +++++++++++++++++++++++++++---------------------------------- 1 file changed, 44 insertions(+), 57 deletions(-) diff --git a/ChangeLog b/ChangeLog index c75d522..dcae325 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,4 @@ -Changes in version 0.2.7.3-????? - 2015-09-1? +Changes in version 0.2.7.3-rc - 2015-09-2? XXXX write a blurb o Major features (security, hidden services): @@ -16,50 +16,40 @@ Changes in version 0.2.7.3-????? - 2015-09-1? - On receiving a HUP signal, check to see whether the Ed25519 signing key has changed, and reload it if so. Closes ticket 16790. + o Major features (performance testing): + - The test-network.sh script now supports performance testing. + Requires the corresponding chutney performance testing changes. + Patch by "teor". Closes ticket 14175. + o Major bugfixes (relay, Ed25519): - Avoid crashing on 'tor --keygen'. Fixes bug 16679; bugfix on 0.2.7.2-alpha. Reported by "s7r". - Improve handling of expired signing keys along with offline master keys. Fixes bug 16685; bugfix on 0.2.7.2-alpha. Reported by "s7r". - o Major enhancements (performance testing): - - Add chutney performance testing support to src/test/test- - network.sh The following arguments change how chutney verifies the - network: "--bytes n" sends n bytes per test connection; - "--connections n" makes n test connections per client; and - "--hs-multi-client 1" makes each client connect to each HS. - Requires the corresponding chutney performance testing changes. - Note: using --connections 7 or greater on a HS will trigger issue - 15937. Patch by "teor". Closes ticket 14175. - - o Minor features: - - Try harder to normalize the exit status of the Tor process to the - standard-provided range. Fixes bug 16975; bugfix on every version - of Tor ever. - - Update geoip and geoip6 to the July 8 2015 Maxmind GeoLite2 - Country database. - o Minor features (client-side privacy): - Indefinitely extend circuit lifespan by resetting dirtyness, if IsolateSOCKSAuth is in use, the new `KeepAliveIsolateSOCKSAuth` option is set, and streams with SOCKS authentication are attached to the circuit. Implements feature 15482. + - When logging malformed hostnames in socks5 requests, respect + SafeLogging configuration. Fixes bug 16891; bugfix on 0.1.1.16-rc. o Minor features (compilation): - Give a warning as early as possible when trying to build with an unsupported OpenSSL version. Closes ticket 16901. - o Minor features (Hidden service directory): + o Minor features (geoip): + - Update geoip and geoip6 to the July 8 2015 Maxmind GeoLite2 + Country database. + + o Minor features (hidden services): - Relays need to have the Fast flag to get the HSDir flag. As this is being written, we'll go from 2745 HSDirs down to 2342, a ~14% drop. Fixes ticket 15963. - - o Minor features (hidden Service Statistics): - Turn on hidden service statistics collection by setting the torrc option HiddenServiceStatistics to "1" by default. Closes ticket 15254. - - o Minor features (hidden service): - Client now uses an introduction point failure cache to know when to fetch or keep a descriptor in their cache. @@ -74,7 +64,7 @@ Changes in version 0.2.7.3-????? - 2015-09-1? See rendcache.c for a detailed explanation of the cache's behavior. Closes ticket 16389. - o Minor features (performance): + o Minor features (ed25519 performance): - Improve the runtime speed of Ed25519 operations and Curve25519 keypair generation when built targeting 32 bit x86 platforms with SSE2 available. Implements ticket 16535. @@ -82,12 +72,7 @@ Changes in version 0.2.7.3-????? - 2015-09-1? using Ed25519-donna's batch verification support when there are a lot of signatures to verify at once. Implements ticket 16533. - o Minor features (testing): - - Autodetect CHUTNEY_PATH if the chutney and tor sources are side- - by-side in the same parent directory. Closes ticket 16903. Patch - by "teor". - - o Minor features (testing, authorities): + o Minor features (testing, authorities, documentation): - New TestingDirAuthVote{Exit,Guard,HSDir}IsStrict flags. "A node will never receive the corresponding flag unless that node is specified in the TestingDirAuthVote{Exit,Guard,HSDir} list, @@ -95,8 +80,6 @@ Changes in version 0.2.7.3-????? - 2015-09-1? Closes ticket 14882. Patch by "robgjansen", modified by "teor" as VoteOnHidServDirectoriesV2 is now obsolete. Commit message and changes file by "teor" & "robgjansen". - - o Minor features (testing, authorities, documentation): - Fix an error in the manual page and comments for TestingDirAuthVoteHSDir[IsStrict], which suggested that a HSDir required "ORPort connectivity". While this is true, it is in no @@ -105,13 +88,6 @@ Changes in version 0.2.7.3-????? - 2015-09-1? particular flag. Fixed as part of 14882. Patch by "teor". Bugfix on 0.2.6.3 (f9d57473e1ff on 10 January 2015). - o Minor features (testing, bridges, hidden services): - - Make "bridges+hs" the default test network. This tests almost all - tor functionality during make test-network, while allowing tests - to succeed on non-IPv6 systems. Requires chutney commit 396da92 in - test-network-bridges-hs. Closes tickets 16945 (tor), 16946 - (chutney) . Patches by "teor". - o Minor bug fixes (security, exit policies): - ExitPolicyRejectPrivate rejects more private addresses by default: * the relay's published IPv6 address (if any), and * any publicly @@ -119,29 +95,33 @@ Changes in version 0.2.7.3-????? - 2015-09-1? ticket 17027. Patch by "teor". Patch on 42b8fb5a1523 (11 Nov 2007), released in 0.2.0.11-alpha. - o Minor bugfixes: + o Minor bugfixes (portability): + - Try harder to normalize the exit status of the Tor process to the + standard-provided range. Fixes bug 16975; bugfix on every version + of Tor ever. - Check correctly for windows socket errors in the workqueue backend. Fixes bug 16741; bugfix on 0.2.6.3-alpha. - - Ensure that worker threads actually exit when a fatal error or - shutdown is indicated. This doesn't currently affect the behaviour - of Tor, because Tor never indicates fatal error or shutdown except - in its unit tests. Fixes bug 16868; bugfix on 0.2.6.3-alpha. - - Fix an usage message of tor-resolve(1) so that it no longer lists - the removed -F option. Fixes bug 16913; bugfix on - Tor 0.2.2.28-beta. - Fix the behavior of crypto_time_t when told to consider times before 1970. (These times were possible when running in a simulated network environment where time()'s output starts at zero.) Fixes bug 16980; bugfix on 0.2.7.1-alpha. + + o Minor bugfixes (documentation): + - Fix an usage message of tor-resolve(1) so that it no longer lists + the removed -F option. Fixes bug 16913; bugfix on + Tor 0.2.2.28-beta. + + o Minor bugfixes (relay): + - Ensure that worker threads actually exit when a fatal error or + shutdown is indicated. This doesn't currently affect the behaviour + of Tor, because Tor never indicates fatal error or shutdown except + in its unit tests. Fixes bug 16868; bugfix on 0.2.6.3-alpha. + + o Minor bugfixes (correctness): - When calling channel_free_list(), avoid calling smartlist_remove() while inside a FOREACH loop. This partially reverts commit 17356fe7fd96af where the correct SMARTLIST_DEL_CURRENT was removed. Fixes bug 16924; bugfix on 0.2.4.4-alpha. - - When logging malformed hostnames in socks5 requests, respect - SafeLogging configuration. Fixes bug 16891; bugfix on 0.1.1.16-rc. - - include the TUNING document in our source tarball. It is referred - to in the ChangeLog and an error message. Fixes bug 16929; bugfix - on 0.2.6.1-alpha. o Minor bug fixes (torrc exit policies): - accept6/reject6 * lines only produce IPv6 wildcard addresses, @@ -163,7 +143,7 @@ Changes in version 0.2.7.3-????? - 2015-09-1? Resolves ticket 16069. Patch by "teor". Patch on 2eb7eafc9d78 and a96c0affcb4c (25 Oct 2012), released in 0.2.4.7-alpha. - o Minor bugfix (open file limit): + o Minor bugfixes (open file limit): - Fix set_max_file_descriptors() to set by default the max open file limit to the current limit in case setrlimit() fails so we at least have a usable value; Fixes bug 16274; bugfix on tor- @@ -234,13 +214,14 @@ Changes in version 0.2.7.3-????? - 2015-09-1? - Wrap windows-only C files inside '#ifdef _WIN32' so that tools that try to scan or compile every file on Unix won't decide that they are broken. - - o Code simplifications and refactoring: - Remove the unused "nulterminate" argument from buf_pullup(). o Documentation: - Recommend a 40 GB example AccountingMax in torrc.sample rather than a 4 GB max. Closes ticket 16742. + - Include the TUNING document in our source tarball. It is referred + to in the ChangeLog and an error message. Fixes bug 16929; bugfix + on 0.2.6.1-alpha. o Removed code: - The internal pure-C tor-fw-helper tool is now removed from the Tor @@ -249,8 +230,6 @@ Changes in version 0.2.7.3-????? - 2015-09-1? the C tor-fw-helper are not, in our opinion, very confidence- inspiring in their secure-proggramming techniques. Closes ticket 13338. - - o Removed features: - Remove the code that would try to aggressively flush controller connections while writing to them. This code was introduced in 0.1.2.7-alpha, in order to keep output buffers from exceeding @@ -259,6 +238,14 @@ Changes in version 0.2.7.3-????? - 2015-09-1? in our call graph. Closes ticket 16480. o Testing: + - Make "bridges+hs" the default test network. This tests almost all + tor functionality during make test-network, while allowing tests + to succeed on non-IPv6 systems. Requires chutney commit 396da92 in + test-network-bridges-hs. Closes tickets 16945 (tor), 16946 + (chutney) . Patches by "teor". + - Autodetect CHUTNEY_PATH if the chutney and tor sources are side- + by-side in the same parent directory. Closes ticket 16903. Patch + by "teor". - Add a new set of callgraph analysis scripts that use clang to produce a list of which Tor functions are reachable from which other Tor functions. We're planning to use these to help simplify

1 0