February 2016 - tor-commits - lists.torproject.org

[tor/master] Fix an unused-variable warning
by nickm＠torproject.org 27 Feb '16

27 Feb '16

commit d5cbc21ad1138bb40e636851042a686784e7d786 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sat Feb 27 10:20:15 2016 +0100 Fix an unused-variable warning --- src/common/util.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/common/util.c b/src/common/util.c index 5713235..2bb2c2b 100644 --- a/src/common/util.c +++ b/src/common/util.c @@ -2056,13 +2056,13 @@ int check_private_dir(const char *dirname, cpd_check_t check, const char *effective_user) { - int fd; int r; struct stat st; tor_assert(dirname); #ifndef _WIN32 + int fd; unsigned unwanted_bits = 0; const struct passwd *pw = NULL; uid_t running_uid;

1 0

[translation/mat-gui_completed] Update translations for mat-gui_completed
by translation＠torproject.org 27 Feb '16

27 Feb '16

commit 4c735e7c89bf40944d43e61af5b3644ac16e4e03 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Feb 27 06:45:35 2016 +0000 Update translations for mat-gui_completed --- eu.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/eu.po b/eu.po index 741d341..8e772bd 100644 --- a/eu.po +++ b/eu.po @@ -11,7 +11,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2016-02-10 23:06+0100\n" -"PO-Revision-Date: 2016-02-26 20:05+0000\n" +"PO-Revision-Date: 2016-02-27 06:41+0000\n" "Last-Translator: Antxon Baldarra <baldarra(a)bitmessage.ch>\n" "Language-Team: Basque (http://www.transifex.com/otf/torproject/language/eu/)\n" "MIME-Version: 1.0\n"

1 0

[translation/mat-gui] Update translations for mat-gui
by translation＠torproject.org 27 Feb '16

27 Feb '16

commit 360455bbc13385748f47fd4c432adc708123d6c5 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Feb 27 06:45:30 2016 +0000 Update translations for mat-gui --- eu.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/eu.po b/eu.po index 741d341..8e772bd 100644 --- a/eu.po +++ b/eu.po @@ -11,7 +11,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2016-02-10 23:06+0100\n" -"PO-Revision-Date: 2016-02-26 20:05+0000\n" +"PO-Revision-Date: 2016-02-27 06:41+0000\n" "Last-Translator: Antxon Baldarra <baldarra(a)bitmessage.ch>\n" "Language-Team: Basque (http://www.transifex.com/otf/torproject/language/eu/)\n" "MIME-Version: 1.0\n"

1 0

[webwml/master] ... without breaking the script
by sebastian＠torproject.org 27 Feb '16

27 Feb '16

commit 7249d28fce4ce09e8871da740fb90529fde78b23 Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Sat Feb 27 07:37:53 2016 +0100 ... without breaking the script --- docs/en/debian.wml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/en/debian.wml b/docs/en/debian.wml index 87c4fd6..a5a97c1 100644 --- a/docs/en/debian.wml +++ b/docs/en/debian.wml @@ -19,7 +19,7 @@ var software = { 'lucid': [ 'lucid'], 'precise': [ 'precise'], 'saucy': [ 'saucy'], - 'trusty': [ 'trusty'], + 'trusty': [ 'trusty'], }, 'experimental-0.2.7.x': { 'wheezy': [ 'wheezy' ], 'jessie': [ 'jessie' ], 'stretch': [ 'stretch' ], @@ -27,7 +27,7 @@ var software = { 'lucid': [ 'lucid'], 'precise': [ 'precise'], 'saucy': [ 'saucy'], - 'trusty': [ 'trusty'], + 'trusty': [ 'trusty'], }, }, 'tor (from source)': { '_stable': { 'squeeze': [ 'squeeze' ], 'wheezy': [ 'wheezy' ], @@ -37,7 +37,7 @@ var software = { 'lucid': [ 'lucid'], 'precise': [ 'precise'], 'saucy': [ 'saucy'], - 'trusty': [ 'trusty'], + 'trusty': [ 'trusty'], }, 'experimental-0.2.7.x': { 'wheezy': [ 'wheezy' ], 'jessie': [ 'jessie' ], 'stretch': [ 'stretch' ], @@ -45,7 +45,7 @@ var software = { 'lucid': [ 'lucid'], 'precise': [ 'precise'], 'saucy': [ 'saucy'], - 'trusty': [ 'trusty'], + 'trusty': [ 'trusty'], }, }, };

1 0

[webwml/master] add ed255 docs to the FAQ (#17021)
by sebastian＠torproject.org 27 Feb '16

27 Feb '16

commit 9b92b660218a8f02bfd32170ecd6a3de3198eade Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Sat Feb 27 06:45:40 2016 +0100 add ed255 docs to the FAQ (#17021) Wording mostly s7r's from the ticket. --- docs/en/faq.wml | 74 +++++++++++++++++++++++++++++++++++++++++++++++++++++---- 1 file changed, 70 insertions(+), 4 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index 2fe5d7d..4c082db 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -188,6 +188,8 @@ be?</a></li> relay?</a></li> <li><a href="#UpgradeOrMove">I want to upgrade/move my relay. How do I keep the same key?</a></li> + <li><a href="#OfflineED25519">How do offline ed25519 identity keys work? + What do I need to know?</a></li> <li><a href="#MultipleRelays">I want to run more than one relay.</a></li> <li><a href="#NTService">How do I run my Tor relay as an NT service? @@ -2733,19 +2735,83 @@ lots How do I keep the same key?</a></h3> <p> - When upgrading your Tor relay, or running it on a different computer, - the important part is to keep the same identity key (stored in - "keys/secret_id_key" in your DataDirectory). +When upgrading your Tor relay, or moving it on a different computer, the +important part is to keep the same identity keys (stored in +"keys/ed25519_master_id_secret_key" and "keys/secret_id_key" in your +DataDirectory). Keeping backups of the identity keys so you can restore +a relay in the future is the recommended way to ensure the reputation of +the relay won't be wasted. </p> + <p> This means that if you're upgrading your Tor relay and you keep the same torrc and the same DataDirectory, then the upgrade should just work and your relay will keep using the same key. If you need to pick a new -DataDirectory, be sure to copy your old keys/secret_id_key over. +DataDirectory, be sure to copy your old +keys/ed25519_master_id_secret_key and keys/secret_id_key over. +</p> + +<p> +Note: As of Tor 0.2.7 we are using new generation identities for relays +based on ed25519 elliptic curve cryptography. Eventually they will +replace the old RSA identities, but that will happen in time, to ensure +compatibility with older versions. Until then, each relay will have both +an ed25519 identity (identity key file: +keys/ed25519_master_id_secret_key) and a RSA identity (identity key +file: keys/secret_id_key). You need to copy / backup both of them in +order to restore your relay, change your DataDirectory or migrate the +relay on a new computer. </p> + <hr> +<a id="OfflineED25519"></a> +<h3><a class="anchor" href="#OfflineED25519">How do offline ed25519 +identity keys work? What do I need to know?</a></h3> + +<p> +As of Tor 0.2.7 offline ed25519 identity keys are supported. In simple words, it works like this: +<ul> +<li>there is a master ed25519 identity secret key file named +"ed25519_master_id_secret_key". This is the most important one, so make +sure you keep a backup in a secure place - the file is sensitive and +should be protected. Tor could encrypt it for you if you generate it +manually and enter a password when asked.</li> + +<li>a medium term signing key named "ed25519_signing_secret_key" is +generated for Tor to use. Also, a certificate is generated named +"ed25519_signing_cert" which is signed by the master identity secret key +and confirms that the medium term signing key is valid for a certain +period of time. The default validity is 30 days, but this can be +customized by setting "SigningKeyLifetime N days|weeks|months" in +torrc.</li> +<li>there is also a master public key named +"ed25519_master_id_public_key, which is the actual identity of the relay +advertised in the network. This one is not sensitive and can be easily +computed from "ed5519_master_id_secret_key".</li> +</ul> +Tor will only need access to the medium term signing key and certificate +as long as they are valid, so the master identity secret key can be kept +outside DataDirectory/keys, on a storage media or a different computer. +You'll have to manually renew the medium term signing key and +certificate before they expire otherwise the Tor process on the relay +will exit upon expiration. +</p> + +<p> +This feature is optional, you don't need to use it unless you want to. +If you want your relay to run unattended for longer time without having +to manually do the medium term signing key renewal on regular basis, +best to leave the master identity secret key in DataDirectory/keys, just +make a backup in case you'll need to reinstall it. If you want to use +this feature, you can consult our <a +href="https://trac.torproject.org/projects/tor/wiki/doc/TorRelaySecurity/OfflineK…">more +detailed guide</a> on the topic. +</p> + +<hr> + <a id="NTService"></a> <h3><a class="anchor" href="#NTService">How do I run my Tor relay as an NT service?</a></h3>

1 0

[webwml/master] remove utopic from supported .deb versions
by sebastian＠torproject.org 27 Feb '16

27 Feb '16

commit e63a653aaf526dd0d23ebc149654a4f47a3d33d6 Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Sat Feb 27 07:36:28 2016 +0100 remove utopic from supported .deb versions --- docs/en/debian.wml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/docs/en/debian.wml b/docs/en/debian.wml index e1e7bcc..87c4fd6 100644 --- a/docs/en/debian.wml +++ b/docs/en/debian.wml @@ -20,7 +20,6 @@ var software = { 'precise': [ 'precise'], 'saucy': [ 'saucy'], 'trusty': [ 'trusty'], - 'utopic': [ 'utopic'] }, 'experimental-0.2.7.x': { 'wheezy': [ 'wheezy' ], 'jessie': [ 'jessie' ], 'stretch': [ 'stretch' ], @@ -29,7 +28,6 @@ var software = { 'precise': [ 'precise'], 'saucy': [ 'saucy'], 'trusty': [ 'trusty'], - 'utopic': [ 'utopic'] }, }, 'tor (from source)': { '_stable': { 'squeeze': [ 'squeeze' ], 'wheezy': [ 'wheezy' ], @@ -40,7 +38,6 @@ var software = { 'precise': [ 'precise'], 'saucy': [ 'saucy'], 'trusty': [ 'trusty'], - 'utopic': [ 'utopic'] }, 'experimental-0.2.7.x': { 'wheezy': [ 'wheezy' ], 'jessie': [ 'jessie' ], 'stretch': [ 'stretch' ], @@ -49,7 +46,6 @@ var software = { 'precise': [ 'precise'], 'saucy': [ 'saucy'], 'trusty': [ 'trusty'], - 'utopic': [ 'utopic'] }, }, }; @@ -238,7 +234,6 @@ I run <option value="precise">Ubuntu Precise Pangolin</option> <option value="saucy">Ubuntu Saucy Salamander</option> <option value="trusty">Ubuntu Trusty Tahr</option> -<option value="utopic">Ubuntu Utopic Unicorn</option> </select> and want <select id="package" onchange="update()"></select>

1 0

[translation/torbutton-brandproperties_completed] Update translations for torbutton-brandproperties_completed
by translation＠torproject.org 27 Feb '16

27 Feb '16

commit 2fcc8ef856cb092566f1f46ff8e7761543531663 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Feb 27 05:46:17 2016 +0000 Update translations for torbutton-brandproperties_completed --- zh_TW/brand.properties | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/zh_TW/brand.properties b/zh_TW/brand.properties index d8cb6c3..dfc06d7 100644 --- a/zh_TW/brand.properties +++ b/zh_TW/brand.properties @@ -2,10 +2,10 @@ # License, v. 2.0. If a copy of the MPL was not distributed with this # file, You can obtain one at http://mozilla.org/MPL/2.0/. -brandShorterName=Tor 瀏覽器 -brandShortName=Tor -brandFullName=Tor 瀏覽器 -vendorShortName=Tor +brandShorterName=洋蔥路由瀏覽器 +brandShortName=洋蔥路由瀏覽器 +brandFullName=洋蔥路由瀏覽器 +vendorShortName=Tor 計畫 homePageSingleStartMain=Firefox Start:包含內建搜尋的快速首頁 homePageImport=從 %S 匯入您的首頁

1 0

[translation/torbutton-brandproperties] Update translations for torbutton-brandproperties
by translation＠torproject.org 27 Feb '16

27 Feb '16

commit 7e6f7aec181b043a9da73970a7540ebad4a7edee Author: Translation commit bot <translation(a)torproject.org> Date: Sat Feb 27 05:46:12 2016 +0000 Update translations for torbutton-brandproperties --- zh_TW/brand.properties | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/zh_TW/brand.properties b/zh_TW/brand.properties index d8cb6c3..dfc06d7 100644 --- a/zh_TW/brand.properties +++ b/zh_TW/brand.properties @@ -2,10 +2,10 @@ # License, v. 2.0. If a copy of the MPL was not distributed with this # file, You can obtain one at http://mozilla.org/MPL/2.0/. -brandShorterName=Tor 瀏覽器 -brandShortName=Tor -brandFullName=Tor 瀏覽器 -vendorShortName=Tor +brandShorterName=洋蔥路由瀏覽器 +brandShortName=洋蔥路由瀏覽器 +brandFullName=洋蔥路由瀏覽器 +vendorShortName=Tor 計畫 homePageSingleStartMain=Firefox Start:包含內建搜尋的快速首頁 homePageImport=從 %S 匯入您的首頁

1 0

[translation/tor-launcher-network-settings_completed] Update translations for tor-launcher-network-settings_completed
by translation＠torproject.org 27 Feb '16

27 Feb '16

commit 5db600324a0c9093ca6def4a8102eedc8d7feb3e Author: Translation commit bot <translation(a)torproject.org> Date: Sat Feb 27 05:46:03 2016 +0000 Update translations for tor-launcher-network-settings_completed --- zh_TW/network-settings.dtd | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/zh_TW/network-settings.dtd b/zh_TW/network-settings.dtd index 6339a3a..59596fd 100644 --- a/zh_TW/network-settings.dtd +++ b/zh_TW/network-settings.dtd @@ -52,7 +52,7 @@ <!ENTITY torsettings.useProxy.type.socks4 "SOCKS 4"> <!ENTITY torsettings.useProxy.type.socks5 "SOCKS 5"> <!ENTITY torsettings.useProxy.type.http "HTTP / HTTPS"> -<!ENTITY torsettings.firewall.checkbox "這台電腦通過只允許連接至特定連線埠的防火牆"> +<!ENTITY torsettings.firewall.checkbox "這台電腦通過某個只允許連接至特定連線埠的防火牆"> <!ENTITY torsettings.firewall.allowedPorts "允許的連接埠："> <!ENTITY torsettings.useBridges.checkbox "我的網際網路服務提供者(ISP)會過濾阻擋連接至洋蔥路由的網路活動"> <!ENTITY torsettings.useBridges.default "使用提供的橋接器連線"> @@ -64,7 +64,7 @@ <!ENTITY torsettings.copyLog "將洋蔥路由的訊息記錄複製到剪貼簿"> <!ENTITY torsettings.bridgeHelpTitle "橋接中繼器之說明"> -<!ENTITY torsettings.bridgeHelp1 "若您無法連接到洋蔥路由網路，可能是因為您的網際網路服務提供者 (ISP) 或其它機構正在封鎖洋蔥路由網路。  通常您可以使用更難以被封鎖之橋接中繼器來連上洋蔥路由，以便解決此問題。"> +<!ENTITY torsettings.bridgeHelp1 "若您無法連接到洋蔥路由網路，可能是因為您的網際網路服務提供者 (ISP) 或其它機構正在封鎖洋蔥路由網路。  通常您可以使用橋接中繼器來連上洋蔥路由網路，以便解決此問題。該種中繼器是未被羅列於清單中的秘密中繼節點，非常難以被過濾阻擋。"> <!ENTITY torsettings.bridgeHelp1B "您可以使用預先設定好的橋接器位址，或您也可以使用下列三種方法的任一種以獲取一組自訂的位址："> <!ENTITY torsettings.bridgeHelp2Heading "透過網路"> <!ENTITY torsettings.bridgeHelp2 "使用網路瀏覽器造訪 https://bridges.torproject.org">

1 0

[translation/tor-launcher-network-settings] Update translations for tor-launcher-network-settings
by translation＠torproject.org 27 Feb '16

27 Feb '16

commit 61a99afe7577655c0a402155c86aae8a423dfd2a Author: Translation commit bot <translation(a)torproject.org> Date: Sat Feb 27 05:45:59 2016 +0000 Update translations for tor-launcher-network-settings --- zh_TW/network-settings.dtd | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/zh_TW/network-settings.dtd b/zh_TW/network-settings.dtd index 6339a3a..59596fd 100644 --- a/zh_TW/network-settings.dtd +++ b/zh_TW/network-settings.dtd @@ -52,7 +52,7 @@ <!ENTITY torsettings.useProxy.type.socks4 "SOCKS 4"> <!ENTITY torsettings.useProxy.type.socks5 "SOCKS 5"> <!ENTITY torsettings.useProxy.type.http "HTTP / HTTPS"> -<!ENTITY torsettings.firewall.checkbox "這台電腦通過只允許連接至特定連線埠的防火牆"> +<!ENTITY torsettings.firewall.checkbox "這台電腦通過某個只允許連接至特定連線埠的防火牆"> <!ENTITY torsettings.firewall.allowedPorts "允許的連接埠："> <!ENTITY torsettings.useBridges.checkbox "我的網際網路服務提供者(ISP)會過濾阻擋連接至洋蔥路由的網路活動"> <!ENTITY torsettings.useBridges.default "使用提供的橋接器連線"> @@ -64,7 +64,7 @@ <!ENTITY torsettings.copyLog "將洋蔥路由的訊息記錄複製到剪貼簿"> <!ENTITY torsettings.bridgeHelpTitle "橋接中繼器之說明"> -<!ENTITY torsettings.bridgeHelp1 "若您無法連接到洋蔥路由網路，可能是因為您的網際網路服務提供者 (ISP) 或其它機構正在封鎖洋蔥路由網路。  通常您可以使用更難以被封鎖之橋接中繼器來連上洋蔥路由，以便解決此問題。"> +<!ENTITY torsettings.bridgeHelp1 "若您無法連接到洋蔥路由網路，可能是因為您的網際網路服務提供者 (ISP) 或其它機構正在封鎖洋蔥路由網路。  通常您可以使用橋接中繼器來連上洋蔥路由網路，以便解決此問題。該種中繼器是未被羅列於清單中的秘密中繼節點，非常難以被過濾阻擋。"> <!ENTITY torsettings.bridgeHelp1B "您可以使用預先設定好的橋接器位址，或您也可以使用下列三種方法的任一種以獲取一組自訂的位址："> <!ENTITY torsettings.bridgeHelp2Heading "透過網路"> <!ENTITY torsettings.bridgeHelp2 "使用網路瀏覽器造訪 https://bridges.torproject.org">

1 0