November 2018 - tor-commits - lists.torproject.org

[tor/maint-0.3.3] Merge branch 'maint-0.3.3' of https://git.torproject.org/tor into maint-0.3.3
by nickm＠torproject.org 15 Nov '18

15 Nov '18

commit 796b1e73e73f447b1f93b17179dd7ab31c618929 Merge: 0431bb61c 2cadd93ce Author: David Goulet <dgoulet(a)torproject.org> Date: Mon Sep 24 12:44:59 2018 -0400 Merge branch 'maint-0.3.3' of https://git.torproject.org/tor into maint-0.3.3 changes/bug27316 | 3 +++ src/or/protover.c | 17 ++++++++++++++++- src/test/test_protover.c | 4 ++++ 3 files changed, 23 insertions(+), 1 deletion(-)

1 0

[tor/maint-0.3.3] Merge branch 'maint-0.3.2' into maint-0.3.3
by nickm＠torproject.org 15 Nov '18

15 Nov '18

commit bc8636e89af7a49dfdbb4fd25500ef33fceb04d0 Merge: 4c094436c 6fed66d26 Author: David Goulet <dgoulet(a)torproject.org> Date: Tue Jul 3 13:31:10 2018 -0400 Merge branch 'maint-0.3.2' into maint-0.3.3

1 0

[tor/maint-0.3.4] Merge branch 'maint-0.3.2' into maint-0.3.3
by nickm＠torproject.org 15 Nov '18

15 Nov '18

commit bc8636e89af7a49dfdbb4fd25500ef33fceb04d0 Merge: 4c094436c 6fed66d26 Author: David Goulet <dgoulet(a)torproject.org> Date: Tue Jul 3 13:31:10 2018 -0400 Merge branch 'maint-0.3.2' into maint-0.3.3

1 0

[tor/maint-0.3.4] Merge branch 'maint-0.3.3' of https://git.torproject.org/tor into maint-0.3.3
by nickm＠torproject.org 15 Nov '18

15 Nov '18

1 0

[tor/maint-0.3.4] Merge remote-tracking branch 'dgoulet/bug27550_033_01' into maint-0.3.3
by nickm＠torproject.org 15 Nov '18

15 Nov '18

commit 34e4d5a78362b3f133958740a18d0ee06ae4fdad Merge: db3acb3aa 18085abfc Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 15 16:37:02 2018 -0500 Merge remote-tracking branch 'dgoulet/bug27550_033_01' into maint-0.3.3 changes/ticket27550 | 5 +++++ src/or/directory.c | 2 +- src/or/hs_client.c | 4 ---- src/or/hs_descriptor.c | 9 ++++++--- 4 files changed, 12 insertions(+), 8 deletions(-)

1 0

[tor/maint-0.3.4] Merge branch 'maint-0.3.3' of https://git.torproject.org/tor into maint-0.3.3
by nickm＠torproject.org 15 Nov '18

15 Nov '18

commit 796b1e73e73f447b1f93b17179dd7ab31c618929 Merge: 0431bb61c 2cadd93ce Author: David Goulet <dgoulet(a)torproject.org> Date: Mon Sep 24 12:44:59 2018 -0400 Merge branch 'maint-0.3.3' of https://git.torproject.org/tor into maint-0.3.3 changes/bug27316 | 3 +++ src/or/protover.c | 17 ++++++++++++++++- src/test/test_protover.c | 4 ++++ 3 files changed, 23 insertions(+), 1 deletion(-)

1 0

[tor/maint-0.3.4] hs-v3: Silence some logging for client authorization
by nickm＠torproject.org 15 Nov '18

15 Nov '18

commit 18085abfcc3d13c53752764ea87a21201831bc6b Author: David Goulet <dgoulet(a)torproject.org> Date: Mon Sep 10 15:04:22 2018 -0400 hs-v3: Silence some logging for client authorization If a tor client gets a descriptor that it can't decrypt, chances are that the onion requires client authorization. If a tor client is configured with client authorization for an onion but decryption fails, it means that the configured keys aren't working anymore. In both cases, we'll log notice the former and log warn the latter and the rest of the decryption errors are now at info level. Two logs statement have been removed because it was redundant and printing the fetched descriptor in the logs when 80% of it is encrypted wat not helping. Fixes #27550 Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- changes/ticket27550 | 5 +++++ src/or/directory.c | 2 +- src/or/hs_client.c | 4 ---- src/or/hs_descriptor.c | 9 ++++++--- 4 files changed, 12 insertions(+), 8 deletions(-) diff --git a/changes/ticket27550 b/changes/ticket27550 new file mode 100644 index 000000000..87f9b5cbe --- /dev/null +++ b/changes/ticket27550 @@ -0,0 +1,5 @@ + o Minor bugfixes (hidden service v3): + - Don't warn so loudly when tor is unable to decode a descriptor. This can + now happen as a normal use case if a client gets a descriptor with + client authorization but the client is not authorized. Fixes bug 27550; + bugfix on 0.3.5.1-alpha. diff --git a/src/or/directory.c b/src/or/directory.c index 8636f6841..ddb86cd9a 100644 --- a/src/or/directory.c +++ b/src/or/directory.c @@ -3091,7 +3091,7 @@ handle_response_fetch_hsdesc_v3(dir_connection_t *conn, case 200: /* We got something: Try storing it in the cache. */ if (hs_cache_store_as_client(body, &conn->hs_ident->identity_pk) < 0) { - log_warn(LD_REND, "Failed to store hidden service descriptor"); + log_info(LD_REND, "Failed to store hidden service descriptor"); /* Fire control port FAILED event. */ hs_control_desc_event_failed(conn->hs_ident, conn->identity_digest, "BAD_DESC"); diff --git a/src/or/hs_client.c b/src/or/hs_client.c index 636226a1d..1d1bdda8c 100644 --- a/src/or/hs_client.c +++ b/src/or/hs_client.c @@ -1225,10 +1225,6 @@ hs_client_decode_descriptor(const char *desc_str, ret = hs_desc_decode_descriptor(desc_str, subcredential, desc); memwipe(subcredential, 0, sizeof(subcredential)); if (ret < 0) { - log_warn(LD_GENERAL, "Could not parse received descriptor as client."); - if (get_options()->SafeLogging_ == SAFELOG_SCRUB_NONE) { - log_warn(LD_GENERAL, "%s", escaped(desc_str)); - } goto err; } diff --git a/src/or/hs_descriptor.c b/src/or/hs_descriptor.c index 0298c3732..32278ec9f 100644 --- a/src/or/hs_descriptor.c +++ b/src/or/hs_descriptor.c @@ -1361,7 +1361,7 @@ decrypt_desc_layer,(const hs_descriptor_t *desc, * This is a critical check that is making sure the computed MAC matches the * one in the descriptor. */ if (!tor_memeq(our_mac, desc_mac, sizeof(our_mac))) { - log_warn(LD_REND, "Encrypted service descriptor MAC check failed"); + log_info(LD_REND, "Encrypted service descriptor MAC check failed"); goto err; } @@ -1544,7 +1544,6 @@ desc_decrypt_all(const hs_descriptor_t *desc, char **decrypted_out) superencrypted_len, &encrypted_blob); if (!encrypted_len) { - log_warn(LD_REND, "Decrypting encrypted desc failed."); goto err; } tor_assert(encrypted_blob); @@ -2046,7 +2045,11 @@ desc_decode_encrypted_v3(const hs_descriptor_t *desc, * in the descriptor as a blob of bytes. */ message_len = desc_decrypt_all(desc, &message); if (!message_len) { - log_warn(LD_REND, "Service descriptor decryption failed."); + /* Inform at notice level that the onion address requested can't be + * reached without client authorization most likely. */ + log_notice(LD_REND, "Fail to decrypt descriptor for requested onion " + "address. It is likely requiring client " + "authorization."); goto err; } tor_assert(message);

1 0

[tor/maint-0.3.4] Merge branch 'maint-0.3.3' into maint-0.3.4
by nickm＠torproject.org 15 Nov '18

15 Nov '18

commit 1e6ffeaeaaf3c01a85c69e9cee76f124720bb8c8 Merge: 27b917047 34e4d5a78 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Nov 15 16:37:41 2018 -0500 Merge branch 'maint-0.3.3' into maint-0.3.4 changes/ticket27550 | 5 +++++ src/or/directory.c | 2 +- src/or/hs_client.c | 4 ---- src/or/hs_descriptor.c | 9 ++++++--- 4 files changed, 12 insertions(+), 8 deletions(-)

1 0

[translation/torbutton-browseronboardingproperties] Update translations for torbutton-browseronboardingproperties
by translation＠torproject.org 15 Nov '18

15 Nov '18

commit cf5dc65edb988cb8fd58f30df06bfe98eefefd48 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Nov 15 21:18:47 2018 +0000 Update translations for torbutton-browseronboardingproperties --- fa/browserOnboarding.properties | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/fa/browserOnboarding.properties b/fa/browserOnboarding.properties index e0ab43380..77d756cf9 100644 --- a/fa/browserOnboarding.properties +++ b/fa/browserOnboarding.properties @@ -40,9 +40,9 @@ onboarding.tour-tor-onion-services.button=Visit an Onion # Circuit Display onboarding. onboarding.tor-circuit-display.next=بعدی onboarding.tor-circuit-display.done=انجام شد -onboarding.tor-circuit-display.one-of-three=1 of 3 -onboarding.tor-circuit-display.two-of-three=2 of 3 -onboarding.tor-circuit-display.three-of-three=3 of 3 +onboarding.tor-circuit-display.one-of-three=۱ از ۳ +onboarding.tor-circuit-display.two-of-three=۲ از ۳ +onboarding.tor-circuit-display.three-of-three=۳ از ۳ onboarding.tor-circuit-display.intro.title=How do circuits work? onboarding.tor-circuit-display.intro.msg=Circuits are made up of randomly assigned relays, which are computers around the world configured to forward Tor traffic. Circuits allow you to browse privately and to connect to onion services.

1 0

[tor/maint-0.3.5] Try to restore a proper fix for bug27740 in 0.3.5.
by nickm＠torproject.org 15 Nov '18

15 Nov '18

commit 632e0406595ade9da40317a777f438c43ea5b5f3 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Oct 30 07:37:17 2018 -0400 Try to restore a proper fix for bug27740 in 0.3.5. (I messed up the merge in 289a7dbac32a981897e12a3c250f0b6c67eec809.) --- src/rust/protover/ffi.rs | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/src/rust/protover/ffi.rs b/src/rust/protover/ffi.rs index f17f30127..e29efd6df 100644 --- a/src/rust/protover/ffi.rs +++ b/src/rust/protover/ffi.rs @@ -65,12 +65,7 @@ pub extern "C" fn protover_all_supported( if missing_out.is_null() { return 0; } - let c_unsupported: CString = match CString::new(unsupported.to_string()) { - Ok(n) => n, - Err(_) => return 1, - }; - - let ptr = c_unsupported.into_raw(); + let ptr = allocate_and_copy_string(&unsupported.to_string()); unsafe { *missing_out = ptr }; return 0;

1 0