October 2017 - tor-commits - lists.torproject.org

[tor/master] Bump version to 0.3.2.2-alpha.
by nickm＠torproject.org 02 Oct '17

02 Oct '17

commit c61508f9aaf2b7c080f97a98c54386a0751124ca Author: Alexander Færøy <ahf(a)torproject.org> Date: Mon Oct 2 21:05:27 2017 +0200 Bump version to 0.3.2.2-alpha. Signed-off-by: Isis Lovecruft <isis(a)torproject.org> --- configure.ac | 2 +- contrib/win32build/tor-mingw.nsi.in | 2 +- src/win32/orconfig.h | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configure.ac b/configure.ac index d2682944f..9d034e45c … [View More]

1 0

[tor/master] Remove changes files integrated for 0.3.2.2-alpha.
by nickm＠torproject.org 02 Oct '17

02 Oct '17

commit c816bbd2290e1d284bdcd73df42af012935c4bdc Author: Isis Lovecruft <isis(a)torproject.org> Date: Mon Oct 2 17:49:56 2017 +0000 Remove changes files integrated for 0.3.2.2-alpha. --- changes/18736 | 3 --- changes/8185_diagnostic | 4 ---- changes/bug21800 | 4 ---- changes/bug22109 | 3 --- changes/bug22805 | 10 ---------- changes/bug23080 | 5 ----- changes/bug23159 | 5 … [View More]----- changes/bug23537 | 4 ---- changes/bug23539 | 4 ---- changes/bug23551 | 3 --- changes/bug23552 | 3 --- changes/bug23566 | 4 ---- changes/bug23568 | 4 ---- changes/bug23575 | 4 ---- changes/bug23580 | 3 --- changes/bug23581 | 4 ---- changes/bug23606 | 4 ---- changes/bug23607 | 4 ---- changes/bug23608 | 4 ---- changes/bug23610 | 5 ----- changes/bug23611 | 4 ---- changes/bug23645 | 3 --- changes/bug23676 | 6 ------ changes/bug23690 | 5 ----- changes/bug23690_additional_032 | 4 ---- changes/bug23696 | 3 --- changes/bug8185_025 | 6 ------ changes/longclaw-ipv6 | 6 ------ changes/ticket18891 | 3 --- changes/ticket19704 | 5 ----- changes/ticket21405 | 3 --- changes/ticket23420 | 4 ---- changes/ticket23564 | 4 ---- changes/ticket23602 | 6 ------ changes/ticket23604 | 5 ----- changes/ticket23643 | 6 ------ 36 files changed, 157 deletions(-) diff --git a/changes/18736 b/changes/18736 deleted file mode 100644 index 9cd48eb3a..000000000 --- a/changes/18736 +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation: - - Document that onion service subdomains are allowed, and ignored. - Closes ticket 18736. diff --git a/changes/8185_diagnostic b/changes/8185_diagnostic deleted file mode 100644 index 5e4cb1f8c..000000000 --- a/changes/8185_diagnostic +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (logging diagnostic): - - Log more circuit information whenever we are about to try to - package a relay cell on a circuit with a nonexistent n_chan. - Attempt to diagnose ticket 8185. diff --git a/changes/bug21800 b/changes/bug21800 deleted file mode 100644 index 53c20c0fa..000000000 --- a/changes/bug21800 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (testing): - - Capture and detect several "Result does not fit" warnings - in unit tests on platforms with 32-bit time_t. Fixes bug 21800; - bugfix on 0.2.9.3-alpha. diff --git a/changes/bug22109 b/changes/bug22109 deleted file mode 100644 index 51eb49ebf..000000000 --- a/changes/bug22109 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (tests): - - Add a unit test to make sure that our own generated platform string - will be accepted by directory authorities. Closes ticket 22109. diff --git a/changes/bug22805 b/changes/bug22805 deleted file mode 100644 index 2b0369da3..000000000 --- a/changes/bug22805 +++ /dev/null @@ -1,10 +0,0 @@ - o Minor features (relay): - - When choosing which circuits can be expired as unused, consider - circuits from clients even if those clients used regular CREATE - cells to make them; and do not consider circuits from relays even if - they were made with CREATE_FAST. Part of ticket 22805. - - o Code simplification and refactoring: - - Remove various ways of testing circuits and connections for - "clientness"; instead, favor channel_is_client(). - Part of ticket 22805. diff --git a/changes/bug23080 b/changes/bug23080 deleted file mode 100644 index c80d323d3..000000000 --- a/changes/bug23080 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (spec conformance, bridge, diagnostic): - - When handling the USERADDR command on an ExtOrPort, warn when the - transports provides a USERADDR with no port. In a future version, - USERADDR commands of this format may be rejected. Detects problems - related to ticket 23080. diff --git a/changes/bug23159 b/changes/bug23159 deleted file mode 100644 index 68bfa0d46..000000000 --- a/changes/bug23159 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (hidden service v3): - - Don't log an assertion failure when we can't find the right information - to extend to an introduction point. In rare cases, this could happen, - causing a warning, even though tor would recover gracefully. - Fixes bug 23159; bugfix on 0.3.2.1-alpha. diff --git a/changes/bug23537 b/changes/bug23537 deleted file mode 100644 index 93072a3b4..000000000 --- a/changes/bug23537 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (scheduler): - - When switching schedulers due to a consensus change, we didn't give the new - scheduler a chance to react to the consensus. Fix that. Fixes bug 23537; - bugfix on 0.3.2.1-alpha diff --git a/changes/bug23539 b/changes/bug23539 deleted file mode 100644 index b3f6d3b45..000000000 --- a/changes/bug23539 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (scheduler, KIST): - - Make the KISTSchedRunInterval option a non negative value. With this, - the way to disable KIST through the consensus is to set it to 0. - Fixes bug 23539; bugfix on 0.3.2.1-alpha. diff --git a/changes/bug23551 b/changes/bug23551 deleted file mode 100644 index 2f918bfa3..000000000 --- a/changes/bug23551 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (compression): - - Handle a pathological case when decompressing Zstandard data when the - output buffer size is zero. Fixes bug 23551; bugfix on 0.3.1.1-alpha. diff --git a/changes/bug23552 b/changes/bug23552 deleted file mode 100644 index 4a4e9b47b..000000000 --- a/changes/bug23552 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (scheduler): - - Only notice log the selected scheduler when we switch scheduler types. - Fixes bug 23552; bugfix on 0.3.2.1-alpha. diff --git a/changes/bug23566 b/changes/bug23566 deleted file mode 100644 index 5cedcb72d..000000000 --- a/changes/bug23566 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (tests): - - The removal of some old scheduler options caused some tests to fail on - BSD systems. Assume current behavior is correct and make the tests pass - again. Fixes bug 23566; bugfix on 0.3.2.1-alpha. diff --git a/changes/bug23568 b/changes/bug23568 deleted file mode 100644 index cac465568..000000000 --- a/changes/bug23568 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (compilation): - - Fix a compilation warning when building with zstd support - on 32-bit platforms. Fixes bug 23568; bugfix on 0.3.1.1-alpha. - Found and fixed by Andreas Stieger. diff --git a/changes/bug23575 b/changes/bug23575 deleted file mode 100644 index f4fcb1ac4..000000000 --- a/changes/bug23575 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (scheduler): - - Avoid a compilation warning on macOS in scheduler_ev_add() caused by - a different tv_usec data type. - Fixes bug 23575; bugfix on 0.3.2.1-alpha. diff --git a/changes/bug23580 b/changes/bug23580 deleted file mode 100644 index 45c825fb6..000000000 --- a/changes/bug23580 +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation (hidden service, man page): - - HiddenServiceVersion man page entry wasn't mentionning the now supported - version 3. Fixes ticket 23580.; bugfix on 0.3.2.1-alpha. diff --git a/changes/bug23581 b/changes/bug23581 deleted file mode 100644 index 2599b4076..000000000 --- a/changes/bug23581 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (scheduler): - - Make a hard exit if tor is unable to pick a scheduler which can happen - if the user specifies a scheduler type that is not supported and not - other types in Schedulers. Fixes bug 23581; bugfix on 0.3.2.1-alpha. diff --git a/changes/bug23606 b/changes/bug23606 deleted file mode 100644 index 77f4d0cb9..000000000 --- a/changes/bug23606 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (bootstrapping): - - When warning about state file clock skew, report the correct - direction for the detected skew. Fixes bug 23606; bugfix on - 0.2.8.1-alpha. diff --git a/changes/bug23607 b/changes/bug23607 deleted file mode 100644 index 7aa48a94c..000000000 --- a/changes/bug23607 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (bootstrapping): - - Avoid an assertion failure when logging a state file clock skew - very early in bootstrapping. Fixes bug 23607; bugfix on - 0.3.2.1-alpha. diff --git a/changes/bug23608 b/changes/bug23608 deleted file mode 100644 index 16cf88aa3..000000000 --- a/changes/bug23608 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (unit tests): - - Fix additional channelpadding unit test failures by using mocked time - instead of actual time for all tests. Fixes bug 23608; - bugfix on 0.3.1.1-alpha. diff --git a/changes/bug23610 b/changes/bug23610 deleted file mode 100644 index 271bf2b45..000000000 --- a/changes/bug23610 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes (hidden service, relay): - - Avoid a possible double close of a circuit by the intro point on error - of sending the INTRO_ESTABLISHED cell. Fixes bug 23610; bugfix on - 0.3.0.1-alpha. - diff --git a/changes/bug23611 b/changes/bug23611 deleted file mode 100644 index f47e56200..000000000 --- a/changes/bug23611 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (documentation): - - Fix manpage to not refer to the obsolete (and misspelled) - UseEntryGuardsAsDirectoryGuards parameter in the description of - NumDirectoryGuards. Fixes bug 23611; bugfix on 0.2.4.8-alpha. diff --git a/changes/bug23645 b/changes/bug23645 deleted file mode 100644 index 56198265b..000000000 --- a/changes/bug23645 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (logging): - - Improve info-level log identification of particular circuits, - to help with debugging. Closes ticket 23645. diff --git a/changes/bug23676 b/changes/bug23676 deleted file mode 100644 index 90f9e3180..000000000 --- a/changes/bug23676 +++ /dev/null @@ -1,6 +0,0 @@ - o Major bugfixes (scheduler): - If a channel is put into the scheduler's pending list, then it starts - closing, and then if the scheduler runs before it finishes closing, the - scheduler will get stuck trying to flush its cells while the lower layers - refuse to cooperate. Fix that race condition by given the scheduler an - escape method. Fixes bug 23676; bugfix on 0.3.2.1-alpha diff --git a/changes/bug23690 b/changes/bug23690 deleted file mode 100644 index 36ff32e49..000000000 --- a/changes/bug23690 +++ /dev/null @@ -1,5 +0,0 @@ - o Major bugfixes (relay, crash, assertion failure): - - Fix a timing-based assertion failure that could occur when the - circuit out-of-memory handler freed a connection's output buffer. - Fixes bug 23690; bugfix on 0.2.6.1-alpha. - diff --git a/changes/bug23690_additional_032 b/changes/bug23690_additional_032 deleted file mode 100644 index 218917dca..000000000 --- a/changes/bug23690_additional_032 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (robustness): - - Change several fatal assertions when flushing buffers into - non-fatal assertions, to prevent any recurrence of 23690. - diff --git a/changes/bug23696 b/changes/bug23696 deleted file mode 100644 index d447815c8..000000000 --- a/changes/bug23696 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes (scheduler, kist): - - Properly initialize the scheduler last run time counter so it is not 0 - at the first tick. Fixes bug 23696; bugfix on 0.3.2.1-alpha. diff --git a/changes/bug8185_025 b/changes/bug8185_025 deleted file mode 100644 index 1bfc12b1e..000000000 --- a/changes/bug8185_025 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (logging, relay shutdown, annoyance): - - When a circuit is marked for close, do not attempt to package any cells - for channels on that circuit. Previously, we would detect this - condition lower in the call stack, when we noticed that the circuit had - no attached channel, and log an annoying message. Fixes bug 8185; - bugfix on 0.2.5.4-alpha. diff --git a/changes/longclaw-ipv6 b/changes/longclaw-ipv6 deleted file mode 100644 index 75899c9d0..000000000 --- a/changes/longclaw-ipv6 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (directory authorities): - - Remove longclaw's IPv6 address, as it will soon change. - Authority IPv6 addresses were originally added in 0.2.8.1-alpha. - This leaves 3/8 directory authorities with IPv6 addresses, but there - are also 52 fallback directory mirrors with IPv6 addresses. - Resolves 19760. diff --git a/changes/ticket18891 b/changes/ticket18891 deleted file mode 100644 index 34fd1cb8c..000000000 --- a/changes/ticket18891 +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation: - - Clarify that the Address option is entirely about setting an - advertised IPv4 address. Closes ticket 18891. diff --git a/changes/ticket19704 b/changes/ticket19704 deleted file mode 100644 index b05f6abcb..000000000 --- a/changes/ticket19704 +++ /dev/null @@ -1,5 +0,0 @@ - o Deprecated features: - - The ReachableDirAddresses and ClientPreferIPv6DirPort options - are now deprecated; they do not apply to relays, and they - have had no effect on clients since 0.2.8.x. Closes ticket 19704. - diff --git a/changes/ticket21405 b/changes/ticket21405 deleted file mode 100644 index 84dd161d9..000000000 --- a/changes/ticket21405 +++ /dev/null @@ -1,3 +0,0 @@ - o Documentation: - - Clarify the manpage's use of the term "address" to clarify what kind of - address is intended. Closes ticket 21405. diff --git a/changes/ticket23420 b/changes/ticket23420 deleted file mode 100644 index 8b976cdaa..000000000 --- a/changes/ticket23420 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes (hidden service v3): - - Pad RENDEZVOUS cell up to the size of the legacy cell which is much - bigger so the rendezvous point can't distinguish which hidden service - protocol is being used. Fixes bug 23420; bugfix on 0.3.2.1-alpha. diff --git a/changes/ticket23564 b/changes/ticket23564 deleted file mode 100644 index c493caf35..000000000 --- a/changes/ticket23564 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor features (build): - - The "check-changes" feature is now part of the "make check" - tests; we'll use it to try to prevent misformed changes files - from accumulating. Closes ticket 23564. diff --git a/changes/ticket23602 b/changes/ticket23602 deleted file mode 100644 index c741f2b6d..000000000 --- a/changes/ticket23602 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes (build): - - When searching for OpenSSL, don't accept any OpenSSL library that lacks - TLSv1_1_method(): Tor doesn't build with those versions. Additionally, - look in /usr/local/opt/openssl, if it's present. These changes - together repair the default build on OSX systems with Homebrew - installed. Fixes bug 23602; bugfix on 0.2.7.2-alpha. diff --git a/changes/ticket23604 b/changes/ticket23604 deleted file mode 100644 index eae8a48d2..000000000 --- a/changes/ticket23604 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features (hidden service, circuit, logging): - - Improve logging of many callsite in the circuit subsystem to print the - circuit identifier(s). - - Log when we cleanup an intro point from a service so we know when and - for what reason it happened. Closes ticket 23604. diff --git a/changes/ticket23643 b/changes/ticket23643 deleted file mode 100644 index b2edbef91..000000000 --- a/changes/ticket23643 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor features (compilation, testing): - - Tor builds should now fail if there are any mismatches between the C - type representing a configuration variable and the C type the - data-driven parser uses to store a value there. Previously, we needed - to check these by hand, which sometimes led to mistakes. Closes ticket - 23643. [View Less]

1 0

[tor/master] ChangeLog additions for 0.3.2.2-alpha.
by nickm＠torproject.org 02 Oct '17

02 Oct '17

commit 8f6de47d705a3c5495671985f555c63323a1869a Author: Isis Lovecruft <isis(a)torproject.org> Date: Fri Sep 29 08:15:27 2017 +0000 ChangeLog additions for 0.3.2.2-alpha. --- ChangeLog | 178 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 178 insertions(+) diff --git a/ChangeLog b/ChangeLog index b8b72c514..c19747c6e 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,181 @@ +Changes in version 0.3.2.2-alpha - 2017-09-29 + Tor-0.3.2.2-alpha is the … [View More]second release in the 0.3.2 series. This + release fixes several minor bugs in the new scheduler and next- + generation onion services; both features were newly added in the 0.3.2 + series. Other fixes in this alpha include several fixes for non-fatal + tracebacks which would appear in logs. + + With the aim to stabilise the 0.3.2 series by 15 December 2017, this + alpha does not contain any substantial new features. Minor features + include better testing and logging. + + The following comprises the complete list of changes included + in tor-0.3.2.2-alpha: + + o Major bugfixes (relay, crash, assertion failure): + - Fix a timing-based assertion failure that could occur when the + circuit out-of-memory handler freed a connection's output buffer. + Fixes bug 23690; bugfix on 0.2.6.1-alpha. + + o Major bugfixes (scheduler): + - If a channel is put into the scheduler's pending list, then it + starts closing, and then if the scheduler runs before it finishes + closing, the scheduler will get stuck trying to flush its cells + while the lower layers refuse to cooperate. Fix that race + condition by given the scheduler an escape method. Fixes bug + 23676; bugfix on 0.3.2.1-alpha + + o Minor features (build, compilation): + - The "check-changes" feature is now part of the "make check" tests; + we'll use it to try to prevent misformed changes files from + accumulating. Closes ticket 23564. + - Tor builds should now fail if there are any mismatches between the + C type representing a configuration variable and the C type the + data-driven parser uses to store a value there. Previously, we + needed to check these by hand, which sometimes led to mistakes. + Closes ticket 23643. + + o Minor features (directory authorities): + - Remove longclaw's IPv6 address, as it will soon change. Authority + IPv6 addresses were originally added in 0.2.8.1-alpha. This leaves + 3/8 directory authorities with IPv6 addresses, but there are also + 52 fallback directory mirrors with IPv6 addresses. Resolves 19760. + + o Minor features (hidden service, circuit, logging): + - Improve logging of many callsite in the circuit subsystem to print + the circuit identifier(s). + - Log when we cleanup an intro point from a service so we know when + and for what reason it happened. Closes ticket 23604. + + o Minor features (logging): + - Log more circuit information whenever we are about to try to + package a relay cell on a circuit with a nonexistent n_chan. + Attempt to diagnose ticket 8185. + - Improve info-level log identification of particular circuits, to + help with debugging. Closes ticket 23645. + + o Minor features (relay): + - When choosing which circuits can be expired as unused, consider + circuits from clients even if those clients used regular CREATE + cells to make them; and do not consider circuits from relays even + if they were made with CREATE_FAST. Part of ticket 22805. + + o Minor features (robustness): + - Change several fatal assertions when flushing buffers into non- + fatal assertions, to prevent any recurrence of 23690. + + o Minor features (spec conformance, bridge, diagnostic): + - When handling the USERADDR command on an ExtOrPort, warn when the + transports provides a USERADDR with no port. In a future version, + USERADDR commands of this format may be rejected. Detects problems + related to ticket 23080. + + o Minor features (testing): + - Add a unit test to make sure that our own generated platform + string will be accepted by directory authorities. Closes + ticket 22109. + + o Minor bugfixes (bootstrapping): + - When warning about state file clock skew, report the correct + direction for the detected skew. Fixes bug 23606; bugfix + on 0.2.8.1-alpha. + - Avoid an assertion failure when logging a state file clock skew + very early in bootstrapping. Fixes bug 23607; bugfix + on 0.3.2.1-alpha. + + o Minor bugfixes (build, compilation): + - Fix a compilation warning when building with zstd support on + 32-bit platforms. Fixes bug 23568; bugfix on 0.3.1.1-alpha. Found + and fixed by Andreas Stieger. + - When searching for OpenSSL, don't accept any OpenSSL library that + lacks TLSv1_1_method(): Tor doesn't build with those versions. + Additionally, look in /usr/local/opt/openssl, if it's present. + These changes together repair the default build on OSX systems + with Homebrew installed. Fixes bug 23602; bugfix on 0.2.7.2-alpha. + + o Minor bugfixes (compression): + - Handle a pathological case when decompressing Zstandard data when + the output buffer size is zero. Fixes bug 23551; bugfix + on 0.3.1.1-alpha. + + o Minor bugfixes (documentation): + - Fix manpage to not refer to the obsolete (and misspelled) + UseEntryGuardsAsDirectoryGuards parameter in the description of + NumDirectoryGuards. Fixes bug 23611; bugfix on 0.2.4.8-alpha. + + o Minor bugfixes (hidden service v3): + - Don't log an assertion failure when we can't find the right + information to extend to an introduction point. In rare cases, + this could happen, causing a warning, even though tor would + recover gracefully. Fixes bug 23159; bugfix on 0.3.2.1-alpha. + - Pad RENDEZVOUS cell up to the size of the legacy cell which is + much bigger so the rendezvous point can't distinguish which hidden + service protocol is being used. Fixes bug 23420; bugfix + on 0.3.2.1-alpha. + + o Minor bugfixes (hidden service, relay): + - Avoid a possible double close of a circuit by the intro point on + error of sending the INTRO_ESTABLISHED cell. Fixes bug 23610; + bugfix on 0.3.0.1-alpha. + + o Minor bugfixes (logging, relay shutdown, annoyance): + - When a circuit is marked for close, do not attempt to package any + cells for channels on that circuit. Previously, we would detect + this condition lower in the call stack, when we noticed that the + circuit had no attached channel, and log an annoying message. + Fixes bug 8185; bugfix on 0.2.5.4-alpha. + + o Minor bugfixes (scheduler): + - When switching schedulers due to a consensus change, we didn't + give the new scheduler a chance to react to the consensus. Fix + that. Fixes bug 23537; bugfix on 0.3.2.1-alpha + - Make the KISTSchedRunInterval option a non negative value. With + this, the way to disable KIST through the consensus is to set it + to 0. Fixes bug 23539; bugfix on 0.3.2.1-alpha. + - Only notice log the selected scheduler when we switch scheduler + types. Fixes bug 23552; bugfix on 0.3.2.1-alpha. + - Avoid a compilation warning on macOS in scheduler_ev_add() caused + by a different tv_usec data type. Fixes bug 23575; bugfix + on 0.3.2.1-alpha. + - Make a hard exit if tor is unable to pick a scheduler which can + happen if the user specifies a scheduler type that is not + supported and not other types in Schedulers. Fixes bug 23581; + bugfix on 0.3.2.1-alpha. + - Properly initialize the scheduler last run time counter so it is + not 0 at the first tick. Fixes bug 23696; bugfix on 0.3.2.1-alpha. + + o Minor bugfixes (testing): + - Capture and detect several "Result does not fit" warnings in unit + tests on platforms with 32-bit time_t. Fixes bug 21800; bugfix + on 0.2.9.3-alpha. + - Fix additional channelpadding unit test failures by using mocked + time instead of actual time for all tests. Fixes bug 23608; bugfix + on 0.3.1.1-alpha. + - The removal of some old scheduler options caused some tests to + fail on BSD systems. Assume current behavior is correct and make + the tests pass again. Fixes bug 23566; bugfix on 0.3.2.1-alpha. + + o Code simplification and refactoring: + - Remove various ways of testing circuits and connections for + "clientness"; instead, favor channel_is_client(). Part of + ticket 22805. + + o Deprecated features: + - The ReachableDirAddresses and ClientPreferIPv6DirPort options are + now deprecated; they do not apply to relays, and they have had no + effect on clients since 0.2.8.x. Closes ticket 19704. + + o Documentation: + - HiddenServiceVersion man page entry wasn't mentioning the now + supported version 3. Fixes ticket 23580; bugfix on 0.3.2.1-alpha. + - Clarify that the Address option is entirely about setting an + advertised IPv4 address. Closes ticket 18891. + - Clarify the manpage's use of the term "address" to clarify what + kind of address is intended. Closes ticket 21405. + - Document that onion service subdomains are allowed, and ignored. + Closes ticket 18736. + + Changes in version 0.3.2.1-alpha - 2017-09-18 Tor 0.3.2.1-alpha is the first release in the 0.3.2.x series. It includes support for our next-generation ("v3") onion service [View Less]

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 02 Oct '17

02 Oct '17

commit d075f2d8755c4470cab0661a9ea87ab126388cd0 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 2 19:15:40 2017 +0000 Update translations for https_everywhere --- ga/ssl-observatory.dtd | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/ga/ssl-observatory.dtd b/ga/ssl-observatory.dtd index 1d26055fd..d363ccab4 100644 --- a/ga/ssl-observatory.dtd +++ b/ga/ssl-observatory.dtd @@ -30,7 +30,7 @@ nach bhfuil tú ar líonra corpará… [View More]ideach an-sáiteach:"> "Seol agus seiceáil teastais a bhí sínithe ag bunúdarás teastas neamhchaighdeánach"> <!ENTITY ssl-observatory.prefs.alt_roots_tooltip -"It is safe (and a good idea) to enable this option, unless you use an intrusive corporate network or Kaspersky antivirus software that monitors your browsing with a TLS proxy and a private root Certificate Authority. If enabled on such a network, this option might publish evidence of which https:// domains were being visited through that proxy, because of the unique certificates it would produce. So we leave it off by default."> +"Tá sé sábháilte (agus ciallmhar) an rogha seo a chumasú, chomh fada is nach n-úsáideann tú líonra corparáideach sáiteach nó bogearra frithvíreas Kaspersky a dhéanann monatóireacht ar do bhrabhsáil trí sheachfhreastalaí TLS agus bunúdarás teastas príobháideach. Dá gcumasófá an rogha seo ar líonra den sórt seo, seans go nochtfaí fianaise maidir leis na fearainn https:// ar tugadh cuairt orthu tríd an seachfhreastalaí, mar gheall ar na teastais uathúla a tháirgfeadh sé. Dá bharr sin, fágaimid an rogha seo múchta de réir réamhshocraithe."> <!ENTITY ssl-observatory.prefs.anonymous "Seiceáil teastais trí Tor le d'aitheantas a cheilt"> <!ENTITY ssl-observatory.prefs.anonymous_unavailable @@ -42,21 +42,18 @@ nach bhfuil tú ar líonra corparáideach an-sáiteach:"> "Nuair a fheiceann tú teastas nua, inis don Observatory an ISP a bhfuil tú ceangailte tríd"> <!ENTITY ssl-observatory.prefs.asn_tooltip -"This will fetch and send the "Autonomous System number" of your network. This will help us locate attacks against HTTPS, and to determine whether we have observations from networks in places like Iran and Syria where attacks are comparatively common."> +"Faigheann agus seolann an rogha seo "Uimhir an Chórais Uathrialaithigh" a bhaineann le do líonra. Cabhraíonn seo linn ionsaithe ar HTTPS a aimsiú agus le déanamh amach an bhfuil breathnuithe againn ó líonraí in áiteanna ar nós na hIaráine agus na Siria ina bhfuil ionsaithe den sórt seo sách coitianta."> <!ENTITY ssl-observatory.prefs.show_cert_warning "Taispeáin rabhadh nuair a bhraitheann an Observatory teastas aisghairthe nár bhraith do bhrabhsálaí"> <!ENTITY ssl-observatory.prefs.show_cert_warning_tooltip -"This will check submitted certificates against known Certificate Revocation Lists. Unfortunately we cannot guarantee that we will flag every revoked certificate, but if you do see a warning there's a good chance something is wrong."> +"Seiceálann seo na teastais a sheolann tú in aghaidh Liostaí Teastas Aisghairthe ar eolas. Faraor, ní féidir linn deimhniú go n-aimseoidh sé seo gach teastas aisghairthe, ach má fheiceann tú rabhadh, tá seans maith ann go bhfuil rud éigin mícheart."> <!ENTITY ssl-observatory.prefs.done "Déanta"> <!ENTITY ssl-observatory.prefs.explanation -"HTTPS Everywhere can use EFF's SSL Observatory. This does two things: (1) -sends copies of HTTPS certificates to the Observatory, to help us -detect 'man in the middle' attacks and improve the Web's security; and (2) -lets us warn you about insecure connections or attacks on your browser."> +"Is féidir le HTTPS Everywhere an SSL Observatory a úsáid. Déanann sé seo dhá rud: (1) Seolann sé cóipeanna de theastais HTTPS chuig an Observatory, chun cabhrú linn ionsaithe 'duine sa lár' a aimsiú, agus slándáil an Ghréasáin a fheabhsú; agus (2) ligeann sé dúinn rabhaidh a thabhairt duit maidir le ceangal neamhshlán nó ionsaithe ar do bhrabhsálaí."> <!--<!ENTITY ssl-observatory.prefs.explanation2 "When you visit https://www.example.com, the Observatory will learn that [View Less]

1 0

[translation/https_everywhere] Update translations for https_everywhere
by translation＠torproject.org 02 Oct '17

02 Oct '17

commit c0c21bdf02d12c134275ba4d58e51cf8b3a54c66 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 2 18:45:40 2017 +0000 Update translations for https_everywhere --- ga/ssl-observatory.dtd | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/ga/ssl-observatory.dtd b/ga/ssl-observatory.dtd index e2cf81a39..1d26055fd 100644 --- a/ga/ssl-observatory.dtd +++ b/ga/ssl-observatory.dtd @@ -20,7 +20,8 @@ to turn it on?">--> <!-- … [View More]

1 0

[tor-messenger-build/master] Bug 23385: setup build-sunet-b.torproject.net for doing Tor Messenger builds
by boklm＠torproject.org 02 Oct '17

02 Oct '17

commit 74e12d3f49bbfe609cab9b76b9d2c58c01867823 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Oct 2 19:35:27 2017 +0200 Bug 23385: setup build-sunet-b.torproject.net for doing Tor Messenger builds --- tools/ansible/Makefile | 2 ++ tools/ansible/README | 13 +++++++++++++ tools/ansible/inventory | 5 +++++ tools/ansible/roles/mta | 1 + tools/ansible/roles/tbb-builder … [View More] | 1 + tools/ansible/roles/tm-team/defaults/main.yml | 3 +++ tools/ansible/roles/tm-team/files/boklm.pub | 1 + tools/ansible/roles/tm-team/tasks/main.yml | 15 +++++++++++++++ tools/ansible/roles/unattended-upgrades | 1 + tools/ansible/roles/useful-packages | 1 + tools/ansible/tm-build.yml | 9 +++++++++ tor-browser-build | 2 +- 12 files changed, 53 insertions(+), 1 deletion(-) diff --git a/tools/ansible/Makefile b/tools/ansible/Makefile new file mode 100644 index 0000000..2e99a1f --- /dev/null +++ b/tools/ansible/Makefile @@ -0,0 +1,2 @@ +ansible-tm-build: + ansible-playbook -i inventory tm-build.yml diff --git a/tools/ansible/README b/tools/ansible/README new file mode 100644 index 0000000..0bbdfc4 --- /dev/null +++ b/tools/ansible/README @@ -0,0 +1,13 @@ +This directory contains some ansible script that we use to setup some +machines that we use for Tor Messenger development. + +To deploy some changes you need the ansible package to be installed on +your machine, and be able to log in with ssh as root on the machine(s) +where the changes need to be deployed. + +You can then use one of the following makefile targets: + +ansible-tm-build: + Deploy changes to the machine used by Tor Messenger team members to do + some Tor Messenger builds. + diff --git a/tools/ansible/inventory b/tools/ansible/inventory new file mode 100644 index 0000000..5f9b125 --- /dev/null +++ b/tools/ansible/inventory @@ -0,0 +1,5 @@ +build-sunet-b ansible_ssh_user=root ansible_ssh_host=build-sunet-b.torproject.net + +[tm-build] +build-sunet-b + diff --git a/tools/ansible/roles/mta b/tools/ansible/roles/mta new file mode 120000 index 0000000..7b06e8e --- /dev/null +++ b/tools/ansible/roles/mta @@ -0,0 +1 @@ +../../../tor-browser-build/tools/ansible/roles/mta \ No newline at end of file diff --git a/tools/ansible/roles/tbb-builder b/tools/ansible/roles/tbb-builder new file mode 120000 index 0000000..ac19bfc --- /dev/null +++ b/tools/ansible/roles/tbb-builder @@ -0,0 +1 @@ +../../../tor-browser-build/tools/ansible/roles/tbb-builder \ No newline at end of file diff --git a/tools/ansible/roles/tm-team/defaults/main.yml b/tools/ansible/roles/tm-team/defaults/main.yml new file mode 100644 index 0000000..4d118ce --- /dev/null +++ b/tools/ansible/roles/tm-team/defaults/main.yml @@ -0,0 +1,3 @@ +--- +tm_team_members: + - boklm diff --git a/tools/ansible/roles/tm-team/files/boklm.pub b/tools/ansible/roles/tm-team/files/boklm.pub new file mode 100644 index 0000000..471f271 --- /dev/null +++ b/tools/ansible/roles/tm-team/files/boklm.pub @@ -0,0 +1 @@ +ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuY6Clt4tqljhnQAfIAq2RcuB3UgQ1odLtYc+AlnwcgWgYoqByGXT52YnYd44MQ0rPpXGh6M5MeXGF33OOLkBm8QeFHiev4njq/14A5qMIH+xV4T/ft1vEE3PTuarzyhv/Qp1s0dt4/XibzMPND5zFQJUFsTON6WYix0cwBOa80W46P56jPca56kTnL045N8MJNFA4ELby68QaMMK0lEzupgLtzRnqc123paZr3FAgCOxNlYC83ftAsDuVNCzbp0+i3W0ZWBbqVo+wWbty7WJK4TjuQszS2oP+d5xxktXUVyVXu2xm0BV0kXgh6lV4ixDPKQsZrlUYalFN5QIQWwzb q-wo diff --git a/tools/ansible/roles/tm-team/tasks/main.yml b/tools/ansible/roles/tm-team/tasks/main.yml new file mode 100644 index 0000000..4ca5a56 --- /dev/null +++ b/tools/ansible/roles/tm-team/tasks/main.yml @@ -0,0 +1,15 @@ +--- +- name: Add tm-team users + user: + name: "{{ item }}" + state: present + groups: tbb-build + shell: /bin/bash + with_items: "{{ tm_team_members }}" + +- name: Add ssh keys to authorized_keys + authorized_key: + user: "{{ item }}" + state: present + key: "{{ lookup('file', item + '.pub') }}" + with_items: "{{ tm_team_members }}" diff --git a/tools/ansible/roles/unattended-upgrades b/tools/ansible/roles/unattended-upgrades new file mode 120000 index 0000000..536bb5d --- /dev/null +++ b/tools/ansible/roles/unattended-upgrades @@ -0,0 +1 @@ +../../../tor-browser-build/tools/ansible/roles/unattended-upgrades \ No newline at end of file diff --git a/tools/ansible/roles/useful-packages b/tools/ansible/roles/useful-packages new file mode 120000 index 0000000..1b66a9d --- /dev/null +++ b/tools/ansible/roles/useful-packages @@ -0,0 +1 @@ +../../../tor-browser-build/tools/ansible/roles/useful-packages \ No newline at end of file diff --git a/tools/ansible/tm-build.yml b/tools/ansible/tm-build.yml new file mode 100644 index 0000000..09c867d --- /dev/null +++ b/tools/ansible/tm-build.yml @@ -0,0 +1,9 @@ +--- + +- hosts: tm-build + roles: + - role: tbb-builder + - role: useful-packages + - role: tm-team + - role: mta + - role: unattended-upgrades diff --git a/tor-browser-build b/tor-browser-build index 7129913..fd97762 160000 --- a/tor-browser-build +++ b/tor-browser-build @@ -1 +1 @@ -Subproject commit 712991345d023d987631a35998df6cf8736b5a2e +Subproject commit fd97762cb0924eea137896425eab788daef6ca8d [View Less]

1 0

[tor-messenger-build/master] Bug 23403: Use tor-messenger-build/tmp rather than /tmp as default tmp_dir
by boklm＠torproject.org 02 Oct '17

02 Oct '17

commit 4e45b18eb98dc3193344e9c156de30c42511f47b Author: Nicolas Vigier <boklm(a)torproject.org> Date: Thu Sep 7 13:01:02 2017 +0200 Bug 23403: Use tor-messenger-build/tmp rather than /tmp as default tmp_dir --- rbm.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/rbm.conf b/rbm.conf index 060d91f..2178843 100644 --- a/rbm.conf +++ b/rbm.conf @@ -2,6 +2,7 @@ debug: '[% GET ! ENV.RBM_NO_DEBUG %]' compress_tar: gz output_dir: "out/[% project %]" +tmp_dir: '[% c("basedir") %… [View More]

1 0

[tor-messenger-build/master] Bug 23734: backport rbm.conf changes from tor-browser-build to tor-messenger-build
by boklm＠torproject.org 02 Oct '17

02 Oct '17

commit bf707b1b225eb9a91b02df84aafb0993fc97e880 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Oct 2 19:04:08 2017 +0200 Bug 23734: backport rbm.conf changes from tor-browser-build to tor-messenger-build --- rbm.conf | 31 +++++++++++++++++++++++++------ 1 file changed, 25 insertions(+), 6 deletions(-) diff --git a/rbm.conf b/rbm.conf index 2178843..b05a20a 100644 --- a/rbm.conf +++ b/rbm.conf @@ -36,7 +36,7 @@ var: build: [% c("build", { filename => 'f', … [View More]output_dir => '/out' }) %] container: - dir: '[% c("tmp_dir") %]/[% c("uid") %]/rbm-containers/[% sha256(c("build_id")) %]' + dir: '[% c("rbm_tmp_dir") %]/rbm-containers/[% sha256(c("build_id")) %]' user: rbm input_files_list: | [% FOREACH file IN c("input_files_by_name").keys.sort -%] @@ -234,9 +234,6 @@ runc: fi mkdir -p '[% c("var/container/dir") %]'/rootfs/rbm sudo tar -C '[% c("var/container/dir") %]'/rootfs -xf $(ls -1 '[% c("remote_srcdir", { error_if_undef => 1 }) %]/container-image_'*) - cat > '[% c("var/container/dir") %]'/config.json << EOF - [% INCLUDE 'runc-config.json' %] - EOF [% SET user = c("var/container/user") -%] [% c("remote_exec", { exec_as_root => 1, exec_cmd => 'id ' _ user _ ' >/dev/null 2>&1 || adduser -m ' _ user _ ' || useradd -m ' _ user }) %] @@ -244,6 +241,9 @@ runc: remote_exec: | #!/bin/sh set -e + [% IF c("interactive") -%] + echo Container directory: [% shell_quote(c("var/container/dir")) %] + [% END -%] mkdir -p '[% c("var/container/dir", { error_if_undef => 1 }) %]'/rootfs/rbm echo '#!/bin/sh' > '[% c("var/container/dir") %]'/rootfs/rbm/cmd echo [% shell_quote(c('exec_cmd')) %] >> '[% c("var/container/dir") %]'/rootfs/rbm/cmd @@ -252,7 +252,10 @@ runc: echo 'su - [% user %] -c /rbm/cmd' >> '[% c("var/container/dir") %]'/rootfs/rbm/run chmod +x '[% c("var/container/dir") %]'/rootfs/rbm/cmd chmod +x '[% c("var/container/dir") %]'/rootfs/rbm/run - sudo runc start -b '[% c("var/container/dir") %]' rbm-[% sha256(c("build_id", { error_if_undef => 1 })) %] + cat > '[% c("var/container/dir") %]'/config.json << EOF + [% INCLUDE 'runc-config.json' %] + EOF + sudo runc [% IF c("var_p/runc100") %]run[% ELSE %]start[% END %] -b '[% c("var/container/dir") %]' rbm-[% sha256(c("build_id", { error_if_undef => 1 })) %] [% IF c("runc_hide_stderr") %]2>/dev/null[% END %] remote_put: | #!/bin/sh @@ -263,7 +266,10 @@ runc: -%] sudo mkdir -p '[% c("var/container/dir") %]'/rootfs/[% dst %] sudo cp -aP [% src %] '[% c("var/container/dir") %]'/rootfs/[% dst %] - [% c("remote_exec", { exec_as_root => 1, exec_cmd => 'chown -R ' _ c("var/container/user") _ ' ' _ dst }) %] + # On Ubuntu, the /root/.profile file contains a `mesg n` line which is + # producing some `stdin: is not a tty` messages. To hide them, we hide + # stderr from this part by setting runc_hide_stderr. + [% c("remote_exec", { exec_as_root => 1, exec_cmd => 'chown -R ' _ c("var/container/user") _ ' ' _ dst, runc_hide_stderr => 1 }) %] remote_get: | #!/bin/sh @@ -289,3 +295,16 @@ runc: ENV: TZ: UTC LC_ALL: C +--- | + # This part of the file contains options written in perl + use IO::CaptureOutput qw(capture_exec); + ( + var_p => { + # runc100 is true if we are using runc >= 1.0.0 + # we assume that any version that is not 0.1.1 is >= 1.0.0 + runc100 => sub { + my ($out) = capture_exec('sudo', 'runc', '--version'); + return !($out =~ m/^runc version 0.1.1/); + }, + }, + ) [View Less]

1 0

[tor-messenger-build/master] Update rbm submodule
by boklm＠torproject.org 02 Oct '17

02 Oct '17

commit 297a03c31fbe990d2f517d80c4224568db77d3da Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Oct 2 18:45:52 2017 +0200 Update rbm submodule --- rbm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rbm b/rbm index 106e9b0..78d9b11 160000 --- a/rbm +++ b/rbm @@ -1 +1 @@ -Subproject commit 106e9b05aeff6309e241a3c9bae1781e0d551e7a +Subproject commit 78d9b11aead5ba9b2386f7ebb2003772823fa293

1 0

[tor-messenger-build/master] Bug 20757: fix gpg_wrapper with git >= 2.10.0-rc0
by boklm＠torproject.org 02 Oct '17

02 Oct '17

commit 043cc5f96113c6367e29be6064867148c55fea20 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Tue Aug 8 16:44:15 2017 +0200 Bug 20757: fix gpg_wrapper with git >= 2.10.0-rc0 Thanks to dcf for finding the cause of the problem. --- rbm.conf | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/rbm.conf b/rbm.conf index d7aaee7..060d91f 100644 --- a/rbm.conf +++ b/rbm.conf @@ -203,8 +203,11 @@ gpg_wrapper: | SET gpg_kr = '--keyring '… [View More]

1 0