October 2019 - tor-commits - lists.torproject.org

[tor/master] test: Fix a loop variable bug in test_parseconf.sh
by teor＠torproject.org 30 Oct '19

30 Oct '19

commit 861b9366df534145e1316efa0c34a62cc2a036c2 Author: teor <teor(a)torproject.org> Date: Thu Oct 31 00:19:11 2019 +1000 test: Fix a loop variable bug in test_parseconf.sh Obviously correct fixes to already reviewed code. No changes file required: not in any released version of tor. --- src/test/test_parseconf.sh | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/test/test_parseconf.sh b/src/test/test_parseconf.sh index d46be5e5c..3edb5032e 100755 --- a/src/test/test_parseconf.sh +++ b/src/test/test_parseconf.sh @@ -151,6 +151,8 @@ for dir in "${EXAMPLEDIR}"/*; do CMDLINE="" fi + EXPECTED= + ERROR= # If tor has some modules disabled, search for a custom result file for # the disabled modules for suffix in "_no_$TOR_MODULES_DISABLED" ""; do

1 0

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 30 Oct '19

30 Oct '19

commit 75eb84094ee60e13aca366f857b717d5614b3bde Author: Translation commit bot <translation(a)torproject.org> Date: Wed Oct 30 13:53:20 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+tr.po | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/contents+tr.po b/contents+tr.po index 6e2d742cf..3b98b7d3b 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -4610,7 +4610,8 @@ msgid "" msgstr "" "**BandwidthBurst** bant genişliği sıçraması isteklerin yerine getirilmesi " "amacıyla kısa süreler için BandwidthRate değerinin, uzun dönemde " -"BandwidthRate ortalama değerinde kalacak şekilde aşılabileceği değer." +"BandwidthRate ortalama değerinde kalacak şekilde aşılabileceği bir depo " +"oluşturur." #: https//support.torproject.org/operators/bandwidth-shaping/ #: (content/operators/bandwidth-shaping/contents+en.lrquestion.description) @@ -4630,6 +4631,10 @@ msgid "" "second; but if you choose a higher BandwidthBurst (like 5 MBytes), it will " "allow more bytes through until the pool is empty." msgstr "" +"Örneğin \"BandwidthBurst 500 KBytes\" seçip BandwidthRate ayarını da " +"yaparsanız, hiç bir zaman saniyede 500 kilobayt üzerine çıkamazsınız. Ancak " +"daha yüksek bir bant genişliği sıçraması değeri seçerseniz (5 MB gibi) depo " +"boşalana kadar daha yüksek bant genişliği kullanabilirsiniz." #: https//support.torproject.org/operators/bandwidth-shaping/ #: (content/operators/bandwidth-shaping/contents+en.lrquestion.description) @@ -4638,6 +4643,9 @@ msgid "" "cable modem, you should set BandwidthRate to less than your smaller " "bandwidth (Usually that's the upload bandwidth)." msgstr "" +"Bağlantınız bir kablo ya da ADSL modemdeki gibi asimetrik ise (yükleme hızı " +"indirme hızından düşük ise) BandwidthRate değerini küçük olan bant genişliği" +" değerine göre ayarlayın (genellikle yükleme hızı daha küçüktür)." #: https//support.torproject.org/operators/bandwidth-shaping/ #: (content/operators/bandwidth-shaping/contents+en.lrquestion.description) @@ -4646,11 +4654,16 @@ msgid "" "usage - you may need to experiment with which values make your connection " "comfortable." msgstr "" +"Yoksa en yüksek bant genişliği kullanımı süresince pek çok veri paketiniz " +"kaybolur. Size uygun değerleri bulmak için bir kaç deneme yapmanız " +"gerekebilir." #: https//support.torproject.org/operators/bandwidth-shaping/ #: (content/operators/bandwidth-shaping/contents+en.lrquestion.description) msgid "Then set BandwidthBurst to the same as BandwidthRate." msgstr "" +"Ardından BandwidthBurst değerini BandwidthRate değeri ile aynı olacak " +"şekilde ayarlayın." #: https//support.torproject.org/operators/bandwidth-shaping/ #: (content/operators/bandwidth-shaping/contents+en.lrquestion.description) @@ -4659,6 +4672,9 @@ msgid "" "prioritize Tor traffic below other traffic on their machine, so that their " "own personal traffic is not impacted by Tor load." msgstr "" +"Linux temelli Tor duraklarında kullanılabilecek başka bir seçenek vardır. " +"Tor trafiğinin bilgisayardan geçen diğer trafiğe göre önceliği " +"ayarlanabilir. Böylece işletmecinin kişisel trafiği Tor yükünden etkilenmez." #: https//support.torproject.org/operators/bandwidth-shaping/ #: (content/operators/bandwidth-shaping/contents+en.lrquestion.description)

1 0

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 30 Oct '19

30 Oct '19

commit a3147b47d5cff8e5f3c6b465ba47c805bc142780 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Oct 30 13:23:46 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+tr.po | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/contents+tr.po b/contents+tr.po index b782210b3..6e2d742cf 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -4592,9 +4592,9 @@ msgid "" "megabytes per second (a fast connection), or \"BandwidthRate 500 KBytes\" " "for 500 kilobytes per second (a decent cable connection)." msgstr "" -"Örneğin, saniyede 10 megabayt için \"10 MB bant genişliği\" (hızlı bağlantı)" -" ya da saniyede 500 kilobayt için \"500 KB bant genişliği\" (sınırlı kablo " -"bağlantısı) olarak seçebilirsiniz." +"Örneğin, saniyede 10 megabayt için \"BandwidthRate 10 MBytes\" (hızlı " +"bağlantı) ya da saniyede 500 kilobayt için \"BandwidthRate 500 KBytes\" " +"(sınırlı kablo bağlantısı) olarak seçebilirsiniz." #: https//support.torproject.org/operators/bandwidth-shaping/ #: (content/operators/bandwidth-shaping/contents+en.lrquestion.description)

1 0

[tor/master] Reword DESCRIPTION in tor.1.txt
by dgoulet＠torproject.org 30 Oct '19

30 Oct '19

commit 90ba8bae3f3cb026239d13579e54a0e7020ab846 Author: Taylor Yu <catalyst(a)torproject.org> Date: Thu Oct 24 15:15:31 2019 -0500 Reword DESCRIPTION in tor.1.txt Reword the DESCRIPTION section of tor.1.txt. Based on a patch by Swati Thacker. Part of ticket 32277. --- doc/tor.1.txt | 35 +++++++++++++++++++---------------- 1 file changed, 19 insertions(+), 16 deletions(-) diff --git a/doc/tor.1.txt b/doc/tor.1.txt index de01cefbf..fd09e30d6 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -18,22 +18,25 @@ SYNOPSIS DESCRIPTION ----------- -Tor is a connection-oriented anonymizing communication -service. Users choose a source-routed path through a set of nodes, and -negotiate a "virtual circuit" through the network, in which each node -knows its predecessor and successor, but no others. Traffic flowing down -the circuit is unwrapped by a symmetric key at each node, which reveals -the downstream node. + - -Basically, Tor provides a distributed network of servers or relays ("onion routers"). -Users bounce their TCP streams -- web traffic, ftp, ssh, etc. -- around the -network, and recipients, observers, and even the relays themselves have -difficulty tracking the source of the stream. - -By default, **tor** will act as a client only. To help the network -by providing bandwidth as a relay, change the **ORPort** configuration -option -- see below. Please also consult the documentation on the Tor -Project's website. + +Tor is a connection-oriented anonymizing communication service. Users +choose a source-routed path through a set of nodes, and negotiate a +"virtual circuit" through the network. Each node in a virtual circuit +knows its predecessor and successor nodes, but no other nodes. Traffic +flowing down the circuit is unwrapped by a symmetric key at each node, +which reveals the downstream node. + + +Basically, Tor provides a distributed network of servers or relays +("onion routers"). Users bounce their TCP streams, including web +traffic, ftp, ssh, etc., around the network, so that recipients, +observers, and even the relays themselves have difficulty tracking the +source of the stream. + +[NOTE] +By default, **tor** acts as a client only. To help the network by +providing bandwidth as a relay, change the **ORPort** configuration +option as mentioned below. Please also consult the documentation on +the Tor Project's website. COMMAND-LINE OPTIONS --------------------

1 0

[tor/master] Move command-line conf option description earlier
by dgoulet＠torproject.org 30 Oct '19

30 Oct '19

commit 4c38fccb9bc0cfc9468b5f37d38830e30aea2739 Author: Taylor Yu <catalyst(a)torproject.org> Date: Thu Oct 24 14:17:30 2019 -0500 Move command-line conf option description earlier In tor.1.txt, move the paragraphs at the end of the COMMAND-LINE OPTIONS section earlier. This text describes how the user can specify configuration options on the command line. Also clarify some wording and formatting. Based on a patch by Swati Thacker. Part of ticket 32277. --- doc/tor.1.txt | 36 ++++++++++++++++++++++++------------ 1 file changed, 24 insertions(+), 12 deletions(-) diff --git a/doc/tor.1.txt b/doc/tor.1.txt index 05e7fc948..de01cefbf 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -37,6 +37,29 @@ Project's website. COMMAND-LINE OPTIONS -------------------- + +Tor has a powerful command-line interface. This section lists optional +arguments you can specify at the command line using the **`tor`** +command. + +Configuration options can be specified on the command line in the +format **`--`**_OptionName_ _OptionValue_, on the command line in the +format _OptionName_ _OptionValue_, or in a configuration file. For +instance, you can tell Tor to start listening for SOCKS connections on +port 9999 by passing either **`--SocksPort 9999`** or **`SocksPort +9999`** on the command line, or by specifying **`SocksPort 9999`** in +the configuration file. On the command line, quote option values that +contain spaces. For instance, if you want Tor to log all debugging +messages to **`debug.log`**, you must specify **`--Log "debug file +debug.log"`**. + +NOTE: Configuration options on the command line override those in +configuration files. See **<<conf-format,THE CONFIGURATION FILE +FORMAT>>** for more information. + +The following options in this section are only recognized on the +**`tor`** command line, not in a configuration file. + [[opt-h]] **-h**, **--help**:: Display a short help message and exit. @@ -145,18 +168,7 @@ COMMAND-LINE OPTIONS For example, the output sent to stdout will be of the form: "signing-cert-expiry: 2017-07-25 08:30:15 UTC" -Other options can be specified on the command-line in the format "--option -value", in the format "option value", or in a configuration file. For -instance, you can tell Tor to start listening for SOCKS connections on port -9999 by passing --SocksPort 9999 or SocksPort 9999 to it on the command line, -or by putting "SocksPort 9999" in the configuration file. You will need to -quote options with spaces in them: if you want Tor to log all debugging -messages to debug.log, you will probably need to say **--Log** `"debug file -debug.log"`. - -Options on the command line override those in configuration files. See the -next section for more information. - +[[conf-format]] THE CONFIGURATION FILE FORMAT -----------------------------

1 0

[tor/master] Changes file for ticket 32277
by dgoulet＠torproject.org 30 Oct '19

30 Oct '19

commit 1e8ddbe1ee1a3b1b99ff40dc1acb748eba29d16e Author: Taylor Yu <catalyst(a)torproject.org> Date: Thu Oct 24 17:59:28 2019 -0500 Changes file for ticket 32277 --- changes/ticket32277 | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/changes/ticket32277 b/changes/ticket32277 new file mode 100644 index 000000000..1ef0c4ab5 --- /dev/null +++ b/changes/ticket32277 @@ -0,0 +1,5 @@ + o Documentation (manpage): + - In the tor(1) manpage, reword and improve formatting of the + COMMAND-LINE OPTIONS and DESCRIPTION sections. Closes ticket + 32277. Based on work by Swati Thacker as part of Google Season + of Docs.

1 0

[tor/master] Reword command-options in tor.1.txt
by dgoulet＠torproject.org 30 Oct '19

30 Oct '19

commit 8660a32d18e2583fb3003d9a6d9130df23829729 Author: Taylor Yu <catalyst(a)torproject.org> Date: Thu Oct 24 16:27:35 2019 -0500 Reword command-options in tor.1.txt Reword the COMMAND-LINE OPTIONS section of tor.1.txt. Based on a patch by Swati Thacker. Part of ticket 32277. --- doc/tor.1.txt | 79 +++++++++++++++++++++++++++++++---------------------------- 1 file changed, 42 insertions(+), 37 deletions(-) diff --git a/doc/tor.1.txt b/doc/tor.1.txt index fd09e30d6..b9738cdb6 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -68,13 +68,13 @@ The following options in this section are only recognized on the [[opt-f]] **-f** __FILE__:: Specify a new configuration file to contain further Tor configuration - options OR pass *-* to make Tor read its configuration from standard + options, or pass *-* to make Tor read its configuration from standard input. (Default: @CONFDIR@/torrc, or $HOME/.torrc if that file is not found) [[opt-allow-missing-torrc]] **--allow-missing-torrc**:: - Do not require that configuration file specified by **-f** exist if - default torrc can be accessed. + Allow the configuration file specified by **-f** to be missing, if + the defaults-torrc file (see below) is accessible. [[opt-defaults-torrc]] **--defaults-torrc** __FILE__:: Specify a file in which to find default values for Tor options. The @@ -83,18 +83,18 @@ The following options in this section are only recognized on the @CONFDIR@/torrc-defaults.) [[opt-ignore-missing-torrc]] **--ignore-missing-torrc**:: - Specifies that Tor should treat a missing torrc file as though it + Specify that Tor should treat a missing torrc file as though it were empty. Ordinarily, Tor does this for missing default torrc files, but not for those specified on the command line. [[opt-hash-password]] **--hash-password** __PASSWORD__:: - Generates a hashed password for control port access. + Generate a hashed password for control port access. [[opt-list-fingerprint]] **--list-fingerprint**:: Generate your keys and output your nickname and fingerprint. [[opt-verify-config]] **--verify-config**:: - Verify the configuration file is valid. + Verify whether the configuration file is valid. [[opt-serviceinstall]] **--service install** [**--options** __command-line options__]:: Install an instance of Tor as a Windows service, with the provided @@ -115,8 +115,8 @@ The following options in this section are only recognized on the future version. (This is a warning, not a promise.) [[opt-list-modules]] **--list-modules**:: - For each optional module, list whether or not it has been compiled - into Tor. (Any module not listed is not optional in this version of Tor.) + List whether each optional module has been compiled into Tor. + (Any module not listed is not optional in this version of Tor.) [[opt-version]] **--version**:: Display Tor version and exit. The output is a single line of the format @@ -124,41 +124,46 @@ The following options in this section are only recognized on the is as specified in version-spec.txt.) [[opt-quiet]] **--quiet**|**--hush**:: - Override the default console log. By default, Tor starts out logging - messages at level "notice" and higher to the console. It stops doing so - after it parses its configuration, if the configuration tells it to log - anywhere else. You can override this behavior with the **--hush** option, - which tells Tor to only send warnings and errors to the console, or with - the **--quiet** option, which tells Tor not to log to the console at all. + Override the default console logging behavior. By default, Tor + starts out logging messages at level "notice" and higher to the + console. It stops doing so after it parses its configuration, if + the configuration tells it to log anywhere else. These options + override the default console logging behavior. Use the **--hush** + option if you want Tor to log only warnings and errors to the + console, or use the **--quiet** option if you want Tor not to log + to the console at all. [[opt-keygen]] **--keygen** [**--newpass**]:: - Running "tor --keygen" creates a new ed25519 master identity key for a - relay, or only a fresh temporary signing key and certificate, if you - already have a master key. Optionally you can encrypt the master identity - key with a passphrase: Tor will ask you for one. If you don't want to - encrypt the master key, just don't enter any passphrase when asked. + - + - The **--newpass** option should be used with --keygen only when you need - to add, change, or remove a passphrase on an existing ed25519 master - identity key. You will be prompted for the old passphase (if any), - and the new passphrase (if any). + - + - When generating a master key, you will probably want to use - **--DataDirectory** to control where the keys - and certificates will be stored, and **--SigningKeyLifetime** to - control their lifetimes. Their behavior is as documented in the - server options section below. (You must have write access to the specified - DataDirectory.) + - + - To use the generated files, you must copy them to the DataDirectory/keys - directory of your Tor daemon, and make sure that they are owned by the - user actually running the Tor daemon on your system. + Running "tor --keygen" creates a new ed25519 master identity key + for a relay, or only a fresh temporary signing key and + certificate, if you already have a master key. Optionally, you + can encrypt the master identity key with a passphrase. When Tor + asks you for a passphrase and you don't want to encrypt the master + key, just don't enter any passphrase when asked. + + + + Use the **--newpass** option with --keygen only when you need to + add, change, or remove a passphrase on an existing ed25519 master + identity key. You will be prompted for the old passphase (if any), + and the new passphrase (if any). ++ +[NOTE] +When generating a master key, you may want to use **--DataDirectory** +to control where the keys and certificates will be stored, and +**--SigningKeyLifetime** to control their lifetimes. See the server +options section to learn more about the behavior of these options. +You must have write access to the specified DataDirectory. ++ +To use the generated files, you must copy them to the +DataDirectory/keys directory of your Tor daemon, and make sure that +they are owned by the user actually running the Tor daemon on your +system. **--passphrase-fd** __FILEDES__:: - Filedescriptor to read the passphrase from. Note that unlike with the + File descriptor to read the passphrase from. Note that unlike with the tor-gencert program, the entire file contents are read and used as the passphrase, including any trailing newlines. - Default: read from the terminal. + If the file descriptor is not specified, the passphrase is read + from the terminal by default. [[opt-key-expiration]] **--key-expiration** [**purpose**]:: The **purpose** specifies which type of key certificate to determine

1 0

[tor/master] Reformat some options in tor.1.txt
by dgoulet＠torproject.org 30 Oct '19

30 Oct '19

commit 5e4ae730516712080b3844a1eb632cd4678b9cca Author: Taylor Yu <catalyst(a)torproject.org> Date: Thu Oct 24 16:41:32 2019 -0500 Reformat some options in tor.1.txt Reformat command line options in tor.1.txt to display as fixed-width in the HTML version. Based on a patch by Swati Thacker. Part of ticket 32277. --- doc/tor.1.txt | 100 ++++++++++++++++++++++++++++++---------------------------- 1 file changed, 51 insertions(+), 49 deletions(-) diff --git a/doc/tor.1.txt b/doc/tor.1.txt index b9738cdb6..d5297f77c 100644 --- a/doc/tor.1.txt +++ b/doc/tor.1.txt @@ -63,118 +63,120 @@ FORMAT>>** for more information. The following options in this section are only recognized on the **`tor`** command line, not in a configuration file. -[[opt-h]] **-h**, **--help**:: +[[opt-h]] **`-h`**, **`--help`**:: Display a short help message and exit. -[[opt-f]] **-f** __FILE__:: +[[opt-f]] **`-f`** __FILE__:: Specify a new configuration file to contain further Tor configuration options, or pass *-* to make Tor read its configuration from standard - input. (Default: @CONFDIR@/torrc, or $HOME/.torrc if that file is not - found) + input. (Default: **`@CONFDIR@/torrc`**, or **`$HOME/.torrc`** if + that file is not found) -[[opt-allow-missing-torrc]] **--allow-missing-torrc**:: - Allow the configuration file specified by **-f** to be missing, if - the defaults-torrc file (see below) is accessible. +[[opt-allow-missing-torrc]] **`--allow-missing-torrc`**:: + Allow the configuration file specified by **`-f`** to be missing, + if the defaults-torrc file (see below) is accessible. -[[opt-defaults-torrc]] **--defaults-torrc** __FILE__:: +[[opt-defaults-torrc]] **`--defaults-torrc`** __FILE__:: Specify a file in which to find default values for Tor options. The contents of this file are overridden by those in the regular configuration file, and by those on the command line. (Default: - @CONFDIR@/torrc-defaults.) + **`@CONFDIR@/torrc-defaults`**.) -[[opt-ignore-missing-torrc]] **--ignore-missing-torrc**:: +[[opt-ignore-missing-torrc]] **`--ignore-missing-torrc`**:: Specify that Tor should treat a missing torrc file as though it were empty. Ordinarily, Tor does this for missing default torrc files, but not for those specified on the command line. -[[opt-hash-password]] **--hash-password** __PASSWORD__:: +[[opt-hash-password]] **`--hash-password`** __PASSWORD__:: Generate a hashed password for control port access. -[[opt-list-fingerprint]] **--list-fingerprint**:: +[[opt-list-fingerprint]] **`--list-fingerprint`**:: Generate your keys and output your nickname and fingerprint. -[[opt-verify-config]] **--verify-config**:: +[[opt-verify-config]] **`--verify-config`**:: Verify whether the configuration file is valid. -[[opt-serviceinstall]] **--service install** [**--options** __command-line options__]:: +[[opt-serviceinstall]] **`--service install`** [**`--options`** __command-line options__]:: Install an instance of Tor as a Windows service, with the provided command-line options. Current instructions can be found at https://www.torproject.org/docs/faq#NTService -[[opt-service]] **--service** **remove**|**start**|**stop**:: +[[opt-service]] **`--service`** **`remove`**|**`start`**|**`stop`**:: Remove, start, or stop a configured Tor Windows service. -[[opt-nt-service]] **--nt-service**:: +[[opt-nt-service]] **`--nt-service`**:: Used internally to implement a Windows service. -[[opt-list-torrc-options]] **--list-torrc-options**:: +[[opt-list-torrc-options]] **`--list-torrc-options`**:: List all valid options. -[[opt-list-deprecated-options]] **--list-deprecated-options**:: +[[opt-list-deprecated-options]] **`--list-deprecated-options`**:: List all valid options that are scheduled to become obsolete in a future version. (This is a warning, not a promise.) -[[opt-list-modules]] **--list-modules**:: +[[opt-list-modules]] **`--list-modules`**:: List whether each optional module has been compiled into Tor. (Any module not listed is not optional in this version of Tor.) -[[opt-version]] **--version**:: +[[opt-version]] **`--version`**:: Display Tor version and exit. The output is a single line of the format "Tor version [version number]." (The version number format is as specified in version-spec.txt.) -[[opt-quiet]] **--quiet**|**--hush**:: +[[opt-quiet]] **`--quiet`**|**`--hush`**:: Override the default console logging behavior. By default, Tor starts out logging messages at level "notice" and higher to the console. It stops doing so after it parses its configuration, if the configuration tells it to log anywhere else. These options - override the default console logging behavior. Use the **--hush** - option if you want Tor to log only warnings and errors to the - console, or use the **--quiet** option if you want Tor not to log - to the console at all. + override the default console logging behavior. Use the + **`--hush`** option if you want Tor to log only warnings and + errors to the console, or use the **`--quiet`** option if you want + Tor not to log to the console at all. -[[opt-keygen]] **--keygen** [**--newpass**]:: - Running "tor --keygen" creates a new ed25519 master identity key +[[opt-keygen]] **`--keygen`** [**`--newpass`**]:: + Running **`tor --keygen`** creates a new ed25519 master identity key for a relay, or only a fresh temporary signing key and certificate, if you already have a master key. Optionally, you can encrypt the master identity key with a passphrase. When Tor asks you for a passphrase and you don't want to encrypt the master key, just don't enter any passphrase when asked. + + - Use the **--newpass** option with --keygen only when you need to - add, change, or remove a passphrase on an existing ed25519 master - identity key. You will be prompted for the old passphase (if any), - and the new passphrase (if any). + Use the **`--newpass`** option with **`--keygen`** only when you + need to add, change, or remove a passphrase on an existing ed25519 + master identity key. You will be prompted for the old passphase + (if any), and the new passphrase (if any). + [NOTE] -When generating a master key, you may want to use **--DataDirectory** -to control where the keys and certificates will be stored, and -**--SigningKeyLifetime** to control their lifetimes. See the server -options section to learn more about the behavior of these options. -You must have write access to the specified DataDirectory. + When generating a master key, you may want to use + **`--DataDirectory`** to control where the keys and certificates + will be stored, and **`--SigningKeyLifetime`** to control their + lifetimes. See the server options section to learn more about the + behavior of these options. You must have write access to the + specified DataDirectory. + -To use the generated files, you must copy them to the -DataDirectory/keys directory of your Tor daemon, and make sure that -they are owned by the user actually running the Tor daemon on your -system. +[normal] + To use the generated files, you must copy them to the + __DataDirectory__/**`keys`** directory of your Tor daemon, and + make sure that they are owned by the user actually running the Tor + daemon on your system. -**--passphrase-fd** __FILEDES__:: +**`--passphrase-fd`** __FILEDES__:: File descriptor to read the passphrase from. Note that unlike with the tor-gencert program, the entire file contents are read and used as the passphrase, including any trailing newlines. If the file descriptor is not specified, the passphrase is read from the terminal by default. -[[opt-key-expiration]] **--key-expiration** [**purpose**]:: - The **purpose** specifies which type of key certificate to determine - the expiration of. The only currently recognised **purpose** is +[[opt-key-expiration]] **`--key-expiration`** [__purpose__]:: + The __purpose__ specifies which type of key certificate to determine + the expiration of. The only currently recognised __purpose__ is "sign". + + - Running "tor --key-expiration sign" will attempt to find your signing - key certificate and will output, both in the logs as well as to stdout, - the signing key certificate's expiration time in ISO-8601 format. - For example, the output sent to stdout will be of the form: - "signing-cert-expiry: 2017-07-25 08:30:15 UTC" + Running **`tor --key-expiration sign`** will attempt to find your + signing key certificate and will output, both in the logs as well + as to stdout, the signing key certificate's expiration time in + ISO-8601 format. For example, the output sent to stdout will be + of the form: "signing-cert-expiry: 2017-07-25 08:30:15 UTC" [[conf-format]] THE CONFIGURATION FILE FORMAT

1 0

[tor/master] Merge branch 'tor-github/pr/1468'
by dgoulet＠torproject.org 30 Oct '19

30 Oct '19

commit f579541f13d5e196573a73065860337789a38504 Merge: dce1f63d4 1e8ddbe1e Author: David Goulet <dgoulet(a)torproject.org> Date: Wed Oct 30 08:53:51 2019 -0400 Merge branch 'tor-github/pr/1468' changes/ticket32277 | 5 ++ doc/tor.1.txt | 214 +++++++++++++++++++++++++++++----------------------- 2 files changed, 123 insertions(+), 96 deletions(-)

1 0

[metrics-cloud/master] onionoo: don't need sudo password on aws
by irl＠torproject.org 30 Oct '19

30 Oct '19

commit 466ecf03ee3a459d2310f5baba68498b9d2cdff1 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Wed Oct 30 12:38:40 2019 +0000 onionoo: don't need sudo password on aws --- ansible/onionoo-backends-aws.yml | 7 ------- 1 file changed, 7 deletions(-) diff --git a/ansible/onionoo-backends-aws.yml b/ansible/onionoo-backends-aws.yml index 6e525dd..3c4413f 100644 --- a/ansible/onionoo-backends-aws.yml +++ b/ansible/onionoo-backends-aws.yml @@ -3,13 +3,6 @@ user: admin vars: onionoo_version: 7.0-1.21.0 - pre_tasks: - - name: get sudo password - local_action: shell pass Tor/sudo/onionoo - register: pass_output - changed_when: False - - name: store as ansible become password - set_fact: ansible_become_password="{{ pass_output.stdout_lines[0] }}" roles: - onionoo-backend-sys - onionoo-backend

1 0