August 2016 - tor-commits - lists.torproject.org

[tor/release-0.2.8] Fold the last (I hope) two changes into the changelog
by nickm＠torproject.org 24 Aug '16

24 Aug '16

commit 619507a029e5c5bfdb353130451ae22a9cb423d8 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 24 10:50:47 2016 -0400 Fold the last (I hope) two changes into the changelog --- ChangeLog | 18 +++++++++++++++--- changes/bug19728 | 3 --- changes/bug19973 | 6 ------ 3 files changed, 15 insertions(+), 12 deletions(-) diff --git a/ChangeLog b/ChangeLog index 2151173..9c80344 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,7 +1,15 @@ Changes in version 0.2.8.7 - 2016-08-2? - Tor 0.2.8.7 fixes a few bugs still present in 0.2.8.6, and replaces a - retiring bridge authority. All bridges and bridge users are strongly - encouraged to upgrade. + Tor 0.2.8.7 fixes an important bug related to the ReachableAddresses + option in 0.2.8.6, and replaces a retiring bridge authority. Everyone + who sets the ReachableAddresses option, all bridges, and all bridge + users are strongly encouraged to upgrade. + + o Major bugfixes (client, security): + - Only use the ReachableAddresses option to restrict the first hop + in a path. Previously, it would apply to every hop in the path, + with a possible degredation in anonymity for anyone using an + uncommon ReachableAddress setting. Fixes bug 19973; bugfix + on 0.2.8.2-alpha. o Minor features (geoip): - Update geoip and geoip6 to the August 2 2016 Maxmind GeoLite2 @@ -17,6 +25,10 @@ Changes in version 0.2.8.7 - 2016-08-2? directory information. Fixes bug 19947; bugfix on 0.2.4.7-alpha and 0.2.8.1-alpha. Report and patch by "rubiate". + o Directory authority changes: + - The "Tonga" bridge authority has been retired; the new bridge + authority is "Bifroest". Closes tickets 19728 and 19690. + Changes in version 0.2.8.6 - 2016-08-02 diff --git a/changes/bug19728 b/changes/bug19728 deleted file mode 100644 index 98ba342..0000000 --- a/changes/bug19728 +++ /dev/null @@ -1,3 +0,0 @@ - o Directory authority changes: - - The "Tonga" bridge authority has been retired; the new bridge - authority is "Bifroest". Closes tickets 19728 and 19690. diff --git a/changes/bug19973 b/changes/bug19973 deleted file mode 100644 index 7bd5c55..0000000 --- a/changes/bug19973 +++ /dev/null @@ -1,6 +0,0 @@ - o Major bugfixes (client, security): - - Only use the ReachableAddresses option to restrict the first hop - in a path. Previously, it would apply to every hop in the path, - with a possible degredation in anonymity for anyone using an - uncommon ReachableAddress setting. Fixes bug 19973; bugfix on - 0.2.8.2-alpha.

1 0

[tor/release-0.2.8] missed one
by nickm＠torproject.org 24 Aug '16

24 Aug '16

commit 46e2c15e2fe5b8c7963bee0e651003b03603b1df Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 24 10:56:39 2016 -0400 missed one --- ChangeLog | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 9c80344..1da6396 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,9 +1,13 @@ -Changes in version 0.2.8.7 - 2016-08-2? +Changes in version 0.2.8.7 - 2016-08-24 Tor 0.2.8.7 fixes an important bug related to the ReachableAddresses option in 0.2.8.6, and replaces a retiring bridge authority. Everyone who sets the ReachableAddresses option, all bridges, and all bridge users are strongly encouraged to upgrade. + o Directory authority changes: + - The "Tonga" bridge authority has been retired; the new bridge + authority is "Bifroest". Closes tickets 19728 and 19690. + o Major bugfixes (client, security): - Only use the ReachableAddresses option to restrict the first hop in a path. Previously, it would apply to every hop in the path,

1 0

[tor/release-0.2.8] Bump to 0.2.8.7
by nickm＠torproject.org 24 Aug '16

24 Aug '16

commit 57ba7ab39a31e48b4a865a7e207237474f561905 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 24 11:01:57 2016 -0400 Bump to 0.2.8.7 --- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configure.ac b/configure.ac index 4658b3a..6918868 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2015, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.2.8.6-dev]) +AC_INIT([tor],[0.2.8.7]) AC_CONFIG_SRCDIR([src/or/main.c]) AC_CONFIG_MACRO_DIR([m4]) diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index e146694..a603975 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.2.8.6-dev" +!define VERSION "0.2.8.7" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index af4cba2..d13e33c 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -229,7 +229,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.2.8.6-dev" +#define VERSION "0.2.8.7"

1 0

[tor/release-0.2.8] Merge branch 'maint-0.2.8' into release-0.2.8
by nickm＠torproject.org 24 Aug '16

24 Aug '16

commit 82957bf91ae6326b82fb3bb5ce8107f64c2d41ae Merge: 46e2c15 57ba7ab Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 24 11:02:17 2016 -0400 Merge branch 'maint-0.2.8' into release-0.2.8 configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)

1 0

[tor/master] Bump to 0.2.8.7
by nickm＠torproject.org 24 Aug '16

24 Aug '16

commit 57ba7ab39a31e48b4a865a7e207237474f561905 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 24 11:01:57 2016 -0400 Bump to 0.2.8.7 --- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configure.ac b/configure.ac index 4658b3a..6918868 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2015, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.2.8.6-dev]) +AC_INIT([tor],[0.2.8.7]) AC_CONFIG_SRCDIR([src/or/main.c]) AC_CONFIG_MACRO_DIR([m4]) diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index e146694..a603975 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.2.8.6-dev" +!define VERSION "0.2.8.7" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index af4cba2..d13e33c 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -229,7 +229,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.2.8.6-dev" +#define VERSION "0.2.8.7"

1 0

[tor/master] Bump to 0.2.9.2-alpha
by nickm＠torproject.org 24 Aug '16

24 Aug '16

commit e2ede7c9d5944c87eb4022eae0090cdfac2202b9 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 24 11:01:33 2016 -0400 Bump to 0.2.9.2-alpha --- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configure.ac b/configure.ac index 42cbfd0..19276ea 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2015, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.2.9.1-alpha-dev]) +AC_INIT([tor],[0.2.9.2-alpha]) AC_CONFIG_SRCDIR([src/or/main.c]) AC_CONFIG_MACRO_DIR([m4]) diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index 81ff86c..543a834 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.2.9.1-alpha-dev" +!define VERSION "0.2.9.2-alpha" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index 4b4b3c5..fb5343c 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -218,7 +218,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.2.9.1-alpha-dev" +#define VERSION "0.2.9.2-alpha"

1 0

[tor/maint-0.2.8] Bump to 0.2.8.7
by nickm＠torproject.org 24 Aug '16

24 Aug '16

commit 57ba7ab39a31e48b4a865a7e207237474f561905 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 24 11:01:57 2016 -0400 Bump to 0.2.8.7 --- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configure.ac b/configure.ac index 4658b3a..6918868 100644 --- a/configure.ac +++ b/configure.ac @@ -4,7 +4,7 @@ dnl Copyright (c) 2007-2015, The Tor Project, Inc. dnl See LICENSE for licensing information AC_PREREQ([2.63]) -AC_INIT([tor],[0.2.8.6-dev]) +AC_INIT([tor],[0.2.8.7]) AC_CONFIG_SRCDIR([src/or/main.c]) AC_CONFIG_MACRO_DIR([m4]) diff --git a/contrib/win32build/tor-mingw.nsi.in b/contrib/win32build/tor-mingw.nsi.in index e146694..a603975 100644 --- a/contrib/win32build/tor-mingw.nsi.in +++ b/contrib/win32build/tor-mingw.nsi.in @@ -8,7 +8,7 @@ !include "LogicLib.nsh" !include "FileFunc.nsh" !insertmacro GetParameters -!define VERSION "0.2.8.6-dev" +!define VERSION "0.2.8.7" !define INSTALLER "tor-${VERSION}-win32.exe" !define WEBSITE "https://www.torproject.org/" !define LICENSE "LICENSE" diff --git a/src/win32/orconfig.h b/src/win32/orconfig.h index af4cba2..d13e33c 100644 --- a/src/win32/orconfig.h +++ b/src/win32/orconfig.h @@ -229,7 +229,7 @@ #define USING_TWOS_COMPLEMENT /* Version number of package */ -#define VERSION "0.2.8.6-dev" +#define VERSION "0.2.8.7"

1 0

[tor/master] Add last two entries (I hope) to 0292-alpha changelog
by nickm＠torproject.org 24 Aug '16

24 Aug '16

commit 93731d6e37ca3e66c66204e187ce932ba1219e80 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 24 10:57:47 2016 -0400 Add last two entries (I hope) to 0292-alpha changelog --- ChangeLog | 19 +++++++++++++++++-- changes/bug19728 | 3 --- changes/bug19973 | 6 ------ 3 files changed, 17 insertions(+), 11 deletions(-) diff --git a/ChangeLog b/ChangeLog index 3f20d0a..63f8817 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,20 @@ -Changes in version 0.2.9.2-alpha - 2016-08-2? - Tor 0.2.9.2-alpha XXXX BLURB HERE. +Changes in version 0.2.9.2-alpha - 2016-08-24 + Tor 0.2.9.2-alpha continues development of the 0.2.9 series with + several new features and bugfixes. It also includes an important + authority update and an important bugfix from 0.2.8.7. Everyone who + sets the ReachableAddresses option, all bridges, and all bridge users + are strongly encouraged to upgrade to 0.2.8.7, or to 0.2.9.2-alpha. + + o Directory authority changes (also in 0.2.8.7): + - The "Tonga" bridge authority has been retired; the new bridge + authority is "Bifroest". Closes tickets 19728 and 19690. + + o Major bugfixes (client, security, also in 0.2.8.7): + - Only use the ReachableAddresses option to restrict the first hop + in a path. Previously, it would apply to every hop in the path, + with a possible degredation in anonymity for anyone using an + uncommon ReachableAddress setting. Fixes bug 19973; bugfix + on 0.2.8.2-alpha. o Major features (user interface): - Tor now supports the ability to declare options deprecated, so diff --git a/changes/bug19728 b/changes/bug19728 deleted file mode 100644 index 98ba342..0000000 --- a/changes/bug19728 +++ /dev/null @@ -1,3 +0,0 @@ - o Directory authority changes: - - The "Tonga" bridge authority has been retired; the new bridge - authority is "Bifroest". Closes tickets 19728 and 19690. diff --git a/changes/bug19973 b/changes/bug19973 deleted file mode 100644 index 7bd5c55..0000000 --- a/changes/bug19973 +++ /dev/null @@ -1,6 +0,0 @@ - o Major bugfixes (client, security): - - Only use the ReachableAddresses option to restrict the first hop - in a path. Previously, it would apply to every hop in the path, - with a possible degredation in anonymity for anyone using an - uncommon ReachableAddress setting. Fixes bug 19973; bugfix on - 0.2.8.2-alpha.

1 0

[tor/master] Merge branch 'maint-0.2.8'
by nickm＠torproject.org 24 Aug '16

24 Aug '16

commit 7d410a6b0d462e0838c5fca2eec089693104a514 Merge: e2ede7c 57ba7ab Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Aug 24 11:02:10 2016 -0400 Merge branch 'maint-0.2.8'

1 0

[tor/maint-0.2.8] Fix path selection on firewalled clients
by nickm＠torproject.org 24 Aug '16

24 Aug '16

commit b1ad024d3002e9d8581b6b96c892e5988d9e759b Author: teor <teor2345(a)gmail.com> Date: Thu Aug 18 12:02:33 2016 +1000 Fix path selection on firewalled clients Signed-off-by: teor <teor2345(a)gmail.com> --- src/or/circuitbuild.c | 9 +++++++-- src/or/or.h | 5 ++++- src/or/routerlist.c | 14 ++++++++------ src/or/routerlist.h | 2 +- 4 files changed, 20 insertions(+), 10 deletions(-) diff --git a/src/or/circuitbuild.c b/src/or/circuitbuild.c index 820724a..28d286c 100644 --- a/src/or/circuitbuild.c +++ b/src/or/circuitbuild.c @@ -1777,6 +1777,8 @@ pick_tor2web_rendezvous_node(router_crn_flags_t flags, const node_t *rp_node = NULL; const int allow_invalid = (flags & CRN_ALLOW_INVALID) != 0; const int need_desc = (flags & CRN_NEED_DESC) != 0; + const int pref_addr = (flags & CRN_PREF_ADDR) != 0; + const int direct_conn = (flags & CRN_DIRECT_CONN) != 0; smartlist_t *whitelisted_live_rps = smartlist_new(); smartlist_t *all_live_nodes = smartlist_new(); @@ -1787,7 +1789,9 @@ pick_tor2web_rendezvous_node(router_crn_flags_t flags, router_add_running_nodes_to_smartlist(all_live_nodes, allow_invalid, 0, 0, 0, - need_desc, 0); + need_desc, + pref_addr, + direct_conn); /* Filter all_live_nodes to only add live *and* whitelisted RPs to * the list whitelisted_live_rps. */ @@ -2155,7 +2159,8 @@ choose_good_entry_server(uint8_t purpose, cpath_build_state_t *state) const or_options_t *options = get_options(); /* If possible, choose an entry server with a preferred address, * otherwise, choose one with an allowed address */ - router_crn_flags_t flags = CRN_NEED_GUARD|CRN_NEED_DESC|CRN_PREF_ADDR; + router_crn_flags_t flags = (CRN_NEED_GUARD|CRN_NEED_DESC|CRN_PREF_ADDR| + CRN_DIRECT_CONN); const node_t *node; if (state && options->UseEntryGuards && diff --git a/src/or/or.h b/src/or/or.h index 2252f38..da84128 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -5255,7 +5255,10 @@ typedef enum { CRN_WEIGHT_AS_EXIT = 1<<5, CRN_NEED_DESC = 1<<6, /* On clients, only provide nodes that satisfy ClientPreferIPv6OR */ - CRN_PREF_ADDR = 1<<7 + CRN_PREF_ADDR = 1<<7, + /* On clients, only provide nodes that we can connect to directly, based on + * our firewall rules */ + CRN_DIRECT_CONN = 1<<8 } router_crn_flags_t; /** Return value for router_add_to_routerlist() and dirserv_add_descriptor() */ diff --git a/src/or/routerlist.c b/src/or/routerlist.c index c358872..64baf4d 100644 --- a/src/or/routerlist.c +++ b/src/or/routerlist.c @@ -2017,7 +2017,7 @@ void router_add_running_nodes_to_smartlist(smartlist_t *sl, int allow_invalid, int need_uptime, int need_capacity, int need_guard, int need_desc, - int pref_addr) + int pref_addr, int direct_conn) { const int check_reach = !router_skip_or_reachability(get_options(), pref_addr); @@ -2032,10 +2032,10 @@ router_add_running_nodes_to_smartlist(smartlist_t *sl, int allow_invalid, continue; if (node_is_unreliable(node, need_uptime, need_capacity, need_guard)) continue; - /* Choose a node with an OR address that matches the firewall rules */ - if (check_reach && !fascist_firewall_allows_node(node, - FIREWALL_OR_CONNECTION, - pref_addr)) + /* Choose a node with an OR address that matches the firewall rules, + * if we are making a direct connection */ + if (direct_conn && check_reach && + !fascist_firewall_allows_node(node, FIREWALL_OR_CONNECTION, pref_addr)) continue; smartlist_add(sl, (void *)node); @@ -2515,6 +2515,7 @@ router_choose_random_node(smartlist_t *excludedsmartlist, const int weight_for_exit = (flags & CRN_WEIGHT_AS_EXIT) != 0; const int need_desc = (flags & CRN_NEED_DESC) != 0; const int pref_addr = (flags & CRN_PREF_ADDR) != 0; + const int direct_conn = (flags & CRN_DIRECT_CONN) != 0; smartlist_t *sl=smartlist_new(), *excludednodes=smartlist_new(); @@ -2540,7 +2541,8 @@ router_choose_random_node(smartlist_t *excludedsmartlist, router_add_running_nodes_to_smartlist(sl, allow_invalid, need_uptime, need_capacity, - need_guard, need_desc, pref_addr); + need_guard, need_desc, pref_addr, + direct_conn); log_debug(LD_CIRC, "We found %d running nodes.", smartlist_len(sl)); diff --git a/src/or/routerlist.h b/src/or/routerlist.h index 67cc253..cb5b42a 100644 --- a/src/or/routerlist.h +++ b/src/or/routerlist.h @@ -62,7 +62,7 @@ int routers_have_same_or_addrs(const routerinfo_t *r1, const routerinfo_t *r2); void router_add_running_nodes_to_smartlist(smartlist_t *sl, int allow_invalid, int need_uptime, int need_capacity, int need_guard, int need_desc, - int pref_addr); + int pref_addr, int direct_conn); const routerinfo_t *routerlist_find_my_routerinfo(void); uint32_t router_get_advertised_bandwidth(const routerinfo_t *router);

1 0