September 2018 - tor-commits - lists.torproject.org

[onionoo/master] Remove "1_week" and "1_month" clients graphs.
by karsten＠torproject.org 10 Sep '18

10 Sep '18

commit 963fccc5d49c7c850c602350f0ac7add86263af2 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Mon Jul 30 09:37:16 2018 +0200 Remove "1_week" and "1_month" clients graphs. Implements #25177. --- CHANGELOG.md | 2 ++ .../java/org/torproject/onionoo/writer/ClientsDocumentWriter.java | 6 ------ 2 files changed, 2 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 243c5af..5fb5ff9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,8 @@ * Medium changes - Extend "version" parameter to support lists and ranges. + - Remove redundant "1_week" and "1_month" graphs from clients + documents. # Changes in version 6.2-1.17.1 - 2018-08-17 diff --git a/src/main/java/org/torproject/onionoo/writer/ClientsDocumentWriter.java b/src/main/java/org/torproject/onionoo/writer/ClientsDocumentWriter.java index 2bf1862..1928bd2 100644 --- a/src/main/java/org/torproject/onionoo/writer/ClientsDocumentWriter.java +++ b/src/main/java/org/torproject/onionoo/writer/ClientsDocumentWriter.java @@ -78,23 +78,17 @@ public class ClientsDocumentWriter implements DocumentWriter { } private String[] graphNames = new String[] { - "1_week", - "1_month", "3_months", "1_year", "5_years" }; private Period[] graphIntervals = new Period[] { - Period.ofWeeks(1), - Period.ofMonths(1), Period.ofMonths(3), Period.ofYears(1), Period.ofYears(5) }; private long[] dataPointIntervals = new long[] { DateTimeHelper.ONE_DAY, - DateTimeHelper.ONE_DAY, - DateTimeHelper.ONE_DAY, DateTimeHelper.TWO_DAYS, DateTimeHelper.TEN_DAYS };

1 0

[onionoo/master] Change 3 months graphs to 6 months graphs.
by karsten＠torproject.org 10 Sep '18

10 Sep '18

commit 5116606732bee287b64b85ed8bedd3559d902926 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Tue Sep 4 20:25:04 2018 +0200 Change 3 months graphs to 6 months graphs. Implements #25175. --- CHANGELOG.md | 2 ++ .../java/org/torproject/onionoo/writer/BandwidthDocumentWriter.java | 4 ++-- .../java/org/torproject/onionoo/writer/ClientsDocumentWriter.java | 4 ++-- .../java/org/torproject/onionoo/writer/UptimeDocumentWriter.java | 4 ++-- .../java/org/torproject/onionoo/writer/WeightsDocumentWriter.java | 4 ++-- .../org/torproject/onionoo/writer/GraphHistoryCompilerTest.java | 6 +++--- 6 files changed, 13 insertions(+), 11 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5fb5ff9..79d7a9b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,8 @@ - Extend "version" parameter to support lists and ranges. - Remove redundant "1_week" and "1_month" graphs from clients documents. + - Change "3_months" graphs to "6_months" graphs in all documents + containing history objects. # Changes in version 6.2-1.17.1 - 2018-08-17 diff --git a/src/main/java/org/torproject/onionoo/writer/BandwidthDocumentWriter.java b/src/main/java/org/torproject/onionoo/writer/BandwidthDocumentWriter.java index 47eaa3e..46072bc 100644 --- a/src/main/java/org/torproject/onionoo/writer/BandwidthDocumentWriter.java +++ b/src/main/java/org/torproject/onionoo/writer/BandwidthDocumentWriter.java @@ -67,7 +67,7 @@ public class BandwidthDocumentWriter implements DocumentWriter { "3_days", "1_week", "1_month", - "3_months", + "6_months", "1_year", "5_years" }; @@ -75,7 +75,7 @@ public class BandwidthDocumentWriter implements DocumentWriter { Period.ofDays(3), Period.ofWeeks(1), Period.ofMonths(1), - Period.ofMonths(3), + Period.ofMonths(6), Period.ofYears(1), Period.ofYears(5) }; diff --git a/src/main/java/org/torproject/onionoo/writer/ClientsDocumentWriter.java b/src/main/java/org/torproject/onionoo/writer/ClientsDocumentWriter.java index 1928bd2..fcd03d6 100644 --- a/src/main/java/org/torproject/onionoo/writer/ClientsDocumentWriter.java +++ b/src/main/java/org/torproject/onionoo/writer/ClientsDocumentWriter.java @@ -78,12 +78,12 @@ public class ClientsDocumentWriter implements DocumentWriter { } private String[] graphNames = new String[] { - "3_months", + "6_months", "1_year", "5_years" }; private Period[] graphIntervals = new Period[] { - Period.ofMonths(3), + Period.ofMonths(6), Period.ofYears(1), Period.ofYears(5) }; diff --git a/src/main/java/org/torproject/onionoo/writer/UptimeDocumentWriter.java b/src/main/java/org/torproject/onionoo/writer/UptimeDocumentWriter.java index 73e8dee..d08f147 100644 --- a/src/main/java/org/torproject/onionoo/writer/UptimeDocumentWriter.java +++ b/src/main/java/org/torproject/onionoo/writer/UptimeDocumentWriter.java @@ -79,14 +79,14 @@ public class UptimeDocumentWriter implements DocumentWriter { private String[] graphNames = new String[] { "1_week", "1_month", - "3_months", + "6_months", "1_year", "5_years" }; private Period[] graphIntervals = new Period[] { Period.ofWeeks(1), Period.ofMonths(1), - Period.ofMonths(3), + Period.ofMonths(6), Period.ofYears(1), Period.ofYears(5) }; diff --git a/src/main/java/org/torproject/onionoo/writer/WeightsDocumentWriter.java b/src/main/java/org/torproject/onionoo/writer/WeightsDocumentWriter.java index 7d5f1d1..0984367 100644 --- a/src/main/java/org/torproject/onionoo/writer/WeightsDocumentWriter.java +++ b/src/main/java/org/torproject/onionoo/writer/WeightsDocumentWriter.java @@ -55,14 +55,14 @@ public class WeightsDocumentWriter implements DocumentWriter { private String[] graphNames = new String[] { "1_week", "1_month", - "3_months", + "6_months", "1_year", "5_years" }; private Period[] graphIntervals = new Period[] { Period.ofWeeks(1), Period.ofMonths(1), - Period.ofMonths(3), + Period.ofMonths(6), Period.ofYears(1), Period.ofYears(5) }; diff --git a/src/test/java/org/torproject/onionoo/writer/GraphHistoryCompilerTest.java b/src/test/java/org/torproject/onionoo/writer/GraphHistoryCompilerTest.java index aa091de..de5aa2f 100644 --- a/src/test/java/org/torproject/onionoo/writer/GraphHistoryCompilerTest.java +++ b/src/test/java/org/torproject/onionoo/writer/GraphHistoryCompilerTest.java @@ -140,21 +140,21 @@ public class GraphHistoryCompilerTest { private final String[] graphNames = new String[] { "1_week", "1_month", - "3_months", + "6_months", "1_year", "5_years" }; private final Period[] graphIntervals = new Period[] { Period.ofWeeks(1), Period.ofMonths(1), - Period.ofMonths(3), + Period.ofMonths(6), Period.ofYears(1), Period.ofYears(5) }; private final long[] dataPointIntervals = new long[] { DateTimeHelper.ONE_HOUR, DateTimeHelper.FOUR_HOURS, - DateTimeHelper.TWELVE_HOURS, + DateTimeHelper.ONE_DAY, DateTimeHelper.TWO_DAYS, DateTimeHelper.TEN_DAYS };

1 0

[onionoo/master] Remove previously deprecated "as_number" field.
by karsten＠torproject.org 10 Sep '18

10 Sep '18

commit ab7199080b7e0afe791b51bb2b47f79fc0d418fe Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Tue Sep 4 20:35:19 2018 +0200 Remove previously deprecated "as_number" field. Still related to #23713. --- CHANGELOG.md | 2 ++ .../org/torproject/onionoo/docs/DetailsDocument.java | 19 ------------------- .../torproject/onionoo/server/ResponseBuilder.java | 3 --- .../onionoo/writer/DetailsDocumentWriter.java | 2 +- 4 files changed, 3 insertions(+), 23 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 34ec5b7..8f69f6a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,8 @@ - Change "3_months" graphs to "6_months" graphs in all documents containing history objects. - Remove the "fingerprint" parameter. + - Remove the previously deprecated "as_number" field from details + documents. # Changes in version 6.2-1.17.1 - 2018-08-17 diff --git a/src/main/java/org/torproject/onionoo/docs/DetailsDocument.java b/src/main/java/org/torproject/onionoo/docs/DetailsDocument.java index 504f0b5..725474f 100644 --- a/src/main/java/org/torproject/onionoo/docs/DetailsDocument.java +++ b/src/main/java/org/torproject/onionoo/docs/DetailsDocument.java @@ -204,33 +204,14 @@ public class DetailsDocument extends Document { private String as; - @Deprecated - private String asNumber; - public void setAs(String as) { this.as = escapeJson(as); } - @Deprecated - public void setAsNumber(String asNumber) { - this.asNumber = escapeJson(asNumber); - } - - @Deprecated - public void setAsAndAsNumber(String asNumber) { - this.as = escapeJson(asNumber); - this.asNumber = escapeJson(asNumber); - } - public String getAs() { return unescapeJson(this.as); } - @Deprecated - public String getAsNumber() { - return unescapeJson(this.asNumber); - } - private String asName; public void setAsName(String asName) { diff --git a/src/main/java/org/torproject/onionoo/server/ResponseBuilder.java b/src/main/java/org/torproject/onionoo/server/ResponseBuilder.java index f1f4af9..54d8dc5 100644 --- a/src/main/java/org/torproject/onionoo/server/ResponseBuilder.java +++ b/src/main/java/org/torproject/onionoo/server/ResponseBuilder.java @@ -299,9 +299,6 @@ public class ResponseBuilder { case "as": dd.setAs(detailsDocument.getAs()); break; - case "as_number": - dd.setAsNumber(detailsDocument.getAsNumber()); - break; case "as_name": dd.setAsName(detailsDocument.getAsName()); break; diff --git a/src/main/java/org/torproject/onionoo/writer/DetailsDocumentWriter.java b/src/main/java/org/torproject/onionoo/writer/DetailsDocumentWriter.java index 99b4e5d..d33ae4d 100644 --- a/src/main/java/org/torproject/onionoo/writer/DetailsDocumentWriter.java +++ b/src/main/java/org/torproject/onionoo/writer/DetailsDocumentWriter.java @@ -96,7 +96,7 @@ public class DetailsDocumentWriter implements DocumentWriter { detailsDocument.setCountryName(detailsStatus.getCountryName()); detailsDocument.setRegionName(detailsStatus.getRegionName()); detailsDocument.setCityName(detailsStatus.getCityName()); - detailsDocument.setAsAndAsNumber(detailsStatus.getAsNumber()); + detailsDocument.setAs(detailsStatus.getAsNumber()); detailsDocument.setAsName(detailsStatus.getAsName()); if (detailsStatus.isRunning()) { detailsDocument.setConsensusWeightFraction(

1 0

[onionoo/master] Extend "version" parameter to support lists and ranges.
by karsten＠torproject.org 10 Sep '18

10 Sep '18

commit f0f57879d6074a979c33a46873ad5d9e60c6d72e Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Sun Jul 29 20:01:49 2018 +0200 Extend "version" parameter to support lists and ranges. Changes the current behavior of the "version" parameter by moving away from string prefix matching to actually parsing provided (partial) versions. As a result, for example, "version=0.3.2.1" doesn't magically include versions 0.3.2.10 to 0.3.2.19, 0.3.2.100 to 0.3.2.199, etc. anymore. Without this change, version ranges would have become just too confusing. The downside is that this change requires a major version bump. Implements #6947. --- CHANGELOG.md | 6 + .../org/torproject/onionoo/server/NodeIndex.java | 14 ++- .../org/torproject/onionoo/server/NodeIndexer.java | 9 +- .../torproject/onionoo/server/RequestHandler.java | 29 +++-- .../torproject/onionoo/server/ResourceServlet.java | 31 ++++- .../org/torproject/onionoo/updater/TorVersion.java | 125 ++++++++++++++------- .../onionoo/server/ResourceServletTest.java | 85 ++++++++++++-- .../torproject/onionoo/updater/TorVersionTest.java | 10 +- 8 files changed, 233 insertions(+), 76 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4937eb3..243c5af 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,9 @@ +# Changes in version 7.0-1.18.0 - 2018-09-?? + + * Medium changes + - Extend "version" parameter to support lists and ranges. + + # Changes in version 6.2-1.17.1 - 2018-08-17 * Minor changes diff --git a/src/main/java/org/torproject/onionoo/server/NodeIndex.java b/src/main/java/org/torproject/onionoo/server/NodeIndex.java index d8b983a..0f38cd3 100644 --- a/src/main/java/org/torproject/onionoo/server/NodeIndex.java +++ b/src/main/java/org/torproject/onionoo/server/NodeIndex.java @@ -4,6 +4,7 @@ package org.torproject.onionoo.server; import org.torproject.onionoo.docs.SummaryDocument; +import org.torproject.onionoo.updater.TorVersion; import java.text.SimpleDateFormat; import java.util.Map; @@ -180,23 +181,24 @@ class NodeIndex { return bridgesByLastSeenDays; } - private Map<String, Set<String>> relaysByVersion; + private Map<TorVersion, Set<String>> relaysByVersion; - public void setRelaysByVersion(Map<String, Set<String>> relaysByVersion) { + public void setRelaysByVersion(Map<TorVersion, Set<String>> relaysByVersion) { this.relaysByVersion = relaysByVersion; } - public Map<String, Set<String>> getRelaysByVersion() { + public Map<TorVersion, Set<String>> getRelaysByVersion() { return this.relaysByVersion; } - private Map<String, Set<String>> bridgesByVersion; + private Map<TorVersion, Set<String>> bridgesByVersion; - public void setBridgesByVersion(Map<String, Set<String>> bridgesByVersion) { + public void setBridgesByVersion(Map<TorVersion, + Set<String>> bridgesByVersion) { this.bridgesByVersion = bridgesByVersion; } - public Map<String, Set<String>> getBridgesByVersion() { + public Map<TorVersion, Set<String>> getBridgesByVersion() { return this.bridgesByVersion; } diff --git a/src/main/java/org/torproject/onionoo/server/NodeIndexer.java b/src/main/java/org/torproject/onionoo/server/NodeIndexer.java index 80418aa..1a13b99 100644 --- a/src/main/java/org/torproject/onionoo/server/NodeIndexer.java +++ b/src/main/java/org/torproject/onionoo/server/NodeIndexer.java @@ -10,6 +10,7 @@ import org.torproject.onionoo.docs.DocumentStore; import org.torproject.onionoo.docs.DocumentStoreFactory; import org.torproject.onionoo.docs.SummaryDocument; import org.torproject.onionoo.docs.UpdateStatus; +import org.torproject.onionoo.updater.TorVersion; import org.slf4j.Logger; import org.slf4j.LoggerFactory; @@ -155,8 +156,8 @@ public class NodeIndexer implements ServletContextListener, Runnable { Map<String, Set<String>> newBridgesByFlag = new HashMap<>(); Map<String, Set<String>> newRelaysByContact = new HashMap<>(); Map<String, Set<String>> newRelaysByFamily = new HashMap<>(); - Map<String, Set<String>> newRelaysByVersion = new HashMap<>(); - Map<String, Set<String>> newBridgesByVersion = new HashMap<>(); + Map<TorVersion, Set<String>> newRelaysByVersion = new HashMap<>(); + Map<TorVersion, Set<String>> newBridgesByVersion = new HashMap<>(); Map<String, Set<String>> newRelaysByOperatingSystem = new HashMap<>(); Map<String, Set<String>> newBridgesByOperatingSystem = new HashMap<>(); Map<String, Set<String>> newRelaysByHostName = new HashMap<>(); @@ -264,7 +265,7 @@ public class NodeIndexer implements ServletContextListener, Runnable { newRelaysByContact.putIfAbsent(contact, new HashSet<>()); newRelaysByContact.get(contact).add(fingerprint); newRelaysByContact.get(contact).add(hashedFingerprint); - String version = entry.getVersion(); + TorVersion version = TorVersion.of(entry.getVersion()); if (null != version) { newRelaysByVersion.putIfAbsent(version, new HashSet<>()); newRelaysByVersion.get(version).add(fingerprint); @@ -346,7 +347,7 @@ public class NodeIndexer implements ServletContextListener, Runnable { hashedFingerprint); newBridgesByLastSeenDays.get(daysSinceLastSeen).add( hashedHashedFingerprint); - String version = entry.getVersion(); + TorVersion version = TorVersion.of(entry.getVersion()); if (null != version) { newBridgesByVersion.putIfAbsent(version, new HashSet<>()); newBridgesByVersion.get(version).add(hashedFingerprint); diff --git a/src/main/java/org/torproject/onionoo/server/RequestHandler.java b/src/main/java/org/torproject/onionoo/server/RequestHandler.java index d1e9cce..e3c94f9 100644 --- a/src/main/java/org/torproject/onionoo/server/RequestHandler.java +++ b/src/main/java/org/torproject/onionoo/server/RequestHandler.java @@ -6,6 +6,7 @@ package org.torproject.onionoo.server; import org.torproject.onionoo.docs.DocumentStore; import org.torproject.onionoo.docs.DocumentStoreFactory; import org.torproject.onionoo.docs.SummaryDocument; +import org.torproject.onionoo.updater.TorVersion; import java.util.ArrayList; import java.util.Arrays; @@ -96,9 +97,9 @@ public class RequestHandler { System.arraycopy(contact, 0, this.contact, 0, contact.length); } - private String version; + private List<TorVersion[]> version; - public void setVersion(String version) { + public void setVersion(List<TorVersion[]> version) { this.version = version; } @@ -572,18 +573,30 @@ public class RequestHandler { return; } Set<String> keepRelays = new HashSet<>(); - for (Map.Entry<String, Set<String>> e + for (Map.Entry<TorVersion, Set<String>> e : this.nodeIndex.getRelaysByVersion().entrySet()) { - if (e.getKey().startsWith(this.version)) { - keepRelays.addAll(e.getValue()); + for (TorVersion[] versionRange : this.version) { + if ((null == versionRange[0] + || e.getKey().compareTo(versionRange[0]) >= 0) + && (null == versionRange[1] + || e.getKey().compareTo(versionRange[1]) <= 0 + || e.getKey().matchingPrefix(versionRange[1]))) { + keepRelays.addAll(e.getValue()); + } } } this.filteredRelays.keySet().retainAll(keepRelays); Set<String> keepBridges = new HashSet<>(); - for (Map.Entry<String, Set<String>> e + for (Map.Entry<TorVersion, Set<String>> e : this.nodeIndex.getBridgesByVersion().entrySet()) { - if (e.getKey().startsWith(this.version)) { - keepBridges.addAll(e.getValue()); + for (TorVersion[] versionRange : this.version) { + if ((null == versionRange[0] + || e.getKey().compareTo(versionRange[0]) >= 0) + && (null == versionRange[1] + || e.getKey().compareTo(versionRange[1]) <= 0 + || e.getKey().matchingPrefix(versionRange[1]))) { + keepBridges.addAll(e.getValue()); + } } } this.filteredBridges.keySet().retainAll(keepBridges); diff --git a/src/main/java/org/torproject/onionoo/server/ResourceServlet.java b/src/main/java/org/torproject/onionoo/server/ResourceServlet.java index 7913d22..22077ae 100644 --- a/src/main/java/org/torproject/onionoo/server/ResourceServlet.java +++ b/src/main/java/org/torproject/onionoo/server/ResourceServlet.java @@ -3,6 +3,8 @@ package org.torproject.onionoo.server; +import org.torproject.onionoo.updater.TorVersion; + import org.apache.commons.lang3.StringUtils; import java.io.IOException; @@ -292,7 +294,7 @@ public class ResourceServlet extends HttpServlet { rh.setContact(contactParts); } if (parameterMap.containsKey("version")) { - String versionParameter = this.parseVersionParameter( + List<TorVersion[]> versionParameter = this.parseVersionParameter( parameterMap.get("version")); if (null == versionParameter) { response.sendError(HttpServletResponse.SC_BAD_REQUEST); @@ -630,14 +632,35 @@ public class ResourceServlet extends HttpServlet { } private static Pattern versionParameterPattern = - Pattern.compile("^[0-9a-zA-Z.-]+$"); + Pattern.compile("^[0-9a-zA-Z,.-]+$"); - private String parseVersionParameter(String parameter) { + private List<TorVersion[]> parseVersionParameter(String parameter) { if (!versionParameterPattern.matcher(parameter).matches()) { /* Version contains illegal character(s). */ return null; } - return parameter; + List<TorVersion[]> result = new ArrayList<>(); + for (String listElement : parameter.split(",")) { + TorVersion fromVersion; + TorVersion toVersion; + if (listElement.contains("..")) { + fromVersion = TorVersion.of( + listElement.substring(0, listElement.lastIndexOf(".."))); + toVersion = TorVersion.of( + listElement.substring(listElement.lastIndexOf("..") + 2)); + } else { + fromVersion = toVersion = TorVersion.of(listElement); + } + if (null == fromVersion && null == toVersion) { + return null; + } + if (null != fromVersion && null != toVersion + && fromVersion.compareTo(toVersion) > 0) { + return null; + } + result.add(new TorVersion[] { fromVersion, toVersion }); + } + return result; } private String parseOperatingSystemParameter(String parameter) { diff --git a/src/main/java/org/torproject/onionoo/updater/TorVersion.java b/src/main/java/org/torproject/onionoo/updater/TorVersion.java index 6440283..3fb0ef0 100644 --- a/src/main/java/org/torproject/onionoo/updater/TorVersion.java +++ b/src/main/java/org/torproject/onionoo/updater/TorVersion.java @@ -3,7 +3,9 @@ package org.torproject.onionoo.updater; +import java.util.ArrayList; import java.util.HashMap; +import java.util.List; import java.util.Map; import java.util.SortedSet; @@ -15,16 +17,10 @@ import java.util.SortedSet; */ public class TorVersion implements Comparable<TorVersion> { - private int majorVersion; - - private int minorVersion; - - private int microVersion; + private List<Integer> versionNumbers = new ArrayList<>(); private String releaseSeries; - private Integer patchLevel = null; - private String statusTag = null; private static Map<String, TorVersion> knownVersions = new HashMap<>(); @@ -41,21 +37,32 @@ public class TorVersion implements Comparable<TorVersion> { } if (!knownVersions.containsKey(versionString)) { TorVersion result = new TorVersion(); - String[] components = versionString.split("-")[0].split("\\."); + boolean isValid = true; try { - result.majorVersion = Integer.parseInt(components[0]); - result.minorVersion = Integer.parseInt(components[1]); - result.microVersion = Integer.parseInt(components[2]); - result.releaseSeries = String.format("%d.%d.%d", - result.majorVersion, result.minorVersion, result.microVersion); - if (components.length == 4) { - result.patchLevel = Integer.parseInt(components[3]); - if (versionString.contains("-")) { - result.statusTag = versionString.split("-", 2)[1].split(" ")[0]; + String[] components = versionString.split("-")[0].split("\\.", -1); + for (int position = 0; position < 4 && position < components.length; + position++) { + if (!components[position].isEmpty()) { + result.versionNumbers.add(Integer.parseInt(components[position])); + } else if (0 == position || position < components.length - 1) { + /* Version cannot start with a blank, nor can it contain a blank in + * between two dots. */ + isValid = false; } } + if (result.versionNumbers.size() >= 3) { + result.releaseSeries = String.format("%d.%d.%d", + result.versionNumbers.get(0), result.versionNumbers.get(1), + result.versionNumbers.get(2)); + } + if (versionString.contains("-")) { + result.statusTag = versionString.split("-", 2)[1].split(" ")[0]; + } } catch (ArrayIndexOutOfBoundsException | NumberFormatException exception) { + isValid = false; + } + if (!isValid) { result = null; } knownVersions.put(versionString, result); @@ -69,27 +76,15 @@ public class TorVersion implements Comparable<TorVersion> { throw new NullPointerException(); } int result; - if ((result = Integer.compare(this.majorVersion, - other.majorVersion)) != 0) { - return result; - } - if ((result = Integer.compare(this.minorVersion, - other.minorVersion)) != 0) { - return result; + for (int position = 0; position < this.versionNumbers.size() + && position < other.versionNumbers.size(); position++) { + if ((result = Integer.compare(this.versionNumbers.get(position), + other.versionNumbers.get(position))) != 0) { + return result; + } } - if ((result = Integer.compare(this.microVersion, - other.microVersion)) != 0) { - return result; - } - if (null == this.patchLevel && null == other.patchLevel) { - return 0; - } else if (null == patchLevel) { - return -1; - } else if (null == other.patchLevel) { - return 1; - } else if ((result = Integer.compare(this.patchLevel, - other.patchLevel)) != 0) { - return result; + if (this.versionNumbers.size() != other.versionNumbers.size()) { + return this.versionNumbers.size() < other.versionNumbers.size() ? -1 : 1; } if (null == this.statusTag && null == other.statusTag) { return 0; @@ -108,20 +103,64 @@ public class TorVersion implements Comparable<TorVersion> { && this.compareTo((TorVersion) other) == 0; } + /** Return whether prefixes of this version and another version match. + * + * <p>Two versions A and B have the same prefix if A starts with B, B starts + * with A, or A and B are the same.</p> + */ + public boolean matchingPrefix(TorVersion other) { + if (null == other) { + throw new NullPointerException(); + } + for (int position = 0; position < this.versionNumbers.size() + && position < other.versionNumbers.size(); position++) { + if ((Integer.compare(this.versionNumbers.get(position), + other.versionNumbers.get(position))) != 0) { + return false; + } + } + if (null != this.statusTag && null != other.statusTag) { + return this.statusTag.equals(other.statusTag); + } + return true; + } + @Override public int hashCode() { - return 2 * Integer.hashCode(this.majorVersion) - + 3 * Integer.hashCode(this.minorVersion) - + 5 * Integer.hashCode(this.microVersion) - + 7 * (null == this.patchLevel ? 0 : this.patchLevel) - + 11 * (null == this.statusTag ? 0 : this.statusTag.hashCode()); + int result = 0; + for (int position = 0; position < this.versionNumbers.size(); position++) { + result += (2 * position + 1) + * Integer.hashCode(this.versionNumbers.get(position)); + } + if (null != this.statusTag) { + result += 11 * this.statusTag.hashCode(); + } + return result; + } + + @Override + public String toString() { + StringBuilder sb = new StringBuilder(); + for (int position = 0; position < this.versionNumbers.size(); position++) { + if (position > 0) { + sb.append('.'); + } + sb.append(this.versionNumbers.get(position)); + } + if (null != this.statusTag) { + sb.append('-').append(this.statusTag); + } + return sb.toString(); } /** Determine the version status of this tor version in the context of the * given recommended tor versions. */ public TorVersionStatus determineVersionStatus( SortedSet<TorVersion> recommendedVersions) { - if (recommendedVersions.contains(this)) { + if (null == this.releaseSeries) { + /* Only consider full versions, not partial versions. */ + return TorVersionStatus.UNRECOMMENDED; + } else if (recommendedVersions.contains(this)) { return TorVersionStatus.RECOMMENDED; } else if (this.compareTo(recommendedVersions.last()) > 0) { return TorVersionStatus.EXPERIMENTAL; diff --git a/src/test/java/org/torproject/onionoo/server/ResourceServletTest.java b/src/test/java/org/torproject/onionoo/server/ResourceServletTest.java index a6042b1..921d6e4 100644 --- a/src/test/java/org/torproject/onionoo/server/ResourceServletTest.java +++ b/src/test/java/org/torproject/onionoo/server/ResourceServletTest.java @@ -293,19 +293,19 @@ public class ResourceServletTest { this.runTest(request); assertNotNull("Summary document is null, status code is " + this.response.errorStatusCode, this.summaryDocument); - assertEquals(expectedRelaysNumber, + assertEquals("Unexpected number of relays.", expectedRelaysNumber, this.summaryDocument.relays.length); if (expectedRelaysNicknames != null) { for (int i = 0; i < expectedRelaysNumber; i++) { - assertEquals(expectedRelaysNicknames[i], + assertEquals("Unexpected relay nickname.", expectedRelaysNicknames[i], this.summaryDocument.relays[i].n); } } - assertEquals(expectedBridgesNumber, + assertEquals("Unexpected number of bridges.", expectedBridgesNumber, this.summaryDocument.bridges.length); if (expectedBridgesNicknames != null) { for (int i = 0; i < expectedBridgesNumber; i++) { - assertEquals(expectedBridgesNicknames[i], + assertEquals("Unexpected bridge nickname.", expectedBridgesNicknames[i], this.summaryDocument.bridges[i].n); } } @@ -1684,8 +1684,7 @@ public class ResourceServletTest { @Test public void testVersionBlaBlaBla() { - this.assertSummaryDocument("/summary?version=bla-bla-bla", 0, null, 0, - null); + this.assertErrorStatusCode("/summary?version=bla-bla-bla", 400); } @Test @@ -1705,8 +1704,9 @@ public class ResourceServletTest { @Test public void testVersion0232() { - /* This is correct when comparing strings. */ - this.assertSummaryDocument("/summary?version=0.2.3.2", 2, null, 0, null); + /* This is only correct when comparing strings, not when comparing parsed + * version numbers. */ + this.assertSummaryDocument("/summary?version=0.2.3.2", 0, null, 0, null); } @Test @@ -1716,11 +1716,76 @@ public class ResourceServletTest { } @Test - public void testVersionStart() { - /* This is also correct when comparing strings. */ + public void testVersionStar() { this.assertErrorStatusCode("/summary?version=*", 400); } + @Test + public void testVersionRangeTo() { + this.assertSummaryDocument("/summary?version=..0.2.3.24", 1, null, 1, null); + } + + @Test + public void testVersionRangeFrom() { + this.assertSummaryDocument("/summary?version=0.2.3.25..", 1, null, 1, null); + } + + @Test + public void testVersionRangeFromTo() { + this.assertSummaryDocument("/summary?version=0.2.3.24..0.2.3.25", 2, null, + 0, null); + } + + @Test + public void testVersionRangeFromToExchanged() { + this.assertErrorStatusCode("/summary?version=0.2.3.25..0.2.3.24", 400); + } + + @Test + public void testVersionTwoSingles() { + this.assertSummaryDocument("/summary?version=0.2.2.39,0.2.3.24", 1, null, 1, + null); + } + + @Test + public void testVersionTwoOtherSingles() { + this.assertSummaryDocument("/summary?version=0.2.2.39,0.2.4.4", 0, null, 2, + null); + } + + @Test + public void testVersionSingleAndRange() { + this.assertSummaryDocument("/summary?version=0.2.2.39,0.2.4..", 0, null, 2, + null); + } + + @Test + public void testVersion0AndLater() { + this.assertSummaryDocument("/summary?version=0..", 2, null, 2, null); + } + + @Test + public void testVersionJustTwoDots() { + /* Need at least a start or an end. */ + this.assertErrorStatusCode("/summary?version=..", 400); + } + + @Test + public void testVersion0ThreeDots() { + /* Parses as "all versions starting at 0.". */ + this.assertSummaryDocument("/summary?version=0...", 2, null, 2, null); + } + + @Test + public void testVersion0FourDots() { + this.assertErrorStatusCode("/summary?version=0....", 400); + } + + @Test + public void testVersion1AndEarlier() { + this.assertSummaryDocument("/summary?version=..1", 2, null, 2, null); + } + @Test(timeout = 100) public void testOperatingSystemLinux() { this.assertSummaryDocument( diff --git a/src/test/java/org/torproject/onionoo/updater/TorVersionTest.java b/src/test/java/org/torproject/onionoo/updater/TorVersionTest.java index b6a9764..e6f4e64 100644 --- a/src/test/java/org/torproject/onionoo/updater/TorVersionTest.java +++ b/src/test/java/org/torproject/onionoo/updater/TorVersionTest.java @@ -89,7 +89,15 @@ public class TorVersionTest { { "0.2.5.16", "0.2.5.17", false, false, -1 }, { "0.3.3.1-alpha", "0.3.3.1-alpha", true, true, 0 }, { "0.1.2.3", "00.01.02.03", true, true, 0 }, - { "0.1.2.3-alpha", "00.01.02.03-aallpphhaa", false, false, 1 } + { "0.1.2.3-alpha", "00.01.02.03-aallpphhaa", false, false, 1 }, + { "0", "0.1.2.3", false, false, -1 }, + { "0.", "0.1.2.3", false, false, -1 }, + { "0.1", "0.1.2.3", false, false, -1 }, + { "0.1.", "0.1.2.3", false, false, -1 }, + { "0.1.2", "0.1.2.3", false, false, -1 }, + { "0.1.2.", "0.1.2.3", false, false, -1 }, + { "0.2", "0.1.2.3", false, false, 1 }, + }); }

1 0

[onionoo/master] Prepare for 7.0-1.18.0 release.
by karsten＠torproject.org 10 Sep '18

10 Sep '18

commit 8b260b1938a2b73538310695a6e9935bb41ff884 Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Mon Sep 10 14:04:07 2018 +0200 Prepare for 7.0-1.18.0 release. --- CERT | 18 +++++++++--------- CHANGELOG.md | 2 +- build.xml | 4 ++-- .../org/torproject/onionoo/server/ResponseBuilder.java | 4 ++-- 4 files changed, 14 insertions(+), 14 deletions(-) diff --git a/CERT b/CERT index 61fa7c6..b90b397 100644 --- a/CERT +++ b/CERT @@ -1,8 +1,8 @@ -----BEGIN CERTIFICATE----- -MIIDaTCCAlGgAwIBAgIENNGkczANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJV +MIIDaTCCAlGgAwIBAgIELle0dTANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJV UzELMAkGA1UECBMCV0ExEDAOBgNVBAcTB1NlYXR0bGUxHTAbBgNVBAoTFFRoZSBU b3IgUHJvamVjdCwgSW5jMRgwFgYDVQQDEw9LYXJzdGVuIExvZXNpbmcwHhcNMTgw -NTIzMTUxNDU2WhcNMTgwODIxMTUxNDU2WjBlMQswCQYDVQQGEwJVUzELMAkGA1UE +ODI4MDcwNjM2WhcNMTgxMTI2MDcwNjM2WjBlMQswCQYDVQQGEwJVUzELMAkGA1UE CBMCV0ExEDAOBgNVBAcTB1NlYXR0bGUxHTAbBgNVBAoTFFRoZSBUb3IgUHJvamVj dCwgSW5jMRgwFgYDVQQDEw9LYXJzdGVuIExvZXNpbmcwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQChXn+IUp+o6G+k4ffxk3TkxZb3iXfiG7byNsG63olU @@ -11,11 +11,11 @@ Qw+VAhKTcEIv4yiR0BWapQyR07pgmKirYVjN6s6ef8NJzUptpxLlaYJ3ZfQfc4aE MXzScgaccwDFIWQ661lzLGCfeSxxa3Xy4wWsGwzNzLITYrrABcbg7yogLo2btNvD oEwGL3/baQdhl0dra6biVCZr9ydn3Hg57S55pUU0rBY25id78zUO8xrfNHw54wwX lOblGt75OOkahP/ZZSBxxoiknJ6y5VQV8y+noA4vigXFAgMBAAGjITAfMB0GA1Ud -DgQWBBSeh60M+/wMYyYhlxtuff2Hk9n7bzANBgkqhkiG9w0BAQsFAAOCAQEAJtEQ -B2AVpVtjTGU7uujUtEjSn1ICv7QLW/37TmHn+m1SWvXOVlSG81eb5JwX449Pn3w5 -K1Bx0JJmJ6Kec2kHtoR1r5/DUlTMtRqKQ5ZHQbvYMx+Ifq8TRALHjcw8p5Vw+gep -0zYbSQycklzFaFqLB8Cus0ICb+UY54HTddpezQ3IXS/vc4Vy07ocm8rUCz1s8L/r -ehTOxSym7G7+kcRzNplFOLL5iO8o6uHPyLR1TIAIXa0XZ41ogNl2q+6CvXG+UI/j -qkzSXD6FJK1Px2nxNFIe/w9NL+chSytIGnV3CImyiORuV+1OxMglyQspSGEbl1XP -OfiTEYHnp12BYMeRyw== +DgQWBBSeh60M+/wMYyYhlxtuff2Hk9n7bzANBgkqhkiG9w0BAQsFAAOCAQEAkXZs +3T3GTkZ+EGvZG5puzKdgZiSsLgIy25xdWsIx147AIZEJFKjEAtbu0osMpkTa96B6 +a+BHf7PTjQUuH3YOEmeW9ab8pwu5SRijCq2qkuvjjSLBcJzWnalcKDYYvoQte1// +Di8JqpRXCw20WY2bldTiafyG80E0RGfiX2I8vbDiPIhjwz9Wox8Q1rw1c9T/vRn9 +pI8FrHgTnDO6R54yD25QSpsj+hC+IDkFKO17vGCIaJrPG5o6th438ijEwJsG+LRB +4zKKKsFTby7UJI3Ag8xolIhsBkRZO2j4Na35i15SZ7QJNj9J5g171z8RyOmyIQbg +q7OXN2iiRIxiIJwoQw== -----END CERTIFICATE----- diff --git a/CHANGELOG.md b/CHANGELOG.md index 8f69f6a..2670f8a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,4 @@ -# Changes in version 7.0-1.18.0 - 2018-09-?? +# Changes in version 7.0-1.18.0 - 2018-09-10 * Medium changes - Extend "version" parameter to support lists and ranges. diff --git a/build.xml b/build.xml index 0bb3019..65e5f84 100644 --- a/build.xml +++ b/build.xml @@ -8,9 +8,9 @@ <property name="javadoc-title" value="Onionoo API Documentation"/> <property name="implementation-title" value="Onionoo" /> - <property name="onionoo.protocol.version" value="6.2"/> + <property name="onionoo.protocol.version" value="7.0"/> <property name="release.version" - value="${onionoo.protocol.version}-1.17.1-dev"/> + value="${onionoo.protocol.version}-1.18.0"/> <property name="metricslibversion" value="2.4.0"/> <property name="jetty.version" value="-9.2.21.v20170120" /> <property name="warfile" diff --git a/src/main/java/org/torproject/onionoo/server/ResponseBuilder.java b/src/main/java/org/torproject/onionoo/server/ResponseBuilder.java index 54d8dc5..c87504c 100644 --- a/src/main/java/org/torproject/onionoo/server/ResponseBuilder.java +++ b/src/main/java/org/torproject/onionoo/server/ResponseBuilder.java @@ -123,9 +123,9 @@ public class ResponseBuilder { return this.charsWritten; } - private static final String PROTOCOL_VERSION = "6.2"; + private static final String PROTOCOL_VERSION = "7.0"; - private static final String NEXT_MAJOR_VERSION_SCHEDULED = "2018-09-03"; + private static final String NEXT_MAJOR_VERSION_SCHEDULED = null; private void writeRelays(List<SummaryDocument> relays, PrintWriter pw) { this.write(pw, "{\"version\":\"%s\",\n", PROTOCOL_VERSION);

1 0

[translation/support-portal_completed] Update translations for support-portal_completed
by translation＠torproject.org 10 Sep '18

10 Sep '18

commit 497778d3833d299a9130f3a4ae8da2c19c5510bd Author: Translation commit bot <translation(a)torproject.org> Date: Mon Sep 10 15:18:59 2018 +0000 Update translations for support-portal_completed --- contents+it.po | 530 +++++++++++++++++++++++++++++---------------------------- 1 file changed, 268 insertions(+), 262 deletions(-) diff --git a/contents+it.po b/contents+it.po index 9b60f057e..f68c1e743 100644 --- a/contents+it.po +++ b/contents+it.po @@ -17,7 +17,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2018-08-27 12:12+CET\n" +"POT-Creation-Date: 2018-09-07 17:41+CET\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: The Gamer <xthegamerx(a)hotmail.com>, 2018\n" "Language-Team: Italian (https://www.transifex.com/otf/teams/1519/it/)\n" @@ -46,6 +46,11 @@ msgstr "" "attività privata, potresti dimenticartene e utilizzare per errore quel " "browser non privato per fare qualcosa che intendevi fare con Tor Browser." +#: http//localhost/misc/misc-4/ +#: (content/misc/misc-4/contents+en.lrquestion.description) +msgid "We do not recommend using Tor with BitTorrent." +msgstr "Sconsigliamo di usare Tor con BitTorrent." + #: http//localhost/connecting/connecting-2/ #: (content/connecting/connecting-2/contents+en.lrquestion.description) #: http//localhost/censorship/censorship-5/ @@ -75,6 +80,12 @@ msgstr "" "da un exit relay dall'altra parte del mondo, il tuo account potrebbe essere " "bloccato o sospeso)." +#: http//localhost/https/https-1/ +#: (content/https/https-1/contents+en.lrquestion.description) +msgid "Tor prevents eavesdroppers from learning sites that you visit." +msgstr "" +"Tor impedisce agli spioni di conoscere quali siti internet hai visitato." + #: http//localhost/tbb/tbb-41/ #: (content/tbb/tbb-41/contents+en.lrquestion.description) msgid "" @@ -260,16 +271,6 @@ msgstr "" msgid "What is a .onion or what are onion services?" msgstr "Che cosa è un .onion o cosa sono i servizi onion?" -#: http//localhost/operators/operators-1/ -#: (content/operators/operators-1/contents+en.lrquestion.description) -msgid "" -"After a few hours (to give it enough time to propagate), you can query Atlas" -" to see whether your relay has successfully registered in the network." -msgstr "" -"Dopo un po' di ore (per dare tempo a sufficienza per propagarsi), potrai " -"consultare l'Atlas per vedere se il tuo relay è stato registrato con " -"successo nel network." - #: http//localhost/misc/misc-12/ #: (content/misc/misc-12/contents+en.lrquestion.description) msgid "" @@ -316,14 +317,10 @@ msgid "" msgstr "" "Sfortunatamente, non abbiamo ancora una versione di Tor Browser per ChromeOS" -#: http//localhost/operators/operators-6/ -#: (content/operators/operators-6/contents+en.lrquestion.description) -msgid "" -"* Look for a log entry in /var/log/syslog such as \"Self-testing indicates " -"your ORPort is reachable from the outside. Excellent.\"" -msgstr "" -"* Cerca una voce nel log var/log/syslog simile a \"Self-testing indicates " -"your ORPort is reachable from the outside. Excellent.\"" +#: http//localhost/tbb/tbb-27/ +#: (content/tbb/tbb-27/contents+en.lrquestion.description) +msgid "<img class=\"\" src=\"/static/images/image5.png\" alt=\"New release alert\">" +msgstr "<img class=\"\" src=\"/static/images/image5.png\" alt=\"New release alert\">" #: http//localhost/misc/misc-5/ #: (content/misc/misc-5/contents+en.lrquestion.title) @@ -340,15 +337,14 @@ msgstr "" msgid "$ sudo apt-get install tor deb.torproject.org-keyring" msgstr "$ sudo apt-get install tor deb.torproject.org-keyring" -#: http//localhost/misc/misc-3/ -#: (content/misc/misc-3/contents+en.lrquestion.description) +#: http//localhost/misc/misc-12/ +#: (content/misc/misc-12/contents+en.lrquestion.description) msgid "" -"We feel that talking openly about our funders and funding model is the best " -"way to maintain trust with our community." +"Many exit nodes are configured to block certain types of file sharing " +"traffic, such as BitTorrent." msgstr "" -"Pensiamo che parlare apertamente dei nostri finanziamenti e del nostro " -"modello di finanziamento sia il miglior modo per mantenere la fiducia della " -"nostra comunità." +"Molti exit node sono configurati per bloccare determinati tipi di traffico " +"condiviso, come ad esempio BitTorrent." #: http//localhost/censorship/censorship-4/ #: (content/censorship/censorship-4/contents+en.lrquestion.seo_slug) @@ -410,6 +406,18 @@ msgstr "" msgid "RunAsDaemon 1" msgstr "RunAsDaemon 1" +#: http//localhost/connecting/connecting-2/ +#: (content/connecting/connecting-2/contents+en.lrquestion.description) +#: http//localhost/censorship/censorship-5/ +#: (content/censorship/censorship-5/contents+en.lrquestion.description) +msgid "" +"If a SOCKS proxy is required for your network setup, then please make sure " +"you’ve entered your proxy details correctly." +msgstr "" +"Se le impostazioni del tuo network prevedono l'utilizzo di un SOCKS proxy, " +"assicurati per favore che tu abbia inserito in modo corretto i dettagli del " +"proxy." + #: http//localhost/operators/operators-4/ #: (content/operators/operators-4/contents+en.lrquestion.seo_slug) msgid "using-correct-packages" @@ -572,6 +580,15 @@ msgid "You can update Tor Browser as soon as a new version is released." msgstr "" "Potrai aggiornare Tor Browser non appena sarà rilasciata una nuova versione." +#: http//localhost/onionservices/onionservices-2/ +#: (content/onionservices/onionservices-2/contents+en.lrquestion.description) +msgid "" +"<img class=\"\" src=\"/static/images/padlock-onion.png\" alt=\"Green onion " +"with a padlock\">" +msgstr "" +"<img class=\"\" src=\"/static/images/padlock-onion.png\" alt=\"Green onion " +"with a padlock\">" + #: http//localhost/tbb/tbb-18/ #: (content/tbb/tbb-18/contents+en.lrquestion.description) msgid "" @@ -581,10 +598,6 @@ msgstr "" "Siamo spiacenti, ma attualmente non c'è alcun supporto ufficiale " "sull'eseguire Tor Browser su * BSD." -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) -#: http//localhost/tbb/tbb-29/ -#: (content/tbb/tbb-29/contents+en.lrquestion.description) #: http//localhost/https/https-1/ #: (content/https/https-1/contents+en.lrquestion.description) msgid "<div class=\"col-md-6\">" @@ -595,15 +608,6 @@ msgstr "<div class=\"col-md-6\">" msgid "* For OS X" msgstr "Per OS X" -#: http//localhost/misc/misc-12/ -#: (content/misc/misc-12/contents+en.lrquestion.description) -msgid "" -"Many exit nodes are configured to block certain types of file sharing " -"traffic, such as bittorrent." -msgstr "" -"Molti exit node sono configurati per bloccare determinati tipi di traffico " -"condiviso, come ad esempio bittorrent." - #: http//localhost/tbb/tbb-21/ #: (content/tbb/tbb-21/contents+en.lrquestion.description) msgid "" @@ -651,14 +655,14 @@ msgstr "servizi-onion" msgid "Onion Services" msgstr "Servizi Onion" -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) +#: http//localhost/operators/operators-7/ +#: (content/operators/operators-7/contents+en.lrquestion.description) msgid "" -"<img class=\"card-img-top\" src=\"/static/images/image3.png\" alt=\"New " -"release alert\">" +"If law enforcement becomes interested in traffic from your exit relay, it's " +"possible that officers will seize your computer." msgstr "" -"<img class=\"card-img-top\" src=\"/static/images/image3.png\" alt=\"New " -"release alert\">" +"Se le forze dell'ordine si interessano al traffico passato dal tuo exit " +"relay, è possibile che gli agenti sequestrino il tuo computer." #: http//localhost/censorship/censorship-7/ #: (content/censorship/censorship-7/contents+en.lrquestion.description) @@ -671,6 +675,11 @@ msgstr "" "transports.html.en\">pluggable transports</a></mark> per maggiori " "informazioni. " +#: http//localhost/tormobile/tormobile-2/ +#: (content/tormobile/tormobile-2/contents+en.lrquestion.title) +msgid "Who is the Guardian Project?" +msgstr "Cos'è il Guardian Project?" + #: http//localhost/connecting/connecting-3/ #: (content/connecting/connecting-3/contents+en.lrquestion.description) #: http//localhost/onionservices/onionservices-3/ @@ -859,6 +868,11 @@ msgstr "eseguire-istanze-multiple-di-tor-browser" msgid "having-trouble-connecting-to-tor" msgstr "problemi-a-connettersi-a-tor" +#: http//localhost/misc/misc-4/ +#: (content/misc/misc-4/contents+en.lrquestion.title) +msgid "Can I use Tor with BitTorrent?" +msgstr "Posso usare Tor con BitTorrent?" + #: http//localhost/misc/misc-3/ #: (content/misc/misc-3/contents+en.lrquestion.description) msgid "" @@ -935,11 +949,27 @@ msgstr "" "Applicazioni (su macOS dovrai andare nella cartella Applicazioni e " "completare da lì il processo di installazione)." +#: http//localhost/tbb/tbb-22/ +#: (content/tbb/tbb-22/contents+en.lrquestion.seo_slug) +msgid "make-tor-faster" +msgstr "velocizzare-tor" + #: http//localhost/misc/misc-8/ #: (content/misc/misc-8/contents+en.lrquestion.title) msgid "Can I use the Tor logo in my product?" msgstr "Posso usare il logo di Tor nel mio prodotto?" +#: http//localhost/connecting/connecting-2/ +#: (content/connecting/connecting-2/contents+en.lrquestion.description) +#: http//localhost/censorship/censorship-5/ +#: (content/censorship/censorship-5/contents+en.lrquestion.description) +msgid "" +"If you see lines like this in your Tor log, it means that Tor failed to " +"complete a TLS handshake with the directory authorities." +msgstr "" +"Se vedi righe come questa nel tuo log di Tor, significa che Tor ha fallito " +"un handshake TLS con l'elenco autorità." + #: http//localhost/tbb/tbb-19/ #: (content/tbb/tbb-19/contents+en.lrquestion.description) #: http//localhost/censorship/censorship-4/ @@ -965,15 +995,6 @@ msgstr "" "tratta di un software molto insicuro che può facilmente compromettere la " "privacy o propinarti del malware." -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) -msgid "" -"<img class=\"card-img-top\" src=\"/static/images/image4.png\" alt=\"New " -"release alert\">" -msgstr "" -"<img class=\"card-img-top\" src=\"/static/images/image4.png\" alt=\"New " -"release alert\">" - #: http//localhost/onionservices/onionservices-1/ #: (content/onionservices/onionservices-1/contents+en.lrquestion.description) msgid "You can access these websites by using Tor Browser." @@ -1039,11 +1060,6 @@ msgstr "Tor Mobile" msgid "How can I share files anonymously through Tor?" msgstr "Come posso condividere file, anonimamente, attraverso Tor?" -#: http//localhost/misc/misc-4/ -#: (content/misc/misc-4/contents+en.lrquestion.description) -msgid "We do not recommend using Tor with bittorrent." -msgstr "Sconsigliamo di usare Tor con bittorrent" - #: http//localhost/tbb/tbb-10/ #: (content/tbb/tbb-10/contents+en.lrquestion.description) msgid "* tor.real" @@ -1056,17 +1072,26 @@ msgstr "limiti di banda)" #: http//localhost/connecting/connecting-2/ #: (content/connecting/connecting-2/contents+en.lrquestion.description) +#: http//localhost/censorship/censorship-5/ +#: (content/censorship/censorship-5/contents+en.lrquestion.description) msgid "##### Common log error #4: Clock skew" msgstr "##### Errore di log comune #4: orologio disallineato" -#: http//localhost/tbb/tbb-23/ -#: (content/tbb/tbb-23/contents+en.lrquestion.description) +#: http//localhost/tbb/tbb-29/ +#: (content/tbb/tbb-29/contents+en.lrquestion.description) msgid "" -"<mark><a href=\"https://duckduckgo.com/\">DuckDuckGo</a></mark> is the " -"default search engine in Tor Browser." +"Both options are located in the Menu, but you can also access the New " +"Circuit option inside the site information menu, in the URL bar." msgstr "" -"<mark><a href=\"https://duckduckgo.com/\">DuckDuckGo</a></mark> è il motore " -"di ricerca predefinito in Tor Browser." +"Entrambe le opzioni sono nel menu, ma puoi accedere al nuovo circuito anche " +"all'interno delle informazioni del sito, nella barra degli URL." + +#: http//localhost/connecting/connecting-2/ +#: (content/connecting/connecting-2/contents+en.lrquestion.description) +#: http//localhost/censorship/censorship-5/ +#: (content/censorship/censorship-5/contents+en.lrquestion.description) +msgid "Using bridges will likely fix this." +msgstr "L'uso di bridge potrebbe risolvere il problema." #: http//localhost/misc/misc-1/ #: (content/misc/misc-1/contents+en.lrquestion.description) @@ -1130,6 +1155,15 @@ msgstr "Per quali piattaforme è disponibile Tor Browser?" msgid "Tor on Android is provided by The Guardian Project." msgstr "Su Android Tor è gestito da The Guardian Project." +#: http//localhost/censorship/censorship-2/ +#: (content/censorship/censorship-2/contents+en.lrquestion.description) +msgid "" +"If you are unable to connect to an onion service, please see <a " +"href=\"/#onionservices-3\">I cannot reach X.onion!</a>" +msgstr "" +"Se non riesci a connetterti ad un servizio onion, per favore consulta <a " +"href=\"/#onionservices-3\">Non riesco a raggiungere X.onion!</a>" + #: http//localhost/connecting/connecting-2/ #: (content/connecting/connecting-2/contents+en.lrquestion.description) #: http//localhost/censorship/censorship-5/ @@ -1170,12 +1204,14 @@ msgstr "" "network, puoi controllarle da <mark><a " "href=\"https://metrics.torproject.org/\">Tor Metrics</a></mark>." -#: http//localhost/misc/misc-2/ -#: (content/misc/misc-2/contents+en.lrquestion.title) -msgid "Why don't you prevent bad people from doing bad things when using Tor?" +#: http//localhost/tbb/tbb-26/ +#: (content/tbb/tbb-26/contents+en.lrquestion.description) +msgid "" +"Please see the <mark><a href=\"https://www.eff.org/https-" +"everywhere/faq\">HTTPS Everywhere FAQ</a></mark>." msgstr "" -"Perchè non evitate ai malintenzionati di compiere azioni criminali tramite " -"Tor?" +"Per favore consulta la <mark><a href=\"https://www.eff.org/https-" +"everywhere/faq\">HTTPS Everywhere FAQ</a></mark>. " #: http//localhost/misc/misc-5/ #: (content/misc/misc-5/contents+en.lrquestion.seo_slug) @@ -1306,6 +1342,16 @@ msgstr "" msgid "<img class=\"card-img-top\" src=\"/static/images/image6.png\" alt=\"https\">" msgstr "<img class=\"card-img-top\" src=\"/static/images/image6.png\" alt=\"https\">" +#: http//localhost/misc/misc-12/ +#: (content/misc/misc-12/contents+en.lrquestion.description) +msgid "" +"BitTorrent in specific is <mark><a href=\"https://blog.torproject.org" +"/bittorrent-over-tor-isnt-good-idea\">not anonymous over Tor</a></mark>." +msgstr "" +"BitTorrent nello specifico <mark><a href=\"https://blog.torproject.org" +"/bittorrent-over-tor-isnt-good-idea\">non è reso anonimo tramite " +"Tor</a></mark>." + #: http//localhost/tbb/tbb-11/ #: (content/tbb/tbb-11/contents+en.lrquestion.description) msgid "" @@ -1358,16 +1404,10 @@ msgstr "" msgid "tor-funding" msgstr "finanziamento-tor" -#: http//localhost/tbb/tbb-33/ -#: (content/tbb/tbb-33/contents+en.lrquestion.description) -msgid "" -"If you'd like to become a relay, please see our <mark><a " -"href=\"https://trac.torproject.org/projects/tor/wiki/TorRelayGuide\">Tor " -"Relay Guide</a></mark>." -msgstr "" -"Se desideri diventare un relay, puoi consultare la nostra <mark><a " -"href=\"https://trac.torproject.org/projects/tor/wiki/TorRelayGuide\">Guida " -"ai Tor Relay</a></mark>. " +#: http//localhost/tbb/tbb-27/ +#: (content/tbb/tbb-27/contents+en.lrquestion.description) +msgid "Tor browser will install the updates." +msgstr "Tor browser installerà gli aggiornamenti." #: http//localhost/operators/operators-4/ #: (content/operators/operators-4/contents+en.lrquestion.description) @@ -1404,6 +1444,11 @@ msgstr "" " e cerca il prompt che ti chiede di scegliere una directory dove scaricarlo." #: http//localhost/operators/operators-7/ +#: (content/operators/operators-7/contents+en.lrquestion.seo_slug) +msgid "run-exit-from-home" +msgstr "implementare-exit-da-casa" + +#: http//localhost/operators/operators-7/ #: (content/operators/operators-7/contents+en.lrquestion.title) msgid "Should I run an exit relay from home?" msgstr "Dovrei implementare un exit relay da casa?" @@ -1424,24 +1469,6 @@ msgstr "" "href=\"https://trac.torproject.org/projects/tor/wiki/doc/TorExitGuidelines\">linee" " guida sugli exit relay</a></mark>" -#: http//localhost/censorship/censorship-5/ -#: (content/censorship/censorship-5/contents+en.lrquestion.description) -msgid "" -"13-11-17 19:53:49.300 [WARN] 1 connections died in state connect()ing with " -"SSL state (No SSL object)</code></pre>If you see lines like this in your Tor" -" log, it means that Tor failed to complete a TLS handshake with the " -"directory authorities. Using bridges will likely fix this.<h5>Common log " -"error #4: Clock skew</h5><pre><code> 19.11.2017 00:04:47.400 [NOTICE] " -"Opening Socks listener on 127.0.0.1:9150" -msgstr "" -"13-11-17 19:53:49.300 [WARN] 1 connections died in state connect()ing with " -"SSL state (No SSL object)</code></pre>Se vedi righe come queste sul tuo log " -"di Tor, significa che Tor non è riuscito a completare la connessione TLS con" -" le directory authorities. Utilizzare un ponte molto probabilmente risolverà" -" questo problema.<h5>Errore di registro comune #4: Clock " -"skew</h5><pre><code> 19.11.2017 00:04:47.400 [NOTICE] Opening Socks listener" -" on 127.0.0.1:9150 " - #: http//localhost/operators/operators-4/ #: (content/operators/operators-4/contents+en.lrquestion.description) msgid "" @@ -1520,14 +1547,16 @@ msgstr "tracciare-utenti-tor" msgid "tor-browser-will-not-connect-no-censorship" msgstr "tor-browser-non-si-connette-no-censura" -#: http//localhost/tbb/tbb-31/ -#: (content/tbb/tbb-31/contents+en.lrquestion.description) +#: http//localhost/connecting/connecting-2/ +#: (content/connecting/connecting-2/contents+en.lrquestion.description) +#: http//localhost/censorship/censorship-5/ +#: (content/censorship/censorship-5/contents+en.lrquestion.description) msgid "" -"For Android, The Guardian Project maintains the Tor-powered apps Orbot and " -"Orfox." +"If you see lines like these in your Tor log, it means you are failing to " +"connect to a SOCKS proxy." msgstr "" -"Per Android, The guardian Project mantiene le app basate su Tor Orbot e " -"Orfox." +"Se vedi delle righe simili a queste nel tuo log di Tor, significa che non " +"riesci a conetterti al SOCKS proxy." #: http//localhost/tbb/tbb-35/ #: (content/tbb/tbb-35/contents+en.lrquestion.description) @@ -1568,10 +1597,14 @@ msgstr "ExitPolicy reject *:*" msgid "BridgeRelay 1" msgstr "BridgeRelay 1" -#: http//localhost/operators/operators-7/ -#: (content/operators/operators-7/contents+en.lrquestion.seo_slug) -msgid "run-exit-from-home" -msgstr "implementare-exit-da-casa" +#: http//localhost/operators/operators-6/ +#: (content/operators/operators-6/contents+en.lrquestion.description) +msgid "" +"* Look for a log entry in /var/log/syslog such as \"Self-testing indicates " +"your ORPort is reachable from the outside. Excellent.\"" +msgstr "" +"* Cerca una voce nel log var/log/syslog simile a \"Self-testing indicates " +"your ORPort is reachable from the outside. Excellent.\"" #: http//localhost/tbb/tbb-22/ #: (content/tbb/tbb-22/contents+en.lrquestion.description) @@ -1603,6 +1636,11 @@ msgstr "" msgid "connecting-to-tor" msgstr "connessione-a-tor" +#: http//localhost/tbb/tbb-27/ +#: (content/tbb/tbb-27/contents+en.lrquestion.description) +msgid "<img class=\"\" src=\"/static/images/image3.png\" alt=\"New release alert\">" +msgstr "<img class=\"\" src=\"/static/images/image3.png\" alt=\"New release alert\">" + #: http//localhost/misc/misc-5/ #: (content/misc/misc-5/contents+en.lrquestion.description) msgid "" @@ -1629,11 +1667,6 @@ msgstr "usare-il-logo-tor" msgid "get-rid-of-captchas" msgstr "liberarsi-dai-captcha" -#: http//localhost/censorship/censorship-3/ -#: (content/censorship/censorship-3/contents+en.lrquestion.seo_slug) -msgid "how-do-i-download-tor-if-torproject-org-is-blocked" -msgstr "come-scarico-tor-se-torproject-org-è-bloccato" - #: http//localhost/tbb/tbb-2/ #: (content/tbb/tbb-2/contents+en.lrquestion.description) msgid "" @@ -1651,10 +1684,12 @@ msgstr "primo-indirizzo-circuito-relay" #: http//localhost/tbb/tbb-29/ #: (content/tbb/tbb-29/contents+en.lrquestion.description) -msgid "Both options are located in the Torbutton (little green onion) menu." +msgid "" +"<img class=\"\" src=\"/static/images/new-circuit-display.png\" alt=\"New " +"Circuit for this Site\">" msgstr "" -"Entrambe queste opzioni si trovano nel menù Torbutton (la piccola cipolla " -"verde)." +"<img class=\"\" src=\"/static/images/new-circuit-display.png\" alt=\"New " +"Circuit for this Site\">" #: http//localhost/tbb/tbb-28/ #: (content/tbb/tbb-28/contents+en.lrquestion.description) @@ -1666,13 +1701,6 @@ msgstr "" "nominata \"tor-browser_en-US\" se state utilizzando la versione in Inglese " "di Tor Browser." -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) -#: http//localhost/tbb/tbb-29/ -#: (content/tbb/tbb-29/contents+en.lrquestion.description) -msgid "<h4 class=\"card-title\">Card title</h4>" -msgstr "<h4 class=\"card-title\">Titolo della scheda</h4> " - #: http//localhost/misc/ (content/misc/contents+en.lrtopic.seo_slug) msgid "misc" msgstr "varie" @@ -1688,10 +1716,16 @@ msgstr "" "/en-US/firefox/organizations/\">Firefox ESR</a></mark>, quindi è possibile " "che si verifichino errori che riugardano Firefox. " -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) -msgid "Tor browser will install the updates." -msgstr "Tor browser installerà gli aggiornamenti." +#: http//localhost/tbb/tbb-33/ +#: (content/tbb/tbb-33/contents+en.lrquestion.description) +msgid "" +"If you'd like to become a relay, please see our <mark><a " +"href=\"https://trac.torproject.org/projects/tor/wiki/TorRelayGuide\">Tor " +"Relay Guide</a></mark>." +msgstr "" +"Se desideri diventare un relay, puoi consultare la nostra <mark><a " +"href=\"https://trac.torproject.org/projects/tor/wiki/TorRelayGuide\">Guida " +"ai Tor Relay</a></mark>. " #: http//localhost/https/https-1/ #: (content/https/https-1/contents+en.lrquestion.seo_slug) @@ -1703,15 +1737,6 @@ msgstr "possono-gli-spioni-vedere-le-informazioni-che-condivido" msgid "Can I set Tor Browser as my default browser?" msgstr "Posso impostare Tor Browser come il mio browser predefinito?" -#: http//localhost/tbb/tbb-26/ -#: (content/tbb/tbb-26/contents+en.lrquestion.description) -msgid "" -"Please see the <mark><a href=\"https://www.eff.org/https-" -"everywhere/faq\">HTTPS Everywhere</a></mark>." -msgstr "" -"Per favore consulta <mark><a href=\"https://www.eff.org/https-" -"everywhere/faq\">HTTPS Everywhere</a></mark>. " - #: http//localhost/connecting/connecting-2/ #: (content/connecting/connecting-2/contents+en.lrquestion.description) #: http//localhost/censorship/censorship-5/ @@ -1825,8 +1850,6 @@ msgstr "<img class=\"card-img-top\" src=\"/static/images/image2.png\" alt=\"http #: http//localhost/tbb/tbb-7/ #: (content/tbb/tbb-7/contents+en.lrquestion.description) -#: http//localhost/censorship/censorship-2/ -#: (content/censorship/censorship-2/contents+en.lrquestion.description) msgid "" "If you are unable to connect to an onion service, please see <a " "href=\"#onionservices-3\">I cannot reach X.onion!</a>" @@ -1884,6 +1907,16 @@ msgid "###### Common log error #1: Proxy connection failure" msgstr "" "###### Errore di registro comune #1: Connessione al proxy non riuscita" +#: http//localhost/misc/misc-3/ +#: (content/misc/misc-3/contents+en.lrquestion.description) +msgid "" +"We feel that talking openly about our funders and funding model is the best " +"way to maintain trust with our community." +msgstr "" +"Pensiamo che parlare apertamente dei nostri finanziamenti e del nostro " +"modello di finanziamento sia il miglior modo per mantenere la fiducia della " +"nostra comunità." + #: http//localhost/tbb/tbb-9/ #: (content/tbb/tbb-9/contents+en.lrquestion.seo_slug) msgid "using-tor-with-a-browser-besides-tor-browser" @@ -1964,15 +1997,6 @@ msgstr "quali-piattaforme-tor-browser-disponibile" msgid "* TorBrowser" msgstr "* TorBrowser" -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) -msgid "" -"<h4 class=\"card-title\">Tor Browser will prompt you to update the software " -"once a new version has been released.</h4>" -msgstr "" -"<h4 class=\"card-title\">Tor Browser ti ricorderà di aggiornare il software " -"quando verrà rilasciata una nuova versione.</h4> " - #: http//localhost/operators/operators-1/ #: (content/operators/operators-1/contents+en.lrquestion.description) #: http//localhost/operators/operators-2/ @@ -2012,6 +2036,15 @@ msgstr "" "Se hai dei problemi nel connetterti, per favore seleziona l'opzione \"copia " "il log di Tor negli appunti\"." +#: http//localhost/tbb/tbb-23/ +#: (content/tbb/tbb-23/contents+en.lrquestion.description) +msgid "" +"<mark><a href=\"https://duckduckgo.com/\">DuckDuckGo</a></mark> is the " +"default search engine in Tor Browser." +msgstr "" +"<mark><a href=\"https://duckduckgo.com/\">DuckDuckGo</a></mark> è il motore " +"di ricerca predefinito in Tor Browser." + #: http//localhost/connecting/connecting-2/ #: (content/connecting/connecting-2/contents+en.lrquestion.description) #: http//localhost/censorship/censorship-5/ @@ -2061,8 +2094,6 @@ msgstr "" "Per favore consulta il <mark><a href=\"https://duck.co/help\">portale di " "supporto di DuckDuckGo</a></mark>." -#: http//localhost/connecting/connecting-2/ -#: (content/connecting/connecting-2/contents+en.lrquestion.description) #: http//localhost/censorship/censorship-5/ #: (content/censorship/censorship-5/contents+en.lrquestion.description) msgid "" @@ -2104,6 +2135,8 @@ msgstr "" #: http//localhost/connecting/connecting-2/ #: (content/connecting/connecting-2/contents+en.lrquestion.description) +#: http//localhost/censorship/censorship-5/ +#: (content/censorship/censorship-5/contents+en.lrquestion.description) msgid "" "13-11-17 19:53:49.300 [WARN] 1 connections died in state connect()ing with " "SSL state (No SSL object)" @@ -2243,11 +2276,6 @@ msgstr "13-11-17 19:53:49.300 [WARN] 10 connections have failed: " msgid "When is Tor Browser for Android being released?" msgstr "Quando sarà rilasciato Tor Browser per Android?" -#: http//localhost/tbb/tbb-29/ -#: (content/tbb/tbb-29/contents+en.lrquestion.description) -msgid "<p class=\"card-text\">Card text</div>" -msgstr "<p class=\"card-text\">Testo della scheda</div> " - #: http//localhost/operators/operators-1/ #: (content/operators/operators-1/contents+en.lrquestion.seo_slug) msgid "how-do-i-run-a-middle-or-guard-relay" @@ -2296,15 +2324,6 @@ msgstr "" msgid "* firefox.exe" msgstr "* firefox.exe" -#: http//localhost/operators/operators-7/ -#: (content/operators/operators-7/contents+en.lrquestion.description) -msgid "" -"If law enforcement becomes interested in traffic from your exit relay, it's " -"possible that officers will seize your computer." -msgstr "" -"Se le forze dell'ordine si interessano al traffico passato dal tuo exit " -"relay, è possibile che gli agenti sequestrino il tuo computer." - #: http//localhost/misc/misc-11/ #: (content/misc/misc-11/contents+en.lrquestion.seo_slug) msgid "change-the-number-of-hops-tor-uses" @@ -2335,6 +2354,17 @@ msgid "" msgstr "" "11/1/2017 21:11:43 PM.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150" +#: http//localhost/onionservices/onionservices-2/ +#: (content/onionservices/onionservices-2/contents+en.lrquestion.description) +msgid "" +"When accessing a website that uses an onion service, Tor Browser will show " +"at the URL bar an icon of a little green onion displaying the state of your " +"connection: secure and using an onion service." +msgstr "" +"Quando si accede ad un sito che usa un servizio onion, Tor Browser mostrerà " +"nella barra degli URL un'icona di una piccola cipolla verde che indica lo " +"stato della tua connessione: sicuro e con un servizio onion." + #: http//localhost/misc/misc-9/ #: (content/misc/misc-9/contents+en.lrquestion.description) msgid "Vidalia is no longer maintained or supported." @@ -2466,6 +2496,15 @@ msgstr "tor-browser-per-android" msgid "cannot-find-tor-on-windows" msgstr "non-riesco-a-trovare-tor-su-windows" +#: http//localhost/tbb/tbb-27/ +#: (content/tbb/tbb-27/contents+en.lrquestion.description) +msgid "" +"Tor Browser will prompt you to update the software once a new version has " +"been released." +msgstr "" +"Tor Browser ti ricorderà di aggiornare il software quando verrà rilasciata " +"una nuova versione. " + #: http//localhost/faq/faq-3/ #: (content/faq/faq-3/contents+en.lrquestion.description) msgid "" @@ -2718,6 +2757,15 @@ msgstr "" "* In radice, aggiungi le seguenti linee a /etc/apt/sources.list. Utilizza la" " stessa versione che hai trovato nel passaggio precedente <version>. " +#: http//localhost/onionservices/onionservices-2/ +#: (content/onionservices/onionservices-2/contents+en.lrquestion.description) +msgid "" +"And if you're accessing a website with https and onion service, it will show" +" an icon of a green onion and a padlock." +msgstr "" +"E se stai accedendo ad un sito con https e un servizio onion, mostrerà " +"un'icona di una cipolla verde ed un lucchetto." + #: http//localhost/https/https-1/ #: (content/https/https-1/contents+en.lrquestion.description) msgid "" @@ -2810,6 +2858,13 @@ msgstr "" msgid "censorship" msgstr "censura" +#: http//localhost/misc/misc-2/ +#: (content/misc/misc-2/contents+en.lrquestion.title) +msgid "Why don't you prevent bad people from doing bad things when using Tor?" +msgstr "" +"Perchè non evitate ai malintenzionati di compiere azioni criminali tramite " +"Tor?" + #: http//localhost/misc/misc-5/ #: (content/misc/misc-5/contents+en.lrquestion.description) msgid "" @@ -2893,16 +2948,6 @@ msgstr "ContactInfo 0xFFFFFFFF Persona Casuale <nobody AT example dot com> " msgid "I'm having a problem updating or using Vidalia." msgstr "Sto avendo un problema nell'aggiornamento, o nell'uso, di Vidalia." -#: http//localhost/misc/misc-12/ -#: (content/misc/misc-12/contents+en.lrquestion.description) -msgid "" -"Bittorrent in specific is <mark><a href=\"https://blog.torproject.org" -"/bittorrent-over-tor-isnt-good-idea\">not anonymous over Tor</a></mark>." -msgstr "" -"Bittorrent nello specifico <mark><a href=\"https://blog.torproject.org" -"/bittorrent-over-tor-isnt-good-idea\">non è reso anonimo tramite " -"Tor</a></mark>." - #: http//localhost/tbb/tbb-20/ #: (content/tbb/tbb-20/contents+en.lrquestion.description) #: http//localhost/connecting/connecting-1/ @@ -2919,10 +2964,14 @@ msgid "Why is the first IP address in my relay circuit always the same?" msgstr "" "Perchè il primo indirizzo IP nel mio circuito di relay è sempre lo stesso?" -#: http//localhost/tbb/tbb-29/ -#: (content/tbb/tbb-29/contents+en.lrquestion.seo_slug) -msgid "change-ip-address" -msgstr "cambia-l'indirizzo-ip" +#: http//localhost/tbb/tbb-31/ +#: (content/tbb/tbb-31/contents+en.lrquestion.description) +msgid "" +"For Android, The Guardian Project maintains the Tor-powered apps Orbot and " +"Orfox." +msgstr "" +"Per Android, The guardian Project mantiene le app basate su Tor Orbot e " +"Orfox." #: http//localhost/connecting/connecting-2/ #: (content/connecting/connecting-2/contents+en.lrquestion.description) @@ -3018,8 +3067,6 @@ msgstr "" "poiché potresti accidentalmente utilizzare l'altro browser per qualcosa che " "volevi invece fare utilizzando Tor." -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) #: http//localhost/https/https-1/ #: (content/https/https-1/contents+en.lrquestion.description) msgid "<div class=\"card-body\">" @@ -3140,15 +3187,6 @@ msgstr "" "href=\"https://www.torproject.org/about/contact.html.en\">Contattaci</a></mark>." " " -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) -msgid "" -"<img class=\"card-img-top\" src=\"/static/images/image5.png\" alt=\"New " -"release alert\">" -msgstr "" -"<img class=\"card-img-top\" src=\"/static/images/image5.png\" alt=\"New " -"release alert\"> " - #: http//localhost/gettor/gettor-1/ #: (content/gettor/gettor-1/contents+en.lrquestion.seo_slug) msgid "how-to-download-tor-if-torproject-org-is-blocked" @@ -3176,6 +3214,8 @@ msgstr "Varie" msgid "* obfs4proxy.exe (if you use bridges)" msgstr "* obfs4proxy.exe (se usi i bridges)" +#: http//localhost/operators/operators-1/ +#: (content/operators/operators-1/contents+en.lrquestion.description) #: http//localhost/operators/operators-2/ #: (content/operators/operators-2/contents+en.lrquestion.description) #: http//localhost/operators/operators-3/ @@ -3206,10 +3246,6 @@ msgstr "" "signatures.html.en\">verificare il download</a></mark>), l'impronta della " "chiave usata per firmare e il checksum del pacchetto." -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) -#: http//localhost/tbb/tbb-29/ -#: (content/tbb/tbb-29/contents+en.lrquestion.description) #: http//localhost/https/https-1/ #: (content/https/https-1/contents+en.lrquestion.description) msgid "<div class=\"card\">" @@ -3243,10 +3279,6 @@ msgstr "" "Le altre schede e finestre windows dello stesso sito internet utilizzeranno " "il nuovo circuito una volta ricaricate." -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) -#: http//localhost/tbb/tbb-29/ -#: (content/tbb/tbb-29/contents+en.lrquestion.description) #: http//localhost/https/https-1/ #: (content/https/https-1/contents+en.lrquestion.description) msgid "</div>" @@ -3404,16 +3436,6 @@ msgstr "* Svuota il cestino." msgid "Can I run Tor on an iOS device?" msgstr "Posso eseguire Tor su un dispositivo iOS?" -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) -msgid "" -"<p class=\"card-text\">The Torbutton icon (the little green onion in the top" -" left corner of the browser) will display a yellow triangle.</p>" -msgstr "" -"<p class=\"card-text\">L'icona di Torbutton (la piccola cipolla verde " -"nell'angolo in alto a sinistra del browser) mostrerà un triangolo " -"giallo.</p> " - #: http//localhost/gettor/gettor-3/ #: (content/gettor/gettor-3/contents+en.lrquestion.description) #: http//localhost/gettor/gettor-4/ @@ -3458,20 +3480,15 @@ msgstr "" "Non c'è ancora alcuna versione ufficiale di Tor per iOS, ma consigliamo " "<mark><a href=\"https://onionbrowser.com/\">Onion Browser</a></mark>." -#: http//localhost/misc/misc-4/ -#: (content/misc/misc-4/contents+en.lrquestion.title) -msgid "Can I use Tor with bittorrent?" -msgstr "Posso usare Tor con bittorrent?" - #: http//localhost/operators/operators-3/ #: (content/operators/operators-3/contents+en.lrquestion.description) msgid "Enabling ntpd is suggested." msgstr "E' suggerito abilitare ntpd" -#: http//localhost/tormobile/tormobile-2/ -#: (content/tormobile/tormobile-2/contents+en.lrquestion.title) -msgid "Who is the Guardian Project?" -msgstr "Cos'è il Guardian Project?" +#: http//localhost/tbb/tbb-29/ +#: (content/tbb/tbb-29/contents+en.lrquestion.seo_slug) +msgid "change-ip-address" +msgstr "cambia-l'indirizzo-ip" #: http//localhost/operators/operators-4/ #: (content/operators/operators-4/contents+en.lrquestion.description) @@ -3577,11 +3594,14 @@ msgid "" msgstr "" "Tor Browser non si connette, ma non sembra che sia dovuto alla censura." -#: http//localhost/https/https-1/ -#: (content/https/https-1/contents+en.lrquestion.description) -msgid "Tor protects eavesdroppers from learning sites that you visit." +#: http//localhost/tbb/tbb-27/ +#: (content/tbb/tbb-27/contents+en.lrquestion.description) +msgid "" +"<img class=\"\" src=\"/static/images/update-tb.png\" alt=\"Check for Tor " +"Browser Update\">" msgstr "" -"Tor impedisce agli spioni di conoscere quali siti internet hai visitato." +"<img class=\"\" src=\"/static/images/update-tb.png\" alt=\"Check for Tor " +"Browser Update\">" #: http//localhost/onionservices/onionservices-1/ #: (content/onionservices/onionservices-1/contents+en.lrquestion.description) @@ -3602,6 +3622,15 @@ msgstr "" "Se il sito che stai visitando utilizza HTTPS, allora il traffico in uscita " "dal tuo exit relay sarà crittografato, e non sarà visibile agli spioni." +#: http//localhost/tbb/tbb-29/ +#: (content/tbb/tbb-29/contents+en.lrquestion.description) +msgid "" +"<img class=\"\" src=\"/static/images/menu-new-identity.png\" alt=\"Tor " +"Browser Menu\">" +msgstr "" +"<img class=\"\" src=\"/static/images/menu-new-identity.png\" alt=\"Tor " +"Browser Menu\">" + #: http//localhost/operators/operators-7/ #: (content/operators/operators-7/contents+en.lrquestion.description) msgid "" @@ -3673,20 +3702,6 @@ msgstr "" "Naturalmente, dovresti evitare di tenere dati sensibili o personali sul " "computer che utilizzi come host per il tuo exit relay." -#: http//localhost/connecting/connecting-2/ -#: (content/connecting/connecting-2/contents+en.lrquestion.description) -#: http//localhost/censorship/censorship-5/ -#: (content/censorship/censorship-5/contents+en.lrquestion.description) -msgid "" -"If you see lines like these in your Tor log, it means you are failing to " -"connect to a SOCKS proxy. If a SOCKS proxy is required for your network " -"setup, then please make sure you’ve entered your proxy details correctly." -msgstr "" -"Se vedi delle righe simili a queste nel tuo log di Tor, significa che non " -"riesci a conetterti al SOCKS proxy. Se le impostazioni del tuo network " -"prevedono l'utilizzo di un SOCKS proxy, assicurati per favore che tu abbia " -"inserito in modo corretto i dettagli del proxy." - #: http//localhost/censorship/censorship-7/ #: (content/censorship/censorship-7/contents+en.lrquestion.description) msgid "" @@ -3885,15 +3900,6 @@ msgstr "#MyFamily $keyid,$keyid,..." msgid "website-is-blocking-access-over-tor" msgstr "il-sito-internet-blocca-l'accesso-tramite-tor" -#: http//localhost/tbb/tbb-29/ -#: (content/tbb/tbb-29/contents+en.lrquestion.description) -msgid "" -"<img class=\"card-img-top\" src=\"/static/images/image1.png\" alt=\"New " -"release alert\"><div class=\"card-body\">" -msgstr "" -"<img class=\"card-img-top\" src=\"/static/images/image1.png\" alt=\"New " -"release alert\"><div class=\"card-body\"> " - #: http//localhost/operators/operators-1/ #: (content/operators/operators-1/contents+en.lrquestion.description) #: http//localhost/operators/operators-2/ @@ -3907,16 +3913,10 @@ msgstr "" "## L'indirizzo IP o l'hostname per le connessioni in ingresso (lasciarlo " "senza commento e Tor proverà ad indovinare)" -#: http//localhost/connecting/connecting-2/ -#: (content/connecting/connecting-2/contents+en.lrquestion.description) -msgid "" -"If you see lines like this in your Tor log, it means that Tor failed to " -"complete a TLS handshake with the directory authorities. Using bridges will " -"likely fix this." -msgstr "" -"Se vedi righe come questa nel tuo log di Tor, significa che Tor ha fallito " -"un handshake TLS con l'elenco autorità. L'uso di bridge potrebbe risolvere " -"il problema." +#: http//localhost/censorship/censorship-3/ +#: (content/censorship/censorship-3/contents+en.lrquestion.seo_slug) +msgid "how-do-i-download-tor-if-torproject-org-is-blocked" +msgstr "come-scarico-tor-se-torproject-org-è-bloccato" #: http//localhost/tbb/tbb-23/ #: (content/tbb/tbb-23/contents+en.lrquestion.description) @@ -4026,6 +4026,8 @@ msgstr "Come posso scaricare Tor se torproject.org viene bloccato?" #: http//localhost/connecting/connecting-2/ #: (content/connecting/connecting-2/contents+en.lrquestion.description) +#: http//localhost/censorship/censorship-5/ +#: (content/censorship/censorship-5/contents+en.lrquestion.description) msgid "" "19.11.2017 00:04:47.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150" msgstr "" @@ -4106,10 +4108,14 @@ msgid "Install the ntp or openntpd (or similar) package to keep it that way." msgstr "" "Installa il paccetto ntp o openntp (o analoghi) perché tutto rimanga così." -#: http//localhost/tbb/tbb-22/ -#: (content/tbb/tbb-22/contents+en.lrquestion.seo_slug) -msgid "make-tor-faster" -msgstr "velocizzare-tor" +#: http//localhost/tbb/tbb-27/ +#: (content/tbb/tbb-27/contents+en.lrquestion.description) +msgid "" +"The Torbutton icon (the little onion in the top left corner of the browser) " +"will display a yellow triangle." +msgstr "" +"L'icona di Torbutton (la piccola cipolla verde nell'angolo in alto a " +"sinistra del browser) mostrerà un triangolo giallo. " #: http//localhost/operators/operators-6/ #: (content/operators/operators-6/contents+en.lrquestion.description) @@ -4279,6 +4285,11 @@ msgstr "usare-flash-su-tor-browser" msgid "I have a compelling reason to trace a Tor user. Can you help?" msgstr "Ho una ragione valida per tracciare un utente Tor. Potete aiutarmi?" +#: http//localhost/onionservices/onionservices-2/ +#: (content/onionservices/onionservices-2/contents+en.lrquestion.description) +msgid "<img class=\"\" src=\"/static/images/onion-website.png\" alt=\"Onion icon\">" +msgstr "<img class=\"\" src=\"/static/images/onion-website.png\" alt=\"Onion icon\">" + #: http//localhost/connecting/connecting-2/ #: (content/connecting/connecting-2/contents+en.lrquestion.description) #: http//localhost/censorship/censorship-5/ @@ -4459,11 +4470,6 @@ msgstr "" "Non raccomandiamo di eseguire diverse istanze di Tor Browser, su molte " "piattaforme potrebbero non funzionare come previsto." -#: http//localhost/tbb/tbb-27/ -#: (content/tbb/tbb-27/contents+en.lrquestion.description) -msgid "<p class=\"card-text\">Card text</p>" -msgstr "<p class=\"card-text\">Testo della scheda</p> " - #: http//localhost/censorship/censorship-7/ #: (content/censorship/censorship-7/contents+en.lrquestion.description) msgid "" @@ -4613,7 +4619,7 @@ msgstr "Scarica Tor Browser" msgid "Search" msgstr "Cerca" -#: templates/sidenav.html:4 templates/sidenav.html:29 +#: templates/sidenav.html:4 templates/sidenav.html:30 msgid "Topics" msgstr "Argomenti"

1 0

[translation/support-portal] Update translations for support-portal
by translation＠torproject.org 10 Sep '18

10 Sep '18

commit 76f755dad48c9c7451f257fc605c90de349a9603 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Sep 10 15:18:53 2018 +0000 Update translations for support-portal --- contents+it.po | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/contents+it.po b/contents+it.po index e80ddb7d9..f68c1e743 100644 --- a/contents+it.po +++ b/contents+it.po @@ -2361,6 +2361,9 @@ msgid "" "at the URL bar an icon of a little green onion displaying the state of your " "connection: secure and using an onion service." msgstr "" +"Quando si accede ad un sito che usa un servizio onion, Tor Browser mostrerà " +"nella barra degli URL un'icona di una piccola cipolla verde che indica lo " +"stato della tua connessione: sicuro e con un servizio onion." #: http//localhost/misc/misc-9/ #: (content/misc/misc-9/contents+en.lrquestion.description) @@ -2760,6 +2763,8 @@ msgid "" "And if you're accessing a website with https and onion service, it will show" " an icon of a green onion and a padlock." msgstr "" +"E se stai accedendo ad un sito con https e un servizio onion, mostrerà " +"un'icona di una cipolla verde ed un lucchetto." #: http//localhost/https/https-1/ #: (content/https/https-1/contents+en.lrquestion.description) @@ -3595,6 +3600,8 @@ msgid "" "<img class=\"\" src=\"/static/images/update-tb.png\" alt=\"Check for Tor " "Browser Update\">" msgstr "" +"<img class=\"\" src=\"/static/images/update-tb.png\" alt=\"Check for Tor " +"Browser Update\">" #: http//localhost/onionservices/onionservices-1/ #: (content/onionservices/onionservices-1/contents+en.lrquestion.description) @@ -3621,6 +3628,8 @@ msgid "" "<img class=\"\" src=\"/static/images/menu-new-identity.png\" alt=\"Tor " "Browser Menu\">" msgstr "" +"<img class=\"\" src=\"/static/images/menu-new-identity.png\" alt=\"Tor " +"Browser Menu\">" #: http//localhost/operators/operators-7/ #: (content/operators/operators-7/contents+en.lrquestion.description) @@ -4279,7 +4288,7 @@ msgstr "Ho una ragione valida per tracciare un utente Tor. Potete aiutarmi?" #: http//localhost/onionservices/onionservices-2/ #: (content/onionservices/onionservices-2/contents+en.lrquestion.description) msgid "<img class=\"\" src=\"/static/images/onion-website.png\" alt=\"Onion icon\">" -msgstr "" +msgstr "<img class=\"\" src=\"/static/images/onion-website.png\" alt=\"Onion icon\">" #: http//localhost/connecting/connecting-2/ #: (content/connecting/connecting-2/contents+en.lrquestion.description)

1 0

[translation/torbutton-browseronboardingproperties] Update translations for torbutton-browseronboardingproperties
by translation＠torproject.org 10 Sep '18

10 Sep '18

commit 05f7e5ef3f04935ebddfc4cc32c64fc30ed2de94 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Sep 10 15:18:11 2018 +0000 Update translations for torbutton-browseronboardingproperties --- it/browserOnboarding.properties | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/it/browserOnboarding.properties b/it/browserOnboarding.properties index 304c84d3d..7cde37e5c 100644 --- a/it/browserOnboarding.properties +++ b/it/browserOnboarding.properties @@ -3,18 +3,18 @@ # vim: set sw=2 sts=2 ts=8 et: onboarding.tour-tor-welcome=Benvenuto -onboarding.tour-tor-welcome.title=You’re ready. -onboarding.tour-tor-welcome.description=Tor Browser offers the highest standard of privacy and security while browsing the web. You’re now protected against tracking, surveillance, and censorship. This quick onboarding will show you how. +onboarding.tour-tor-welcome.title=Sei pronto. +onboarding.tour-tor-welcome.description=Tor Browser offre il più alto standard di privacy e sicurezza nella navigazione del web. Sei ora protetto dal tracciamento, dalla sorveglianza e dalla censura. Questa rapida panoramica ti mostrerà come. onboarding.tour-tor-welcome.button=Inizia ora onboarding.tour-tor-privacy=Privacy onboarding.tour-tor-privacy.title=Snub trackers and snoopers. -onboarding.tour-tor-privacy.description=Tor Browser isolates cookies and deletes your browser history after your session. These modifications ensure your privacy and security are protected in the browser. Click ‘Tor Network’ to learn how we protect you on the network level. -onboarding.tour-tor-privacy.button=Go to Tor Network +onboarding.tour-tor-privacy.description=Tor Browser isola i cookie ed elimina la cronologia del browser dopo la tua sessione. Queste modifiche assicurano che la tua privacy e sicurezza siano protette nel browser. Clicca ‘Rete Tor’ per sapere come ti proteggiamo a livello di rete. +onboarding.tour-tor-privacy.button=Vai alla rete Tor -onboarding.tour-tor-network=Tor Network -onboarding.tour-tor-network.title=Travel a decentralized network. -onboarding.tour-tor-network.description=Tor Browser connects you to the Tor network run by thousands of volunteers around the world. Unlike a VPN, there’s no one point of failure or centralized entity you need to trust in order to enjoy the internet privately. +onboarding.tour-tor-network=Rete Tor +onboarding.tour-tor-network.title=Percorri una rete decentralizzata. +onboarding.tour-tor-network.description=Tor Browser ti connette alla rete Tor gestita da migliaia di volontari in tutto il mondo. Diversamente dalle VPN, non c'è nessun punto di fallimento o entità centralizzata di cui ti devi fidare per godere di internet privatamente. onboarding.tour-tor-network.button=Go to Circuit Display onboarding.tour-tor-circuit-display=Circuit Display

1 0

[translation/support-portal] Update translations for support-portal
by translation＠torproject.org 10 Sep '18

10 Sep '18

commit 2117fb54738c0dbf651e74f479073bebdea5da55 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Sep 10 14:49:04 2018 +0000 Update translations for support-portal --- contents+it.po | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/contents+it.po b/contents+it.po index b7950ac9a..e80ddb7d9 100644 --- a/contents+it.po +++ b/contents+it.po @@ -17,7 +17,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2018-09-08 10:58+CET\n" +"POT-Creation-Date: 2018-09-07 17:41+CET\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: The Gamer <xthegamerx(a)hotmail.com>, 2018\n" "Language-Team: Italian (https://www.transifex.com/otf/teams/1519/it/)\n" @@ -320,7 +320,7 @@ msgstr "" #: http//localhost/tbb/tbb-27/ #: (content/tbb/tbb-27/contents+en.lrquestion.description) msgid "<img class=\"\" src=\"/static/images/image5.png\" alt=\"New release alert\">" -msgstr "" +msgstr "<img class=\"\" src=\"/static/images/image5.png\" alt=\"New release alert\">" #: http//localhost/misc/misc-5/ #: (content/misc/misc-5/contents+en.lrquestion.title) @@ -586,6 +586,8 @@ msgid "" "<img class=\"\" src=\"/static/images/padlock-onion.png\" alt=\"Green onion " "with a padlock\">" msgstr "" +"<img class=\"\" src=\"/static/images/padlock-onion.png\" alt=\"Green onion " +"with a padlock\">" #: http//localhost/tbb/tbb-18/ #: (content/tbb/tbb-18/contents+en.lrquestion.description) @@ -1081,6 +1083,8 @@ msgid "" "Both options are located in the Menu, but you can also access the New " "Circuit option inside the site information menu, in the URL bar." msgstr "" +"Entrambe le opzioni sono nel menu, ma puoi accedere al nuovo circuito anche " +"all'interno delle informazioni del sito, nella barra degli URL." #: http//localhost/connecting/connecting-2/ #: (content/connecting/connecting-2/contents+en.lrquestion.description) @@ -1635,7 +1639,7 @@ msgstr "connessione-a-tor" #: http//localhost/tbb/tbb-27/ #: (content/tbb/tbb-27/contents+en.lrquestion.description) msgid "<img class=\"\" src=\"/static/images/image3.png\" alt=\"New release alert\">" -msgstr "" +msgstr "<img class=\"\" src=\"/static/images/image3.png\" alt=\"New release alert\">" #: http//localhost/misc/misc-5/ #: (content/misc/misc-5/contents+en.lrquestion.description) @@ -1684,6 +1688,8 @@ msgid "" "<img class=\"\" src=\"/static/images/new-circuit-display.png\" alt=\"New " "Circuit for this Site\">" msgstr "" +"<img class=\"\" src=\"/static/images/new-circuit-display.png\" alt=\"New " +"Circuit for this Site\">" #: http//localhost/tbb/tbb-28/ #: (content/tbb/tbb-28/contents+en.lrquestion.description)

1 0

[tor/master] Copy changelogs and releasenotes to master
by nickm＠torproject.org 10 Sep '18

10 Sep '18

commit b87a95289b63c891f4e12e0d40f41a39dae5aa7e Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 10 10:03:01 2018 -0400 Copy changelogs and releasenotes to master --- ChangeLog | 476 +++++++++++++++++++++++++++++ ReleaseNotes | 968 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 1444 insertions(+) diff --git a/ChangeLog b/ChangeLog index ce54a8340..b068cc49b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,479 @@ +Changes in version 0.2.9.17 - 2018-09-10 + Tor 0.2.9.17 backports numerous bugfixes from later versions of Tor. + + o Minor features (compatibility, backport from 0.3.4.8): + - Tell OpenSSL to maintain backward compatibility with previous + RSA1024/DH1024 users in Tor. With OpenSSL 1.1.1-pre6, these + ciphers are disabled by default. Closes ticket 27344. + + o Minor features (continuous integration, backport from 0.3.4.7-rc): + - Enable macOS builds in our Travis CI configuration. Closes + ticket 24629. + - Install libcap-dev and libseccomp2-dev so these optional + dependencies get tested on Travis CI. Closes ticket 26560. + - Run asciidoc during Travis CI. Implements ticket 27087. + - Use ccache in our Travis CI configuration. Closes ticket 26952. + + o Minor features (geoip): + - Update geoip and geoip6 to the August 7 2018 Maxmind GeoLite2 + Country database. Closes ticket 27089. + + o Minor bugfixes (compilation, backport from 0.3.4.6-rc): + - When compiling with --enable-openbsd-malloc or --enable-tcmalloc, + tell the compiler not to include the system malloc implementation. + Fixes bug 20424; bugfix on 0.2.0.20-rc. + + o Minor bugfixes (compilation, backport from 0.3.4.7-rc): + - Silence a spurious compiler warning on the GetAdaptersAddresses + function pointer cast. This issue is already fixed by 26481 in + 0.3.5 and later, by removing the lookup and cast. Fixes bug 27465; + bugfix on 0.2.3.11-alpha. + - Stop calling SetProcessDEPPolicy() on 64-bit Windows. It is not + supported, and always fails. Some compilers warn about the + function pointer cast on 64-bit Windows. Fixes bug 27461; bugfix + on 0.2.2.23-alpha. + + o Minor bugfixes (compilation, windows, backport from 0.3.4.7-rc): + - Don't link or search for pthreads when building for Windows, even + if we are using build environment (like mingw) that provides a + pthreads library. Fixes bug 27081; bugfix on 0.1.0.1-rc. + + o Minor bugfixes (continuous integration, backport from 0.3.4.6-rc): + - Skip a pair of unreliable key generation tests on Windows, until + the underlying issue in bug 26076 is resolved. Fixes bug 26830 and + bug 26853; bugfix on 0.2.7.3-rc and 0.3.2.1-alpha respectively. + + o Minor bugfixes (continuous integration, backport from 0.3.4.7-rc): + - Pass the module flags to distcheck configure, and log the flags + before running configure. (Backported to 0.2.9 and later as a + precaution.) Fixes bug 27088; bugfix on 0.3.4.1-alpha. + + o Minor bugfixes (continuous integration, backport from 0.3.4.8): + - When a Travis build fails, and showing a log fails, keep trying to + show the other logs. Fixes bug 27453; bugfix on 0.3.4.7-rc. + - When we use echo in Travis, don't pass a --flag as the first + argument. Fixes bug 27418; bugfix on 0.3.4.7-rc. + + o Minor bugfixes (directory authority, backport from 0.3.4.6-rc): + - When voting for recommended versions, make sure that all of the + versions are well-formed and parsable. Fixes bug 26485; bugfix + on 0.1.1.6-alpha. + + o Minor bugfixes (linux seccomp2 sandbox, backport from 0.3.4.7-rc): + - Fix a bug in out sandboxing rules for the openat() syscall. + Previously, no openat() call would be permitted, which would break + filesystem operations on recent glibc versions. Fixes bug 25440; + bugfix on 0.2.9.15. Diagnosis and patch from Daniel Pinto. + + o Minor bugfixes (onion services, backport from 0.3.4.8): + - Silence a spurious compiler warning in + rend_client_send_introduction(). Fixes bug 27463; bugfix + on 0.1.1.2-alpha. + + o Minor bugfixes (single onion services, Tor2web, backport from 0.3.4.6-rc): + - Log a protocol warning when single onion services or Tor2web clients + fail to authenticate direct connections to relays. + Fixes bug 26924; bugfix on 0.2.9.1-alpha. + + o Minor bugfixes (testing, backport from 0.3.4.6-rc): + - Disable core dumps in test_bt.sh, to avoid failures in "make + distcheck". Fixes bug 26787; bugfix on 0.2.5.2-alpha. + + o Minor bugfixes (testing, chutney, backport from 0.3.4.8): + - Before running make test-network-all, delete old logs and test + result files, to avoid spurious failures. Fixes bug 27295; bugfix + on 0.2.7.3-rc. + + o Minor bugfixes (testing, openssl compatibility, backport from 0.3.4.7-rc): + - Our "tortls/cert_matches_key" unit test no longer relies on + OpenSSL internals. Previously, it relied on unsupported OpenSSL + behavior in a way that caused it to crash with OpenSSL 1.0.2p. + Fixes bug 27226; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (Windows, compilation, backport from 0.3.4.7-rc): + - Silence a compilation warning on MSVC 2017 and clang-cl. Fixes bug + 27185; bugfix on 0.2.2.2-alpha. + + +Changes in version 0.3.2.12 - 2018-09-10 + Tor 0.3.2.12 backport numerous fixes from later versions of Tor. + + o Minor features (compatibility, backport from 0.3.4.8): + - Tell OpenSSL to maintain backward compatibility with previous + RSA1024/DH1024 users in Tor. With OpenSSL 1.1.1-pre6, these + ciphers are disabled by default. Closes ticket 27344. + + o Minor features (continuous integration, backport from 0.3.4.7-rc): + - Enable macOS builds in our Travis CI configuration. Closes + ticket 24629. + - Install libcap-dev and libseccomp2-dev so these optional + dependencies get tested on Travis CI. Closes ticket 26560. + - Run asciidoc during Travis CI. Implements ticket 27087. + - Use ccache in our Travis CI configuration. Closes ticket 26952. + + o Minor features (continuous integration, rust, backport from 0.3.4.7-rc): + - Use cargo cache in our Travis CI configuration. Closes + ticket 26952. + + o Minor features (controller, backport from 0.3.4.6-rc): + - The control port now exposes the list of HTTPTunnelPorts and + ExtOrPorts via GETINFO net/listeners/httptunnel and + net/listeners/extor respectively. Closes ticket 26647. + + o Minor features (directory authorities, backport from 0.3.4.7-rc): + - Authorities no longer vote to make the subprotocol version + "LinkAuth=1" a requirement: it is unsupportable with NSS, and + hasn't been needed since Tor 0.3.0.1-alpha. Closes ticket 27286. + + o Minor features (geoip): + - Update geoip and geoip6 to the August 7 2018 Maxmind GeoLite2 + Country database. Closes ticket 27089. + + o Minor bugfixes (compilation, backport from 0.3.4.6-rc): + - When compiling with --enable-openbsd-malloc or --enable-tcmalloc, + tell the compiler not to include the system malloc implementation. + Fixes bug 20424; bugfix on 0.2.0.20-rc. + - Don't try to use a pragma to temporarily disable the + -Wunused-const-variable warning if the compiler doesn't support + it. Fixes bug 26785; bugfix on 0.3.2.11. + + o Minor bugfixes (compilation, backport from 0.3.4.7-rc): + - Silence a spurious compiler warning on the GetAdaptersAddresses + function pointer cast. This issue is already fixed by 26481 in + 0.3.5 and later, by removing the lookup and cast. Fixes bug 27465; + bugfix on 0.2.3.11-alpha. + - Stop calling SetProcessDEPPolicy() on 64-bit Windows. It is not + supported, and always fails. Some compilers warn about the + function pointer cast on 64-bit Windows. Fixes bug 27461; bugfix + on 0.2.2.23-alpha. + + o Minor bugfixes (compilation, windows, backport from 0.3.4.7-rc): + - Don't link or search for pthreads when building for Windows, even + if we are using build environment (like mingw) that provides a + pthreads library. Fixes bug 27081; bugfix on 0.1.0.1-rc. + + o Minor bugfixes (continuous integration, backport from 0.3.4.6-rc): + - Skip a pair of unreliable key generation tests on Windows, until + the underlying issue in bug 26076 is resolved. Fixes bug 26830 and + bug 26853; bugfix on 0.2.7.3-rc and 0.3.2.1-alpha respectively. + + o Minor bugfixes (continuous integration, backport from 0.3.4.7-rc): + - Build with zstd on macOS. Fixes bug 27090; bugfix on 0.3.1.5-alpha. + - Pass the module flags to distcheck configure, and log the flags + before running configure. (Backported to 0.2.9 and later as a + precaution.) Fixes bug 27088; bugfix on 0.3.4.1-alpha. + + o Minor bugfixes (continuous integration, backport from 0.3.4.8): + - When a Travis build fails, and showing a log fails, keep trying to + show the other logs. Fixes bug 27453; bugfix on 0.3.4.7-rc. + - When we use echo in Travis, don't pass a --flag as the first + argument. Fixes bug 27418; bugfix on 0.3.4.7-rc. + + o Minor bugfixes (directory authority, backport from 0.3.4.6-rc): + - When voting for recommended versions, make sure that all of the + versions are well-formed and parsable. Fixes bug 26485; bugfix + on 0.1.1.6-alpha. + + o Minor bugfixes (linux seccomp2 sandbox, backport from 0.3.4.7-rc): + - Fix a bug in out sandboxing rules for the openat() syscall. + Previously, no openat() call would be permitted, which would break + filesystem operations on recent glibc versions. Fixes bug 25440; + bugfix on 0.2.9.15. Diagnosis and patch from Daniel Pinto. + + o Minor bugfixes (logging, backport from 0.3.4.6-rc): + - Improve the log message when connection initiators fail to + authenticate direct connections to relays. Fixes bug 26927; bugfix + on 0.3.0.1-alpha. + + o Minor bugfixes (onion services, backport from 0.3.4.7-rc): + - Fix bug that causes services to not ever rotate their descriptors + if they were getting SIGHUPed often. Fixes bug 26932; bugfix + on 0.3.2.1-alpha. + + o Minor bugfixes (onion services, backport from 0.3.4.8): + - Silence a spurious compiler warning in + rend_client_send_introduction(). Fixes bug 27463; bugfix + on 0.1.1.2-alpha. + + o Minor bugfixes (rust, backport from 0.3.4.7-rc): + - Backport test_rust.sh from master. Fixes bug 26497; bugfix + on 0.3.1.5-alpha. + - Consistently use ../../.. as a fallback for $abs_top_srcdir in + test_rust.sh. Fixes bug 27093; bugfix on 0.3.4.3-alpha. + - Stop setting $CARGO_HOME. cargo will use the user's $CARGO_HOME, or + $HOME/.cargo by default. Fixes bug 26497; bugfix on 0.3.1.5-alpha. + + o Minor bugfixes (single onion services, Tor2web, backport from 0.3.4.6-rc): + - Log a protocol warning when single onion services or Tor2web clients + fail to authenticate direct connections to relays. + Fixes bug 26924; bugfix on 0.2.9.1-alpha. + + o Minor bugfixes (testing, backport from 0.3.4.6-rc): + - Disable core dumps in test_bt.sh, to avoid failures in "make + distcheck". Fixes bug 26787; bugfix on 0.2.5.2-alpha. + + o Minor bugfixes (testing, chutney, backport from 0.3.4.8): + - When running make test-network-all, use the mixed+hs-v2 network. + (A previous fix to chutney removed v3 onion services from the + mixed+hs-v23 network, so seeing "mixed+hs-v23" in tests is + confusing.) Fixes bug 27345; bugfix on 0.3.2.1-alpha. + - Before running make test-network-all, delete old logs and test + result files, to avoid spurious failures. Fixes bug 27295; bugfix + on 0.2.7.3-rc. + + o Minor bugfixes (testing, openssl compatibility): + - Our "tortls/cert_matches_key" unit test no longer relies on OpenSSL + internals. Previously, it relied on unsupported OpenSSL behavior in + a way that caused it to crash with OpenSSL 1.0.2p. Fixes bug 27226; + bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (testing, openssl compatibility, backport from 0.3.4.7-rc): + - Our "tortls/cert_matches_key" unit test no longer relies on + OpenSSL internals. Previously, it relied on unsupported OpenSSL + behavior in a way that caused it to crash with OpenSSL 1.0.2p. + Fixes bug 27226; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (Windows, compilation, backport from 0.3.4.7-rc): + - Silence a compilation warning on MSVC 2017 and clang-cl. Fixes bug + 27185; bugfix on 0.2.2.2-alpha. + + +Changes in version 0.3.3.10 - 2018-09-10 + Tor 0.3.3.10 backports numerous fixes from later versions of Tor. + + o Minor features (bug workaround, backport from 0.3.4.7-rc): + - Compile correctly on systems that provide the C11 stdatomic.h + header, but where C11 atomic functions don't actually compile. + Closes ticket 26779; workaround for Debian issue 903709. + + o Minor features (compatibility, backport from 0.3.4.8): + - Tell OpenSSL to maintain backward compatibility with previous + RSA1024/DH1024 users in Tor. With OpenSSL 1.1.1-pre6, these + ciphers are disabled by default. Closes ticket 27344. + + o Minor features (continuous integration, backport from 0.3.4.7-rc): + - Backport Travis rust distcheck to 0.3.3. Closes ticket 24629. + - Enable macOS builds in our Travis CI configuration. Closes + ticket 24629. + - Install libcap-dev and libseccomp2-dev so these optional + dependencies get tested on Travis CI. Closes ticket 26560. + - Run asciidoc during Travis CI. Implements ticket 27087. + - Use ccache in our Travis CI configuration. Closes ticket 26952. + + o Minor features (continuous integration, rust, backport from 0.3.4.7-rc): + - Use cargo cache in our Travis CI configuration. Closes + ticket 26952. + + o Minor features (controller, backport from 0.3.4.6-rc): + - The control port now exposes the list of HTTPTunnelPorts and + ExtOrPorts via GETINFO net/listeners/httptunnel and + net/listeners/extor respectively. Closes ticket 26647. + + o Minor features (directory authorities, backport from 0.3.4.7-rc): + - Authorities no longer vote to make the subprotocol version + "LinkAuth=1" a requirement: it is unsupportable with NSS, and + hasn't been needed since Tor 0.3.0.1-alpha. Closes ticket 27286. + + o Minor features (geoip): + - Update geoip and geoip6 to the August 7 2018 Maxmind GeoLite2 + Country database. Closes ticket 27089. + + o Minor bugfixes (compilation, backport from 0.3.4.6-rc): + - When compiling with --enable-openbsd-malloc or --enable-tcmalloc, + tell the compiler not to include the system malloc implementation. + Fixes bug 20424; bugfix on 0.2.0.20-rc. + - Don't try to use a pragma to temporarily disable the + -Wunused-const-variable warning if the compiler doesn't support + it. Fixes bug 26785; bugfix on 0.3.2.11. + + o Minor bugfixes (compilation, backport from 0.3.4.7-rc): + - Silence a spurious compiler warning on the GetAdaptersAddresses + function pointer cast. This issue is already fixed by 26481 in + 0.3.5 and later, by removing the lookup and cast. Fixes bug 27465; + bugfix on 0.2.3.11-alpha. + - Stop calling SetProcessDEPPolicy() on 64-bit Windows. It is not + supported, and always fails. Some compilers warn about the + function pointer cast on 64-bit Windows. Fixes bug 27461; bugfix + on 0.2.2.23-alpha. + + o Minor bugfixes (compilation, windows, backport from 0.3.4.7-rc): + - Don't link or search for pthreads when building for Windows, even + if we are using build environment (like mingw) that provides a + pthreads library. Fixes bug 27081; bugfix on 0.1.0.1-rc. + + o Minor bugfixes (continuous integration, backport from 0.3.4.6-rc): + - Skip a pair of unreliable key generation tests on Windows, until + the underlying issue in bug 26076 is resolved. Fixes bug 26830 and + bug 26853; bugfix on 0.2.7.3-rc and 0.3.2.1-alpha respectively. + + o Minor bugfixes (continuous integration, backport from 0.3.4.7-rc): + - Build with zstd on macOS. Fixes bug 27090; bugfix on 0.3.1.5-alpha. + - Pass the module flags to distcheck configure, and log the flags + before running configure. (Backported to 0.2.9 and later as a + precaution.) Fixes bug 27088; bugfix on 0.3.4.1-alpha. + + o Minor bugfixes (continuous integration, backport from 0.3.4.8): + - When a Travis build fails, and showing a log fails, keep trying to + show the other logs. Fixes bug 27453; bugfix on 0.3.4.7-rc. + - When we use echo in Travis, don't pass a --flag as the first + argument. Fixes bug 27418; bugfix on 0.3.4.7-rc. + + o Minor bugfixes (directory authority, backport from 0.3.4.6-rc): + - When voting for recommended versions, make sure that all of the + versions are well-formed and parsable. Fixes bug 26485; bugfix + on 0.1.1.6-alpha. + + o Minor bugfixes (in-process restart, backport from 0.3.4.7-rc): + - Always call tor_free_all() when leaving tor_run_main(). When we + did not, restarting tor in-process would cause an assertion + failure. Fixes bug 26948; bugfix on 0.3.3.1-alpha. + + o Minor bugfixes (linux seccomp2 sandbox, backport from 0.3.4.7-rc): + - Fix a bug in our sandboxing rules for the openat() syscall. + Previously, no openat() call would be permitted, which would break + filesystem operations on recent glibc versions. Fixes bug 25440; + bugfix on 0.2.9.15. Diagnosis and patch from Daniel Pinto. + + o Minor bugfixes (logging, backport from 0.3.4.6-rc): + - Improve the log message when connection initiators fail to + authenticate direct connections to relays. Fixes bug 26927; bugfix + on 0.3.0.1-alpha. + + o Minor bugfixes (onion services, backport from 0.3.4.7-rc): + - Fix bug that causes services to not ever rotate their descriptors + if they were getting SIGHUPed often. Fixes bug 26932; bugfix + on 0.3.2.1-alpha. + + o Minor bugfixes (onion services, backport from 0.3.4.8): + - Silence a spurious compiler warning in + rend_client_send_introduction(). Fixes bug 27463; bugfix + on 0.1.1.2-alpha. + + o Minor bugfixes (portability, backport from 0.3.4.6-rc): + - Work around two different bugs in the OS X 10.10 and later SDKs + that would prevent us from successfully targeting earlier versions + of OS X. Fixes bug 26876; bugfix on 0.3.3.1-alpha. + + o Minor bugfixes (portability, backport from 0.3.4.7-rc): + - Fix compilation of the unit tests on GNU/Hurd, which does not + define PATH_MAX. Fixes bug 26873; bugfix on 0.3.3.1-alpha. Patch + from "paulusASol". + + o Minor bugfixes (rust, backport from 0.3.4.7-rc): + - Backport test_rust.sh from master. Fixes bug 26497; bugfix + on 0.3.1.5-alpha. + - Consistently use ../../.. as a fallback for $abs_top_srcdir in + test_rust.sh. Fixes bug 27093; bugfix on 0.3.4.3-alpha. + - Protover parsing was accepting the presence of whitespace in + version strings, which the C implementation would choke on, e.g. + "Desc=1\t,2". Fixes bug 27177; bugfix on 0.3.3.5-rc. + - Protover parsing was ignoring a 2nd hyphen and everything after + it, accepting entries like "Link=1-5-foo". Fixes bug 27164; bugfix + on 0.3.3.1-alpha. + - Stop setting $CARGO_HOME. cargo will use the user's $CARGO_HOME, or + $HOME/.cargo by default. Fixes bug 26497; bugfix on 0.3.1.5-alpha. + - cd to ${abs_top_builddir}/src/rust before running cargo in + src/test/test_rust.sh. This makes the working directory consistent + between builds and tests. Fixes bug 26497; bugfix on 0.3.3.2-alpha. + + o Minor bugfixes (single onion services, Tor2web, backport from 0.3.4.6-rc): + - Log a protocol warning when single onion services or Tor2web clients + fail to authenticate direct connections to relays. + Fixes bug 26924; bugfix on 0.2.9.1-alpha. + + o Minor bugfixes (testing, backport from 0.3.4.6-rc): + - Disable core dumps in test_bt.sh, to avoid failures in "make + distcheck". Fixes bug 26787; bugfix on 0.2.5.2-alpha. + + o Minor bugfixes (testing, chutney, backport from 0.3.4.8): + - When running make test-network-all, use the mixed+hs-v2 network. + (A previous fix to chutney removed v3 onion services from the + mixed+hs-v23 network, so seeing "mixed+hs-v23" in tests is + confusing.) Fixes bug 27345; bugfix on 0.3.2.1-alpha. + - Before running make test-network-all, delete old logs and test + result files, to avoid spurious failures. Fixes bug 27295; bugfix + on 0.2.7.3-rc. + + o Minor bugfixes (testing, openssl compatibility, backport from 0.3.4.7-rc): + - Our "tortls/cert_matches_key" unit test no longer relies on + OpenSSL internals. Previously, it relied on unsupported OpenSSL + behavior in a way that caused it to crash with OpenSSL 1.0.2p. + Fixes bug 27226; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (v3 onion services, backport from 0.3.4.6-rc): + - Stop sending ed25519 link specifiers in v3 onion service introduce + cells and descriptors, when the rendezvous or introduction point + doesn't support ed25519 link authentication. Fixes bug 26627; + bugfix on 0.3.2.4-alpha. + + o Minor bugfixes (Windows, compilation, backport from 0.3.4.7-rc): + - Silence a compilation warning on MSVC 2017 and clang-cl. Fixes bug + 27185; bugfix on 0.2.2.2-alpha. + + +Changes in version 0.3.4.8 - 2018-09-10 + Tor 0.3.4.8 is the first stable release in its series; it includes + compilation and portability fixes. + + The Tor 0.3.4 series includes improvements for running Tor in + low-power and embedded environments, which should help performance in + general. We've begun work on better modularity, and included preliminary + changes on the directory authority side to accommodate a new bandwidth + measurement system. We've also integrated more continuous-integration + systems into our development process, and made corresponding changes to + Tor's testing infrastructure. Finally, we've continued to refine + our anti-denial-of-service code. + + Below are the changes since 0.3.4.7-rc. For a complete list of changes + since 0.3.3.9, see the ReleaseNotes file. + + o Minor features (compatibility): + - Tell OpenSSL to maintain backward compatibility with previous + RSA1024/DH1024 users in Tor. With OpenSSL 1.1.1-pre6, these + ciphers are disabled by default. Closes ticket 27344. + + o Minor features (continuous integration): + - Log the compiler path and version during Appveyor builds. + Implements ticket 27449. + - Show config.log and test-suite.log after failed Appveyor builds. + Also upload the zipped full logs as a build artifact. Implements + ticket 27430. + + o Minor bugfixes (compilation): + - Silence a spurious compiler warning on the GetAdaptersAddresses + function pointer cast. This issue is already fixed by 26481 in + 0.3.5 and later, by removing the lookup and cast. Fixes bug 27465; + bugfix on 0.2.3.11-alpha. + - Stop calling SetProcessDEPPolicy() on 64-bit Windows. It is not + supported, and always fails. Some compilers warn about the + function pointer cast on 64-bit Windows. Fixes bug 27461; bugfix + on 0.2.2.23-alpha. + + o Minor bugfixes (continuous integration): + - Disable gcc hardening in Appveyor Windows 64-bit builds. As of + August 29 2018, Appveyor images come with gcc 8.2.0 by default. + Executables compiled for 64-bit Windows with this version of gcc + crash when Tor's --enable-gcc-hardening flag is set. Fixes bug + 27460; bugfix on 0.3.4.1-alpha. + - When a Travis build fails, and showing a log fails, keep trying to + show the other logs. Fixes bug 27453; bugfix on 0.3.4.7-rc. + - When we use echo in Travis, don't pass a --flag as the first + argument. Fixes bug 27418; bugfix on 0.3.4.7-rc. + + o Minor bugfixes (onion services): + - Silence a spurious compiler warning in + rend_client_send_introduction(). Fixes bug 27463; bugfix + on 0.1.1.2-alpha. + + o Minor bugfixes (testing, chutney): + - When running make test-network-all, use the mixed+hs-v2 network. + (A previous fix to chutney removed v3 onion services from the + mixed+hs-v23 network, so seeing "mixed+hs-v23" in tests is + confusing.) Fixes bug 27345; bugfix on 0.3.2.1-alpha. + - Before running make test-network-all, delete old logs and test + result files, to avoid spurious failures. Fixes bug 27295; bugfix + on 0.2.7.3-rc. + Changes in version 0.3.4.7-rc - 2018-08-24 Tor 0.3.4.7-rc fixes several small compilation, portability, and correctness issues in previous versions of Tor. This version is a diff --git a/ReleaseNotes b/ReleaseNotes index d9272a880..ac107b7f3 100644 --- a/ReleaseNotes +++ b/ReleaseNotes @@ -2,6 +2,974 @@ This document summarizes new features and bugfixes in each stable release of Tor. If you want to see more detailed descriptions of the changes in each development snapshot, see the ChangeLog file. +Changes in version 0.2.9.17 - 2018-09-10 + Tor 0.2.9.17 backports numerous bugfixes from later versions of Tor. + + o Minor features (compatibility, backport from 0.3.4.8): + - Tell OpenSSL to maintain backward compatibility with previous + RSA1024/DH1024 users in Tor. With OpenSSL 1.1.1-pre6, these + ciphers are disabled by default. Closes ticket 27344. + + o Minor features (continuous integration, backport from 0.3.4.7-rc): + - Enable macOS builds in our Travis CI configuration. Closes + ticket 24629. + - Install libcap-dev and libseccomp2-dev so these optional + dependencies get tested on Travis CI. Closes ticket 26560. + - Run asciidoc during Travis CI. Implements ticket 27087. + - Use ccache in our Travis CI configuration. Closes ticket 26952. + + o Minor features (geoip): + - Update geoip and geoip6 to the August 7 2018 Maxmind GeoLite2 + Country database. Closes ticket 27089. + + o Minor bugfixes (compilation, backport from 0.3.4.6-rc): + - When compiling with --enable-openbsd-malloc or --enable-tcmalloc, + tell the compiler not to include the system malloc implementation. + Fixes bug 20424; bugfix on 0.2.0.20-rc. + + o Minor bugfixes (compilation, backport from 0.3.4.7-rc): + - Silence a spurious compiler warning on the GetAdaptersAddresses + function pointer cast. This issue is already fixed by 26481 in + 0.3.5 and later, by removing the lookup and cast. Fixes bug 27465; + bugfix on 0.2.3.11-alpha. + - Stop calling SetProcessDEPPolicy() on 64-bit Windows. It is not + supported, and always fails. Some compilers warn about the + function pointer cast on 64-bit Windows. Fixes bug 27461; bugfix + on 0.2.2.23-alpha. + + o Minor bugfixes (compilation, windows, backport from 0.3.4.7-rc): + - Don't link or search for pthreads when building for Windows, even + if we are using build environment (like mingw) that provides a + pthreads library. Fixes bug 27081; bugfix on 0.1.0.1-rc. + + o Minor bugfixes (continuous integration, backport from 0.3.4.6-rc): + - Skip a pair of unreliable key generation tests on Windows, until + the underlying issue in bug 26076 is resolved. Fixes bug 26830 and + bug 26853; bugfix on 0.2.7.3-rc and 0.3.2.1-alpha respectively. + + o Minor bugfixes (continuous integration, backport from 0.3.4.7-rc): + - Pass the module flags to distcheck configure, and log the flags + before running configure. (Backported to 0.2.9 and later as a + precaution.) Fixes bug 27088; bugfix on 0.3.4.1-alpha. + + o Minor bugfixes (continuous integration, backport from 0.3.4.8): + - When a Travis build fails, and showing a log fails, keep trying to + show the other logs. Fixes bug 27453; bugfix on 0.3.4.7-rc. + - When we use echo in Travis, don't pass a --flag as the first + argument. Fixes bug 27418; bugfix on 0.3.4.7-rc. + + o Minor bugfixes (directory authority, backport from 0.3.4.6-rc): + - When voting for recommended versions, make sure that all of the + versions are well-formed and parsable. Fixes bug 26485; bugfix + on 0.1.1.6-alpha. + + o Minor bugfixes (linux seccomp2 sandbox, backport from 0.3.4.7-rc): + - Fix a bug in out sandboxing rules for the openat() syscall. + Previously, no openat() call would be permitted, which would break + filesystem operations on recent glibc versions. Fixes bug 25440; + bugfix on 0.2.9.15. Diagnosis and patch from Daniel Pinto. + + o Minor bugfixes (onion services, backport from 0.3.4.8): + - Silence a spurious compiler warning in + rend_client_send_introduction(). Fixes bug 27463; bugfix + on 0.1.1.2-alpha. + + o Minor bugfixes (single onion services, Tor2web, backport from 0.3.4.6-rc): + - Log a protocol warning when single onion services or Tor2web clients + fail to authenticate direct connections to relays. + Fixes bug 26924; bugfix on 0.2.9.1-alpha. + + o Minor bugfixes (testing, backport from 0.3.4.6-rc): + - Disable core dumps in test_bt.sh, to avoid failures in "make + distcheck". Fixes bug 26787; bugfix on 0.2.5.2-alpha. + + o Minor bugfixes (testing, chutney, backport from 0.3.4.8): + - Before running make test-network-all, delete old logs and test + result files, to avoid spurious failures. Fixes bug 27295; bugfix + on 0.2.7.3-rc. + + o Minor bugfixes (testing, openssl compatibility, backport from 0.3.4.7-rc): + - Our "tortls/cert_matches_key" unit test no longer relies on + OpenSSL internals. Previously, it relied on unsupported OpenSSL + behavior in a way that caused it to crash with OpenSSL 1.0.2p. + Fixes bug 27226; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (Windows, compilation, backport from 0.3.4.7-rc): + - Silence a compilation warning on MSVC 2017 and clang-cl. Fixes bug + 27185; bugfix on 0.2.2.2-alpha. + + +Changes in version 0.3.2.12 - 2018-09-10 + Tor 0.3.2.12 backport numerous fixes from later versions of Tor. + + o Minor features (compatibility, backport from 0.3.4.8): + - Tell OpenSSL to maintain backward compatibility with previous + RSA1024/DH1024 users in Tor. With OpenSSL 1.1.1-pre6, these + ciphers are disabled by default. Closes ticket 27344. + + o Minor features (continuous integration, backport from 0.3.4.7-rc): + - Enable macOS builds in our Travis CI configuration. Closes + ticket 24629. + - Install libcap-dev and libseccomp2-dev so these optional + dependencies get tested on Travis CI. Closes ticket 26560. + - Run asciidoc during Travis CI. Implements ticket 27087. + - Use ccache in our Travis CI configuration. Closes ticket 26952. + + o Minor features (continuous integration, rust, backport from 0.3.4.7-rc): + - Use cargo cache in our Travis CI configuration. Closes + ticket 26952. + + o Minor features (controller, backport from 0.3.4.6-rc): + - The control port now exposes the list of HTTPTunnelPorts and + ExtOrPorts via GETINFO net/listeners/httptunnel and + net/listeners/extor respectively. Closes ticket 26647. + + o Minor features (directory authorities, backport from 0.3.4.7-rc): + - Authorities no longer vote to make the subprotocol version + "LinkAuth=1" a requirement: it is unsupportable with NSS, and + hasn't been needed since Tor 0.3.0.1-alpha. Closes ticket 27286. + + o Minor features (geoip): + - Update geoip and geoip6 to the August 7 2018 Maxmind GeoLite2 + Country database. Closes ticket 27089. + + o Minor bugfixes (compilation, backport from 0.3.4.6-rc): + - When compiling with --enable-openbsd-malloc or --enable-tcmalloc, + tell the compiler not to include the system malloc implementation. + Fixes bug 20424; bugfix on 0.2.0.20-rc. + - Don't try to use a pragma to temporarily disable the + -Wunused-const-variable warning if the compiler doesn't support + it. Fixes bug 26785; bugfix on 0.3.2.11. + + o Minor bugfixes (compilation, backport from 0.3.4.7-rc): + - Silence a spurious compiler warning on the GetAdaptersAddresses + function pointer cast. This issue is already fixed by 26481 in + 0.3.5 and later, by removing the lookup and cast. Fixes bug 27465; + bugfix on 0.2.3.11-alpha. + - Stop calling SetProcessDEPPolicy() on 64-bit Windows. It is not + supported, and always fails. Some compilers warn about the + function pointer cast on 64-bit Windows. Fixes bug 27461; bugfix + on 0.2.2.23-alpha. + + o Minor bugfixes (compilation, windows, backport from 0.3.4.7-rc): + - Don't link or search for pthreads when building for Windows, even + if we are using build environment (like mingw) that provides a + pthreads library. Fixes bug 27081; bugfix on 0.1.0.1-rc. + + o Minor bugfixes (continuous integration, backport from 0.3.4.6-rc): + - Skip a pair of unreliable key generation tests on Windows, until + the underlying issue in bug 26076 is resolved. Fixes bug 26830 and + bug 26853; bugfix on 0.2.7.3-rc and 0.3.2.1-alpha respectively. + + o Minor bugfixes (continuous integration, backport from 0.3.4.7-rc): + - Build with zstd on macOS. Fixes bug 27090; bugfix on 0.3.1.5-alpha. + - Pass the module flags to distcheck configure, and log the flags + before running configure. (Backported to 0.2.9 and later as a + precaution.) Fixes bug 27088; bugfix on 0.3.4.1-alpha. + + o Minor bugfixes (continuous integration, backport from 0.3.4.8): + - When a Travis build fails, and showing a log fails, keep trying to + show the other logs. Fixes bug 27453; bugfix on 0.3.4.7-rc. + - When we use echo in Travis, don't pass a --flag as the first + argument. Fixes bug 27418; bugfix on 0.3.4.7-rc. + + o Minor bugfixes (directory authority, backport from 0.3.4.6-rc): + - When voting for recommended versions, make sure that all of the + versions are well-formed and parsable. Fixes bug 26485; bugfix + on 0.1.1.6-alpha. + + o Minor bugfixes (linux seccomp2 sandbox, backport from 0.3.4.7-rc): + - Fix a bug in out sandboxing rules for the openat() syscall. + Previously, no openat() call would be permitted, which would break + filesystem operations on recent glibc versions. Fixes bug 25440; + bugfix on 0.2.9.15. Diagnosis and patch from Daniel Pinto. + + o Minor bugfixes (logging, backport from 0.3.4.6-rc): + - Improve the log message when connection initiators fail to + authenticate direct connections to relays. Fixes bug 26927; bugfix + on 0.3.0.1-alpha. + + o Minor bugfixes (onion services, backport from 0.3.4.7-rc): + - Fix bug that causes services to not ever rotate their descriptors + if they were getting SIGHUPed often. Fixes bug 26932; bugfix + on 0.3.2.1-alpha. + + o Minor bugfixes (onion services, backport from 0.3.4.8): + - Silence a spurious compiler warning in + rend_client_send_introduction(). Fixes bug 27463; bugfix + on 0.1.1.2-alpha. + + o Minor bugfixes (rust, backport from 0.3.4.7-rc): + - Backport test_rust.sh from master. Fixes bug 26497; bugfix + on 0.3.1.5-alpha. + - Consistently use ../../.. as a fallback for $abs_top_srcdir in + test_rust.sh. Fixes bug 27093; bugfix on 0.3.4.3-alpha. + - Stop setting $CARGO_HOME. cargo will use the user's $CARGO_HOME, or + $HOME/.cargo by default. Fixes bug 26497; bugfix on 0.3.1.5-alpha. + + o Minor bugfixes (single onion services, Tor2web, backport from 0.3.4.6-rc): + - Log a protocol warning when single onion services or Tor2web clients + fail to authenticate direct connections to relays. + Fixes bug 26924; bugfix on 0.2.9.1-alpha. + + o Minor bugfixes (testing, backport from 0.3.4.6-rc): + - Disable core dumps in test_bt.sh, to avoid failures in "make + distcheck". Fixes bug 26787; bugfix on 0.2.5.2-alpha. + + o Minor bugfixes (testing, chutney, backport from 0.3.4.8): + - When running make test-network-all, use the mixed+hs-v2 network. + (A previous fix to chutney removed v3 onion services from the + mixed+hs-v23 network, so seeing "mixed+hs-v23" in tests is + confusing.) Fixes bug 27345; bugfix on 0.3.2.1-alpha. + - Before running make test-network-all, delete old logs and test + result files, to avoid spurious failures. Fixes bug 27295; bugfix + on 0.2.7.3-rc. + + o Minor bugfixes (testing, openssl compatibility): + - Our "tortls/cert_matches_key" unit test no longer relies on OpenSSL + internals. Previously, it relied on unsupported OpenSSL behavior in + a way that caused it to crash with OpenSSL 1.0.2p. Fixes bug 27226; + bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (testing, openssl compatibility, backport from 0.3.4.7-rc): + - Our "tortls/cert_matches_key" unit test no longer relies on + OpenSSL internals. Previously, it relied on unsupported OpenSSL + behavior in a way that caused it to crash with OpenSSL 1.0.2p. + Fixes bug 27226; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (Windows, compilation, backport from 0.3.4.7-rc): + - Silence a compilation warning on MSVC 2017 and clang-cl. Fixes bug + 27185; bugfix on 0.2.2.2-alpha. + + +Changes in version 0.3.3.10 - 2018-09-10 + Tor 0.3.3.10 backports numerous fixes from later versions of Tor. + + o Minor features (bug workaround, backport from 0.3.4.7-rc): + - Compile correctly on systems that provide the C11 stdatomic.h + header, but where C11 atomic functions don't actually compile. + Closes ticket 26779; workaround for Debian issue 903709. + + o Minor features (compatibility, backport from 0.3.4.8): + - Tell OpenSSL to maintain backward compatibility with previous + RSA1024/DH1024 users in Tor. With OpenSSL 1.1.1-pre6, these + ciphers are disabled by default. Closes ticket 27344. + + o Minor features (continuous integration, backport from 0.3.4.7-rc): + - Backport Travis rust distcheck to 0.3.3. Closes ticket 24629. + - Enable macOS builds in our Travis CI configuration. Closes + ticket 24629. + - Install libcap-dev and libseccomp2-dev so these optional + dependencies get tested on Travis CI. Closes ticket 26560. + - Run asciidoc during Travis CI. Implements ticket 27087. + - Use ccache in our Travis CI configuration. Closes ticket 26952. + + o Minor features (continuous integration, rust, backport from 0.3.4.7-rc): + - Use cargo cache in our Travis CI configuration. Closes + ticket 26952. + + o Minor features (controller, backport from 0.3.4.6-rc): + - The control port now exposes the list of HTTPTunnelPorts and + ExtOrPorts via GETINFO net/listeners/httptunnel and + net/listeners/extor respectively. Closes ticket 26647. + + o Minor features (directory authorities, backport from 0.3.4.7-rc): + - Authorities no longer vote to make the subprotocol version + "LinkAuth=1" a requirement: it is unsupportable with NSS, and + hasn't been needed since Tor 0.3.0.1-alpha. Closes ticket 27286. + + o Minor features (geoip): + - Update geoip and geoip6 to the August 7 2018 Maxmind GeoLite2 + Country database. Closes ticket 27089. + + o Minor bugfixes (compilation, backport from 0.3.4.6-rc): + - When compiling with --enable-openbsd-malloc or --enable-tcmalloc, + tell the compiler not to include the system malloc implementation. + Fixes bug 20424; bugfix on 0.2.0.20-rc. + - Don't try to use a pragma to temporarily disable the + -Wunused-const-variable warning if the compiler doesn't support + it. Fixes bug 26785; bugfix on 0.3.2.11. + + o Minor bugfixes (compilation, backport from 0.3.4.7-rc): + - Silence a spurious compiler warning on the GetAdaptersAddresses + function pointer cast. This issue is already fixed by 26481 in + 0.3.5 and later, by removing the lookup and cast. Fixes bug 27465; + bugfix on 0.2.3.11-alpha. + - Stop calling SetProcessDEPPolicy() on 64-bit Windows. It is not + supported, and always fails. Some compilers warn about the + function pointer cast on 64-bit Windows. Fixes bug 27461; bugfix + on 0.2.2.23-alpha. + + o Minor bugfixes (compilation, windows, backport from 0.3.4.7-rc): + - Don't link or search for pthreads when building for Windows, even + if we are using build environment (like mingw) that provides a + pthreads library. Fixes bug 27081; bugfix on 0.1.0.1-rc. + + o Minor bugfixes (continuous integration, backport from 0.3.4.6-rc): + - Skip a pair of unreliable key generation tests on Windows, until + the underlying issue in bug 26076 is resolved. Fixes bug 26830 and + bug 26853; bugfix on 0.2.7.3-rc and 0.3.2.1-alpha respectively. + + o Minor bugfixes (continuous integration, backport from 0.3.4.7-rc): + - Build with zstd on macOS. Fixes bug 27090; bugfix on 0.3.1.5-alpha. + - Pass the module flags to distcheck configure, and log the flags + before running configure. (Backported to 0.2.9 and later as a + precaution.) Fixes bug 27088; bugfix on 0.3.4.1-alpha. + + o Minor bugfixes (continuous integration, backport from 0.3.4.8): + - When a Travis build fails, and showing a log fails, keep trying to + show the other logs. Fixes bug 27453; bugfix on 0.3.4.7-rc. + - When we use echo in Travis, don't pass a --flag as the first + argument. Fixes bug 27418; bugfix on 0.3.4.7-rc. + + o Minor bugfixes (directory authority, backport from 0.3.4.6-rc): + - When voting for recommended versions, make sure that all of the + versions are well-formed and parsable. Fixes bug 26485; bugfix + on 0.1.1.6-alpha. + + o Minor bugfixes (in-process restart, backport from 0.3.4.7-rc): + - Always call tor_free_all() when leaving tor_run_main(). When we + did not, restarting tor in-process would cause an assertion + failure. Fixes bug 26948; bugfix on 0.3.3.1-alpha. + + o Minor bugfixes (linux seccomp2 sandbox, backport from 0.3.4.7-rc): + - Fix a bug in our sandboxing rules for the openat() syscall. + Previously, no openat() call would be permitted, which would break + filesystem operations on recent glibc versions. Fixes bug 25440; + bugfix on 0.2.9.15. Diagnosis and patch from Daniel Pinto. + + o Minor bugfixes (logging, backport from 0.3.4.6-rc): + - Improve the log message when connection initiators fail to + authenticate direct connections to relays. Fixes bug 26927; bugfix + on 0.3.0.1-alpha. + + o Minor bugfixes (onion services, backport from 0.3.4.7-rc): + - Fix bug that causes services to not ever rotate their descriptors + if they were getting SIGHUPed often. Fixes bug 26932; bugfix + on 0.3.2.1-alpha. + + o Minor bugfixes (onion services, backport from 0.3.4.8): + - Silence a spurious compiler warning in + rend_client_send_introduction(). Fixes bug 27463; bugfix + on 0.1.1.2-alpha. + + o Minor bugfixes (portability, backport from 0.3.4.6-rc): + - Work around two different bugs in the OS X 10.10 and later SDKs + that would prevent us from successfully targeting earlier versions + of OS X. Fixes bug 26876; bugfix on 0.3.3.1-alpha. + + o Minor bugfixes (portability, backport from 0.3.4.7-rc): + - Fix compilation of the unit tests on GNU/Hurd, which does not + define PATH_MAX. Fixes bug 26873; bugfix on 0.3.3.1-alpha. Patch + from "paulusASol". + + o Minor bugfixes (rust, backport from 0.3.4.7-rc): + - Backport test_rust.sh from master. Fixes bug 26497; bugfix + on 0.3.1.5-alpha. + - Consistently use ../../.. as a fallback for $abs_top_srcdir in + test_rust.sh. Fixes bug 27093; bugfix on 0.3.4.3-alpha. + - Protover parsing was accepting the presence of whitespace in + version strings, which the C implementation would choke on, e.g. + "Desc=1\t,2". Fixes bug 27177; bugfix on 0.3.3.5-rc. + - Protover parsing was ignoring a 2nd hyphen and everything after + it, accepting entries like "Link=1-5-foo". Fixes bug 27164; bugfix + on 0.3.3.1-alpha. + - Stop setting $CARGO_HOME. cargo will use the user's $CARGO_HOME, or + $HOME/.cargo by default. Fixes bug 26497; bugfix on 0.3.1.5-alpha. + - cd to ${abs_top_builddir}/src/rust before running cargo in + src/test/test_rust.sh. This makes the working directory consistent + between builds and tests. Fixes bug 26497; bugfix on 0.3.3.2-alpha. + + o Minor bugfixes (single onion services, Tor2web, backport from 0.3.4.6-rc): + - Log a protocol warning when single onion services or Tor2web clients + fail to authenticate direct connections to relays. + Fixes bug 26924; bugfix on 0.2.9.1-alpha. + + o Minor bugfixes (testing, backport from 0.3.4.6-rc): + - Disable core dumps in test_bt.sh, to avoid failures in "make + distcheck". Fixes bug 26787; bugfix on 0.2.5.2-alpha. + + o Minor bugfixes (testing, chutney, backport from 0.3.4.8): + - When running make test-network-all, use the mixed+hs-v2 network. + (A previous fix to chutney removed v3 onion services from the + mixed+hs-v23 network, so seeing "mixed+hs-v23" in tests is + confusing.) Fixes bug 27345; bugfix on 0.3.2.1-alpha. + - Before running make test-network-all, delete old logs and test + result files, to avoid spurious failures. Fixes bug 27295; bugfix + on 0.2.7.3-rc. + + o Minor bugfixes (testing, openssl compatibility, backport from 0.3.4.7-rc): + - Our "tortls/cert_matches_key" unit test no longer relies on + OpenSSL internals. Previously, it relied on unsupported OpenSSL + behavior in a way that caused it to crash with OpenSSL 1.0.2p. + Fixes bug 27226; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (v3 onion services, backport from 0.3.4.6-rc): + - Stop sending ed25519 link specifiers in v3 onion service introduce + cells and descriptors, when the rendezvous or introduction point + doesn't support ed25519 link authentication. Fixes bug 26627; + bugfix on 0.3.2.4-alpha. + + o Minor bugfixes (Windows, compilation, backport from 0.3.4.7-rc): + - Silence a compilation warning on MSVC 2017 and clang-cl. Fixes bug + 27185; bugfix on 0.2.2.2-alpha. + + +Changes in version 0.3.4.8 - 2018-09-10 + Tor 0.3.4.8 is the first stable release in its series; it includes + compilation and portability fixes. + + The Tor 0.3.4 series includes improvements for running Tor in + low-power and embedded environments, which should help performance in + general. We've begun work on better modularity, and included preliminary + changes on the directory authority side to accommodate a new bandwidth + measurement system. We've also integrated more continuous-integration + systems into our development process, and made corresponding changes to + Tor's testing infrastructure. Finally, we've continued to refine + our anti-denial-of-service code. + + Below are the changes since 0.3.3.9. For a list of only the changes + since 0.3.4.7-rc, see the ChangeLog file. + + o New system requirements: + - Tor no longer tries to support old operating systems without + mmap() or some local equivalent. Apparently, compilation on such + systems has been broken for some time, without anybody noticing or + complaining. Closes ticket 25398. + + o Major features (directory authority, modularization): + - The directory authority subsystem has been modularized. The code + is now located in src/or/dirauth/, and is compiled in by default. + To disable the module, the configure option + --disable-module-dirauth has been added. This module may be + disabled by default in some future release. Closes ticket 25610. + + o Major features (main loop, CPU usage): + - When Tor is disabled (via DisableNetwork or via hibernation), it + no longer needs to run any per-second events. This change should + make it easier for mobile applications to disable Tor while the + device is sleeping, or Tor is not running. Closes ticket 26063. + - Tor no longer enables all of its periodic events by default. + Previously, Tor would enable all possible main loop events, + regardless of whether it needed them. Furthermore, many of these + events are now disabled when Tor is hibernating or DisableNetwork + is set. This is a big step towards reducing client CPU usage by + reducing the amount of wake-ups the daemon does. Closes tickets + 25376 and 25762. + - The bandwidth-limitation logic has been refactored so that + bandwidth calculations are performed on-demand, rather than every + TokenBucketRefillInterval milliseconds. This change should improve + the granularity of our bandwidth calculations, and limit the + number of times that the Tor process needs to wake up when it is + idle. Closes ticket 25373. + - Move responsibility for many operations from a once-per-second + callback to a callback that is only scheduled as needed. Moving + this functionality has allowed us to disable the callback when + Tor's network is disabled. Once enough items are removed from our + once-per-second callback, we can eliminate it entirely to conserve + CPU when idle. The functionality removed includes: closing + connections, circuits, and channels (ticket 25932); consensus + voting (25937); flushing log callbacks (25951); honoring delayed + SIGNEWNYM requests (25949); rescanning the consensus cache + (25931); saving the state file to disk (25948); warning relay + operators about unreachable ports (25952); and keeping track of + Tor's uptime (26009). + + o Minor features (accounting): + - When Tor becomes dormant, it now uses a scheduled event to wake up + at the right time. Previously, we would use the per-second timer + to check whether to wake up, but we no longer have any per-second + timers enabled when the network is disabled. Closes ticket 26064. + + o Minor features (bug workaround): + - Compile correctly on systems that provide the C11 stdatomic.h + header, but where C11 atomic functions don't actually compile. + Closes ticket 26779; workaround for Debian issue 903709. + + o Minor features (code quality): + - Add optional spell-checking for the Tor codebase, using the + "misspell" program. To use this feature, run "make check-typos". + Closes ticket 25024. + + o Minor features (compatibility): + - Tell OpenSSL to maintain backward compatibility with previous + RSA1024/DH1024 users in Tor. With OpenSSL 1.1.1-pre6, these + ciphers are disabled by default. Closes ticket 27344. + - Tor now detects versions of OpenSSL 1.1.0 and later compiled with + the no-deprecated option, and builds correctly with them. Closes + tickets 19429, 19981, and 25353. + + o Minor features (compilation): + - When compiling with --enable-openbsd-malloc or --enable-tcmalloc, + tell the compiler not to include the system malloc implementation. + Fixes bug 20424; bugfix on 0.2.0.20-rc. + - Don't try to use a pragma to temporarily disable the + -Wunused-const-variable warning if the compiler doesn't support + it. Fixes bug 26785; bugfix on 0.3.2.11. + - When building Tor, prefer to use Python 3 over Python 2, and more + recent (contemplated) versions over older ones. Closes + ticket 26372. + + o Minor features (compression, zstd): + - When running with zstd, Tor now considers using advanced functions + that the zstd maintainers have labeled as potentially unstable. To + prevent breakage, Tor will only use this functionality when the + runtime version of the zstd library matches the version with which + Tor was compiled. Closes ticket 25162. + + o Minor features (configuration): + - The "DownloadSchedule" options have been renamed to end with + "DownloadInitialDelay". The old names are still allowed, but will + produce a warning. Comma-separated lists are still permitted for + these options, but all values after the first are ignored (as they + have been since 0.2.9). Closes ticket 23354. + + o Minor features (continuous integration): + - Log the compiler path and version during Appveyor builds. + Implements ticket 27449. + - Show config.log and test-suite.log after failed Appveyor builds. + Also upload the zipped full logs as a build artifact. Implements + ticket 27430. + - Backport Travis rust distcheck to 0.3.3. Closes ticket 24629. + - Enable macOS builds in our Travis CI configuration. Closes + ticket 24629. + - Install libcap-dev and libseccomp2-dev so these optional + dependencies get tested on Travis CI. Closes ticket 26560. + - Only post Appveyor IRC notifications when the build fails. + Implements ticket 27275. + - Run asciidoc during Travis CI. Implements ticket 27087. + - Use ccache in our Travis CI configuration. Closes ticket 26952. + - Add the necessary configuration files for continuous integration + testing on Windows, via the Appveyor platform. Closes ticket + 25549. Patches from Marcin Cieślak and Isis Lovecruft. + + o Minor features (continuous integration, rust): + - Use cargo cache in our Travis CI configuration. Closes + ticket 26952. + + o Minor features (control port): + - Introduce GETINFO "current-time/{local,utc}" to return the local + and UTC times respectively in ISO format. This helps a controller + like Tor Browser detect a time-related error. Closes ticket 25511. + Patch by Neel Chauhan. + - Introduce new fields to the CIRC_BW event. There are two new + fields in each of the read and written directions. The DELIVERED + fields report the total valid data on the circuit, as measured by + the payload sizes of verified and error-checked relay command + cells. The OVERHEAD fields report the total unused bytes in each + of these cells. Closes ticket 25903. + + o Minor features (controller): + - The control port now exposes the list of HTTPTunnelPorts and + ExtOrPorts via GETINFO net/listeners/httptunnel and + net/listeners/extor respectively. Closes ticket 26647. + + o Minor features (directory authorities): + - Stop warning about incomplete bw lines before the first complete + bw line has been found, so that additional header lines can be + ignored. Fixes bug 25960; bugfix on 0.2.2.1-alpha + - Authorities no longer vote to make the subprotocol version + "LinkAuth=1" a requirement: it is unsupportable with NSS, and + hasn't been needed since Tor 0.3.0.1-alpha. Closes ticket 27286. + + o Minor features (directory authority): + - Directory authorities now open their key-pinning files as O_SYNC, + to limit their chances of accidentally writing partial lines. + Closes ticket 23909. + + o Minor features (directory authority, forward compatibility): + - Make the lines of the measured bandwidth file able to contain + their entries in any order. Previously, the node_id entry needed + to come first. Closes ticket 26004. + + o Minor features (entry guards): + - Introduce a new torrc option NumPrimaryGuards for controlling the + number of primary guards. Closes ticket 25843. + + o Minor features (geoip): + - Update geoip and geoip6 to the August 7 2018 Maxmind GeoLite2 + Country database. Closes ticket 27089. + + o Minor features (performance): + - Avoid a needless call to malloc() when processing an incoming + relay cell. Closes ticket 24914. + - Make our timing-wheel code run a tiny bit faster on 32-bit + platforms, by preferring 32-bit math to 64-bit. Closes + ticket 24688. + - Avoid a needless malloc()/free() pair every time we handle an ntor + handshake. Closes ticket 25150. + + o Minor features (Rust, portability): + - Rust cross-compilation is now supported. Closes ticket 25895. + + o Minor features (testing): + - Add a unit test for voting_schedule_get_start_of_next_interval(). + Closes ticket 26014, and helps make unit test coverage + more deterministic. + - A new unittests module specifically for testing the functions in + the (new-ish) bridges.c module has been created with new + unittests, raising the code coverage percentages. Closes 25425. + - We now have improved testing for addressmap_get_virtual_address() + function. This should improve our test coverage, and make our test + coverage more deterministic. Closes ticket 25993. + + o Minor features (timekeeping, circuit scheduling): + - When keeping track of how busy each circuit have been recently on + a given connection, use coarse-grained monotonic timers rather + than gettimeofday(). This change should marginally increase + accuracy and performance. Implements part of ticket 25927. + + o Minor features (unit tests): + - Test complete bandwidth measurements files, and test that + incomplete bandwidth lines only give warnings when the end of the + header has not been detected. Fixes bug 25947; bugfix + on 0.2.2.1-alpha + + o Minor bugfixes (bandwidth management): + - Consider ourselves "low on write bandwidth" if we have exhausted + our write bandwidth some time in the last second. This was the + documented behavior before, but the actual behavior was to change + this value every TokenBucketRefillInterval. Fixes bug 25828; + bugfix on 0.2.3.5-alpha. + + o Minor bugfixes (C correctness): + - Add a missing lock acquisition in the shutdown code of the control + subsystem. Fixes bug 25675; bugfix on 0.2.7.3-rc. Found by + Coverity; this is CID 1433643. + + o Minor bugfixes (code style): + - Fixed multiple includes of transports.h in src/or/connection.c + Fixes bug 25261; bugfix on 0.2.5.1-alpha. + - Remove the unused variable n_possible from the function + channel_get_for_extend(). Fixes bug 25645; bugfix on 0.2.4.4-alpha + + o Minor bugfixes (compilation): + - Silence a spurious compiler warning on the GetAdaptersAddresses + function pointer cast. This issue is already fixed by 26481 in + 0.3.5 and later, by removing the lookup and cast. Fixes bug 27465; + bugfix on 0.2.3.11-alpha. + - Stop calling SetProcessDEPPolicy() on 64-bit Windows. It is not + supported, and always fails. Some compilers warn about the + function pointer cast on 64-bit Windows. Fixes bug 27461; bugfix + on 0.2.2.23-alpha. + - Fix a compilation warning on some versions of GCC when building + code that calls routerinfo_get_my_routerinfo() twice, assuming + that the second call will succeed if the first one did. Fixes bug + 26269; bugfix on 0.2.8.2-alpha. + - Refrain from compiling unit testing related object files when + --disable-unittests is set to configure script. Fixes bug 24891; + bugfix on 0.2.5.1-alpha. + - The --enable-fatal-warnings flag now affects Rust code as well. + Closes ticket 26245. + - Avoid a compiler warning when casting the return value of + smartlist_len() to double with DEBUG_SMARTLIST enabled. Fixes bug + 26283; bugfix on 0.2.4.10-alpha. + + o Minor bugfixes (compilation, windows): + - Don't link or search for pthreads when building for Windows, even + if we are using build environment (like mingw) that provides a + pthreads library. Fixes bug 27081; bugfix on 0.1.0.1-rc. + + o Minor bugfixes (continuous integration): + - Build with zstd on macOS. Fixes bug 27090; bugfix on 0.3.1.5-alpha. + - Skip a pair of unreliable key generation tests on Windows, until + the underlying issue in bug 26076 is resolved. Fixes bug 26830 and + bug 26853; bugfix on 0.2.7.3-rc and 0.3.2.1-alpha respectively. + + o Minor bugfixes (control port): + - Respond with more human-readable error messages to GETINFO exit- + policy/* requests. Also, let controller know if an error is + transient (response code 551) or not (response code 552). Fixes + bug 25852; bugfix on 0.2.8.1-alpha. + - Parse the "HSADDRESS=" parameter in HSPOST commands properly. + Previously, it was misparsed and ignored. Fixes bug 26523; bugfix + on 0.3.3.1-alpha. Patch by "akwizgran". + - Make CIRC_BW event reflect the total of all data sent on a + circuit, including padding and dropped cells. Also fix a mis- + counting bug when STREAM_BW events were enabled. Fixes bug 25400; + bugfix on 0.2.5.2-alpha. + + o Minor bugfixes (correctness, flow control): + - Upon receiving a stream-level SENDME cell, verify that our window + has not grown too large. Fixes bug 26214; bugfix on svn + r54 (pre-0.0.1) + + o Minor bugfixes (directory authority): + - When voting for recommended versions, make sure that all of the + versions are well-formed and parsable. Fixes bug 26485; bugfix + on 0.1.1.6-alpha. + + o Minor bugfixes (directory client): + - When unverified-consensus is verified, rename it to cached- + consenus. Fixes bug 4187; bugfix on 0.2.0.3-alpha. + - Fixed launching a certificate fetch always during the scheduled + periodic consensus fetch by fetching only in those cases when + consensus are waiting for certs. Fixes bug 24740; bugfix + on 0.2.9.1-alpha. + + o Minor bugfixes (error reporting): + - Improve tolerance for directory authorities with skewed clocks. + Previously, an authority with a clock more than 60 seconds ahead + could cause a client with a correct clock to warn that the + client's clock was behind. Now the clocks of a majority of + directory authorities have to be ahead of the client before this + warning will occur. Fixes bug 25756; bugfix on 0.2.2.25-alpha. + + o Minor bugfixes (in-process restart): + - Always call tor_free_all() when leaving tor_run_main(). When we + did not, restarting tor in-process would cause an assertion + failure. Fixes bug 26948; bugfix on 0.3.3.1-alpha. + + o Minor bugfixes (Linux seccomp2 sandbox): + - Fix a bug in our sandboxing rules for the openat() syscall. + Previously, no openat() call would be permitted, which would break + filesystem operations on recent glibc versions. Fixes bug 25440; + bugfix on 0.2.9.15. Diagnosis and patch from Daniel Pinto. + + o Minor bugfixes (logging): + - Improve the log message when connection initiators fail to + authenticate direct connections to relays. Fixes bug 26927; bugfix + on 0.3.0.1-alpha. + + o Minor bugfixes (onion services): + - Silence a spurious compiler warning in + rend_client_send_introduction(). Fixes bug 27463; bugfix + on 0.1.1.2-alpha. + - Fix bug that causes services to not ever rotate their descriptors + if they were getting SIGHUPed often. Fixes bug 26932; bugfix + on 0.3.2.1-alpha. + - Recompute some consensus information after detecting a clock jump, + or after transitioning from a non-live consensus to a live + consensus. We do this to avoid having an outdated state, and + miscalculating the index for next-generation onion services. Fixes + bug 24977; bugfix on 0.3.2.1-alpha. + + o Minor bugfixes (portability): + - Fix compilation of the unit tests on GNU/Hurd, which does not + define PATH_MAX. Fixes bug 26873; bugfix on 0.3.3.1-alpha. Patch + from "paulusASol". + - Work around two different bugs in the OS X 10.10 and later SDKs + that would prevent us from successfully targeting earlier versions + of OS X. Fixes bug 26876; bugfix on 0.3.3.1-alpha. + - Do not align mmap length, as it is not required by POSIX, and the + getpagesize function is deprecated. Fixes bug 25399; bugfix + on 0.1.1.23. + + o Minor bugfixes (portability, FreeBSD): + - In have_enough_mem_for_dircache(), the variable DIRCACHE_MIN_MEM_MB + does not stringify on FreeBSD, so we switch to tor_asprintf(). + Fixes bug 20887; bugfix on 0.2.8.1-alpha. Patch by Neel Chauhan. + + o Minor bugfixes (relay statistics): + - When a relay is collecting internal statistics about how many + create cell requests it has seen of each type, accurately count + the requests from relays that temporarily fall out of the + consensus. (To be extra conservative, we were already ignoring + requests from clients in our counts, and we continue ignoring them + here.) Fixes bug 24910; bugfix on 0.2.4.17-rc. + + o Minor bugfixes (rust): + - Backport test_rust.sh from master. Fixes bug 26497; bugfix + on 0.3.1.5-alpha. + - Protover parsing was accepting the presence of whitespace in + version strings, which the C implementation would choke on, e.g. + "Desc=1\t,2". Fixes bug 27177; bugfix on 0.3.3.5-rc. + - Protover parsing was ignoring a 2nd hyphen and everything after + it, accepting entries like "Link=1-5-foo". Fixes bug 27164; bugfix + on 0.3.3.1-alpha. + - Stop setting $CARGO_HOME. cargo will use the user's $CARGO_HOME, or + $HOME/.cargo by default. Fixes bug 26497; bugfix on 0.3.1.5-alpha. + - cd to ${abs_top_builddir}/src/rust before running cargo in + src/test/test_rust.sh. This makes the working directory consistent + between builds and tests. Fixes bug 26497; bugfix on 0.3.3.2-alpha. + + o Minor bugfixes (single onion services, Tor2web): + - Log a protocol warning when single onion services or Tor2web + clients fail to authenticate direct connections to relays. Fixes + bug 26924; bugfix on 0.2.9.1-alpha. + + o Minor bugfixes (test coverage tools): + - Update our "cov-diff" script to handle output from the latest + version of gcov, and to remove extraneous timestamp information + from its output. Fixes bugs 26101 and 26102; bugfix + on 0.2.5.1-alpha. + + o Minor bugfixes (testing): + - Disable core dumps in test_bt.sh, to avoid failures in "make + distcheck". Fixes bug 26787; bugfix on 0.2.5.2-alpha. + - When testing workqueue event-cancellation, make sure that we + actually cancel an event, and that cancel each event with equal + probability. (It was previously possible, though extremely + unlikely, for our event-canceling test not to cancel any events.) + Fixes bug 26008; bugfix on 0.2.6.3-alpha. + - Repeat part of the test in test_client_pick_intro() a number of + times, to give it consistent coverage. Fixes bug 25996; bugfix + on 0.3.2.1-alpha. + - Remove randomness from the hs_common/responsible_hsdirs test, so + that it always takes the same path through the function it tests. + Fixes bug 25997; bugfix on 0.3.2.1-alpha. + - Change the behavior of the "channel/outbound" test so that it + never causes a 10-second rollover for the EWMA circuitmux code. + Previously, this behavior would happen randomly, and result in + fluctuating test coverage. Fixes bug 25994; bugfix + on 0.3.3.1-alpha. + - Use X509_new() to allocate certificates that will be freed later + with X509_free(). Previously, some parts of the unit tests had + used tor_malloc_zero(), which is incorrect, and which caused test + failures on Windows when they were built with extra hardening. + Fixes bugs 25943 and 25944; bugfix on 0.2.8.1-alpha. Patch by + Marcin Cieślak. + - While running the circuit_timeout test, fix the PRNG to a + deterministic AES stream, so that the test coverage from this test + will itself be deterministic. Fixes bug 25995; bugfix + on 0.2.2.2-alpha. + + o Minor bugfixes (testing, bootstrap): + - When calculating bootstrap progress, check exit policies and the + exit flag. Previously, Tor would only check the exit flag, which + caused race conditions in small and fast networks like chutney. + Fixes bug 27236; bugfix on 0.2.6.3-alpha. + + o Minor bugfixes (testing, chutney): + - When running make test-network-all, use the mixed+hs-v2 network. + (A previous fix to chutney removed v3 onion services from the + mixed+hs-v23 network, so seeing "mixed+hs-v23" in tests is + confusing.) Fixes bug 27345; bugfix on 0.3.2.1-alpha. + - Before running make test-network-all, delete old logs and test + result files, to avoid spurious failures. Fixes bug 27295; bugfix + on 0.2.7.3-rc. + + o Minor bugfixes (testing, openssl compatibility): + - Our "tortls/cert_matches_key" unit test no longer relies on + OpenSSL internals. Previously, it relied on unsupported OpenSSL + behavior in a way that caused it to crash with OpenSSL 1.0.2p. + Fixes bug 27226; bugfix on 0.2.5.1-alpha. + + o Minor bugfixes (v3 onion services): + - Stop sending ed25519 link specifiers in v3 onion service introduce + cells and descriptors, when the rendezvous or introduction point + doesn't support ed25519 link authentication. Fixes bug 26627; + bugfix on 0.3.2.4-alpha. + + o Minor bugfixes (vanguards): + - Allow the last hop in a vanguard circuit to be the same as our + first, to prevent the adversary from influencing guard node choice + by choice of last hop. Also prevent the creation of A - B - A + paths, or A - A paths, which are forbidden by relays. Fixes bug + 25870; bugfix on 0.3.3.1-alpha. + + o Minor bugfixes (Windows, compilation): + - Silence a compilation warning on MSVC 2017 and clang-cl. Fixes bug + 27185; bugfix on 0.2.2.2-alpha. + + o Code simplification and refactoring: + - Remove duplicate code in parse_{c,s}method_line and bootstrap + their functionalities into a single function. Fixes bug 6236; + bugfix on 0.2.3.6-alpha. + - We remove the PortForwsrding and PortForwardingHelper options, + related functions, and the port_forwarding tests. These options + were used by the now-deprecated Vidalia to help ordinary users + become Tor relays or bridges. Closes ticket 25409. Patch by + Neel Chauhan. + - In order to make the OR and dir checking function in router.c less + confusing we renamed some functions and + consider_testing_reachability() has been split into + router_should_check_reachability() and + router_do_reachability_checks(). Also we improved the documentation + in some functions. Closes ticket 18918. + - Initial work to isolate Libevent usage to a handful of modules in + our codebase, to simplify our call structure, and so that we can + more easily change event loops in the future if needed. Closes + ticket 23750. + - Introduce a function to call getsockname() and return tor_addr_t, + to save a little complexity throughout the codebase. Closes + ticket 18105. + - Make hsdir_index in node_t a hsdir_index_t rather than a pointer + as hsdir_index is always present. Also, we move hsdir_index_t into + or.h. Closes ticket 23094. Patch by Neel Chauhan. + - Merge functions used for describing nodes and suppress the + functions that do not allocate memory for the output buffer + string. NODE_DESC_BUF_LEN constant and format_node_description() + function cannot be used externally from router.c module anymore. + Closes ticket 25432. Patch by valentecaio. + - Our main loop has been simplified so that all important operations + happen inside events. Previously, some operations had to happen + outside the event loop, to prevent infinite sequences of event + activations. Closes ticket 25374. + - Put a SHA1 public key digest in hs_service_intro_point_t, and use + it in register_intro_circ() and service_intro_point_new(). This + prevents the digest from being re-calculated each time. Closes + ticket 23107. Patch by Neel Chauhan. + - Refactor token-bucket implementations to use a common backend. + Closes ticket 25766. + - Remove extern declaration of stats_n_seconds_working variable from + main, protecting its accesses with get_uptime() and reset_uptime() + functions. Closes ticket 25081, patch by “valentecaio”. + - Remove our previous logic for "cached gettimeofday()" -- our + coarse monotonic timers are fast enough for this purpose, and far + less error-prone. Implements part of ticket 25927. + - Remove the return value for fascist_firewall_choose_address_base(), + and sister functions such as fascist_firewall_choose_address_node() + and fascist_firewall_choose_address_rs(). Also, while we're here, + initialize the ap argument as leaving it uninitialized can pose a + security hazard. Closes ticket 24734. Patch by Neel Chauhan. + - Rename two fields of connection_t struct. timestamp_lastwritten is + renamed to timestamp_last_write_allowed and timestamp_lastread is + renamed to timestamp_last_read_allowed. Closes ticket 24714, patch + by "valentecaio". + - Since Tor requires C99, remove our old workaround code for libc + implementations where free(NULL) doesn't work. Closes ticket 24484. + - Use our standard rate-limiting code to deal with excessive + libevent failures, rather than the hand-rolled logic we had + before. Closes ticket 26016. + - We remove the return value of node_get_prim_orport() and + node_get_prim_dirport(), and introduce node_get_prim_orport() in + node_ipv6_or_preferred() and node_ipv6_dir_preferred() in order to + check for a null address. Closes ticket 23873. Patch by + Neel Chauhan. + - We switch to should_record_bridge_info() in + geoip_note_client_seen() and options_need_geoip_info() instead of + accessing the configuration values directly. Fixes bug 25290; + bugfix on 0.2.1.6-alpha. Patch by Neel Chauhan. + + o Deprecated features: + - As we are not recommending 0.2.5 anymore, we require relays that + once had an ed25519 key associated with their RSA key to always + have that key, instead of allowing them to drop back to a version + that didn't support ed25519. This means they need to use a new RSA + key if the want to downgrade to an older version of tor without + ed25519. Closes ticket 20522. + + o Removed features: + - Directory authorities will no longer support voting according to + any consensus method before consensus method 25. This keeps + authorities compatible with all authorities running 0.2.9.8 and + later, and does not break any clients or relays. Implements ticket + 24378 and proposal 290. + - The PortForwarding and PortForwardingHelper features have been + removed. The reasoning is, given that implementations of NAT + traversal protocols within common consumer grade routers are + frequently buggy, and that the target audience for a NAT punching + feature is a perhaps less-technically-inclined relay operator, + when the helper fails to setup traversal the problems are usually + deep, ugly, and very router specific, making them horrendously + impossible for technical support to reliable assist with, and thus + resulting in frustration all around. Unfortunately, relay + operators who would like to run relays behind NATs will need to + become more familiar with the port forwarding configurations on + their local router. Closes 25409. + - The TestingEnableTbEmptyEvent option has been removed. It was used + in testing simulations to measure how often connection buckets + were emptied, in order to improve our scheduling, but it has not + been actively used in years. Closes ticket 25760. + - The old "round-robin" circuit multiplexer (circuitmux) + implementation has been removed, along with a fairly large set of + code that existed to support it. It has not been the default + circuitmux since we introduced the "EWMA" circuitmux in 0.2.4.x, + but it still required an unreasonable amount of memory and CPU. + Closes ticket 25268. + + Changes in version 0.3.3.9 - 2018-07-13 Tor 0.3.3.9 moves to a new bridge authority, meaning people running bridge relays should upgrade.

1 0