October 2019 - tor-commits - lists.torproject.org

[bridgedb/develop] Add undocumented OS-level dependency.
by phw＠torproject.org 29 Oct '19

29 Oct '19

commit 5151a329394b14341aa93903e617995f5b274fae Author: Philipp Winter <phw(a)nymity.ch> Date: Wed Oct 16 17:21:44 2019 -0700 Add undocumented OS-level dependency. BridgeDB uses the binary dkimverify in /home/bridgedb/.procmailrc. The binary used to be provided by the python-dkim package (which is installed on polyanthum) but with the upgrade to Debian Buster, it is now provided by python3-dkim (which is not installed). This patch makes this OS-level dependency explicit. This commit fixes <https://bugs.torproject.org/32105>. --- CHANGELOG | 3 +++ README.rst | 1 + 2 files changed, 4 insertions(+) diff --git a/CHANGELOG b/CHANGELOG index 5b6dce6..c91b026 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -6,6 +6,9 @@ Changes in version A.B.C - YYYY-MM-DD translation request and also updates our instructions on how to request new translations. + * FIXES https://bugs.torproject.org/32105 + Mention an undocumented OS-level dependency: python3-dkim. + Changes in version 0.9.0 - 2019-10-16 * FIXES https://bugs.torproject.org/26543 diff --git a/README.rst b/README.rst index 2576fa7..6fce8a0 100644 --- a/README.rst +++ b/README.rst @@ -80,6 +80,7 @@ BridgeDB requires the following OS-level dependencies: - python>=2.7 - python-dev +- `python3-dkim <https://pypi.org/project/dkimpy/>`__ (it contains the ``dkimverify`` binary) - build-essential - gnupg (preferrably, gnupg2) - OpenSSL>=1.0.1g

1 0

[translation/torbutton-browseronboardingproperties] https://gitweb.torproject.org/translation.git/commit/?h=torbutton-browseronboardingproperties
by translation＠torproject.org 29 Oct '19

29 Oct '19

commit 0bb07a6e3e2090d25a95e97987521a0625d6670f Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 28 22:21:41 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=torbutton-browseron… --- pt-BR/browserOnboarding.properties | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pt-BR/browserOnboarding.properties b/pt-BR/browserOnboarding.properties index dfe66c082..70f650212 100644 --- a/pt-BR/browserOnboarding.properties +++ b/pt-BR/browserOnboarding.properties @@ -2,10 +2,10 @@ # See LICENSE for licensing information. # vim: set sw=2 sts=2 ts=8 et: -onboarding.tour-tor-welcome=Bem Vindo +onboarding.tour-tor-welcome=Boas vindas onboarding.tour-tor-welcome.title=Você está pronto. onboarding.tour-tor-welcome.description=O Tor Browser oferece o mais elevado padrão de privacidade e segurança para navegação na web. Você, agora, está protegido contra rastreamento, vigilância e censura. Esta rápida abordagem mostrará como ele faz isso. -onboarding.tour-tor-welcome.next-button=Vá para privacidade +onboarding.tour-tor-welcome.next-button=Vá para Privacidade onboarding.tour-tor-privacy=Privacidade onboarding.tour-tor-privacy.title=Despiste rastreadores e xeretas.

1 0

[translation/bridgedb_completed] https://gitweb.torproject.org/translation.git/commit/?h=bridgedb_completed
by translation＠torproject.org 29 Oct '19

29 Oct '19

commit ab96cd2e0226d0fb83e6d177604bfb328472da7e Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 28 22:15:22 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=bridgedb_completed --- pt_BR/LC_MESSAGES/bridgedb.po | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/pt_BR/LC_MESSAGES/bridgedb.po b/pt_BR/LC_MESSAGES/bridgedb.po index d08856332..47ac5f28b 100644 --- a/pt_BR/LC_MESSAGES/bridgedb.po +++ b/pt_BR/LC_MESSAGES/bridgedb.po @@ -19,6 +19,7 @@ # João Paulo S.S <contato1908(a)gmail.com>, 2015 # Kaio Soares Rauta <kaio_soares_rauta(a)yahoo.com.br>, 2015 # Luciana Dark Blue <lucianadarkblue(a)gmail.com>, 2015 +# m tk, 2019 # m4lqu1570 <>, 2012 # Rodrigo Emmanuel Santana Borges <rodrigoesborges(a)gmail.com>, 2014 msgid "" @@ -26,8 +27,8 @@ msgstr "" "Project-Id-Version: Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'\n" "POT-Creation-Date: 2019-10-19 14:51-0700\n" -"PO-Revision-Date: 2019-10-24 17:30+0000\n" -"Last-Translator: Eduardo Addad de Oliveira <eduardoaddad(a)hotmail.com>\n" +"PO-Revision-Date: 2019-10-28 21:51+0000\n" +"Last-Translator: m tk\n" "Language-Team: Portuguese (Brazil) (http://www.transifex.com/otf/torproject/language/pt_BR/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n"

1 0

[translation/bridgedb] https://gitweb.torproject.org/translation.git/commit/?h=bridgedb
by translation＠torproject.org 29 Oct '19

29 Oct '19

commit 67b13bd6819f2e4f60115c6b4a32836ee76e08f0 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Oct 28 22:15:15 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=bridgedb --- pt_BR/LC_MESSAGES/bridgedb.po | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/pt_BR/LC_MESSAGES/bridgedb.po b/pt_BR/LC_MESSAGES/bridgedb.po index 6f39d023b..63ed5e263 100644 --- a/pt_BR/LC_MESSAGES/bridgedb.po +++ b/pt_BR/LC_MESSAGES/bridgedb.po @@ -19,6 +19,7 @@ # João Paulo S.S <contato1908(a)gmail.com>, 2015 # Kaio Soares Rauta <kaio_soares_rauta(a)yahoo.com.br>, 2015 # Luciana Dark Blue <lucianadarkblue(a)gmail.com>, 2015 +# m tk, 2019 # m4lqu1570 <>, 2012 # Rodrigo Emmanuel Santana Borges <rodrigoesborges(a)gmail.com>, 2014 msgid "" @@ -26,8 +27,8 @@ msgstr "" "Project-Id-Version: Tor Project\n" "Report-Msgid-Bugs-To: 'https://trac.torproject.org/projects/tor/newticket?component=BridgeDB&keywo…'\n" "POT-Creation-Date: 2019-10-19 14:51-0700\n" -"PO-Revision-Date: 2019-10-24 17:30+0000\n" -"Last-Translator: Eduardo Addad de Oliveira <eduardoaddad(a)hotmail.com>\n" +"PO-Revision-Date: 2019-10-28 21:51+0000\n" +"Last-Translator: m tk\n" "Language-Team: Portuguese (Brazil) (http://www.transifex.com/otf/torproject/language/pt_BR/)\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" @@ -319,7 +320,7 @@ msgstr "Minhas pontes não funcionam! Preciso de ajuda!" #, python-format msgid "" "If your Tor Browser cannot connect, please take a look at the %s and our %s." -msgstr "Se o seu navegador Tor não puder se conectar, consulte o %se nosso %s." +msgstr "Se o seu navegador Tor não se conectar, consulte o %se nosso %s." #: bridgedb/strings.py:123 msgid "Here are your bridge lines:"

1 0

[tpo/master] Set pagenav sticky-top
by hiro＠torproject.org 29 Oct '19

29 Oct '19

commit ad09c454dfb9a6ae88d27b8e3418740d4bc3ce8e Author: hiro <hiro(a)torproject.org> Date: Mon Oct 28 23:11:24 2019 +0100 Set pagenav sticky-top --- lego | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lego b/lego index 1ade3bb..15bf6aa 160000 --- a/lego +++ b/lego @@ -1 +1 @@ -Subproject commit 1ade3bbac5071fa061a1290cda4acad8ae3b6f1d +Subproject commit 15bf6aa7d287e47189e8844b6e4f660a7f0932c4

1 0

[lego/master] Set pagenav sticky top
by hiro＠torproject.org 29 Oct '19

29 Oct '19

commit 15bf6aa7d287e47189e8844b6e4f660a7f0932c4 Author: hiro <hiro(a)torproject.org> Date: Mon Oct 28 23:11:12 2019 +0100 Set pagenav sticky top --- templates/pagenav.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/pagenav.html b/templates/pagenav.html index a2caed6..febbef1 100644 --- a/templates/pagenav.html +++ b/templates/pagenav.html @@ -1,4 +1,4 @@ -<div class="container-fluid border-bottom border-light sticky bg-white"> +<div class="container-fluid border-bottom border-light sticky-top bg-white"> <div class="row flex-xl-nowrap {{ bag('alternatives', this.alt, 'order') }}"> <div class="row col-12 justify-content-center"> <ul class="nav">

1 0

[tpo/master] Update about template
by hiro＠torproject.org 29 Oct '19

29 Oct '19

commit 5c78b711dc9d8796d695482d6bea30221ff720ff Author: hiro <hiro(a)torproject.org> Date: Mon Oct 28 23:03:26 2019 +0100 Update about template --- templates/about.html | 4 ---- 1 file changed, 4 deletions(-) diff --git a/templates/about.html b/templates/about.html index d1ab9de..18c1e5a 100644 --- a/templates/about.html +++ b/templates/about.html @@ -1,8 +1,4 @@ {% include 'meta.html' %} -<body class="no-gutters"> - <header> - {% include 'navbar.html' %} - </header> <div class="page"> {% include 'header.html' %} <div class="container-fluid">

1 0

[community/master] giving netbsd's bridge setup a new KEY id.
by phw＠torproject.org 29 Oct '19

29 Oct '19

commit d5c38f5e3d4b529bc7c6973fff4f24d42409c058 Author: Vinicius Zavam <egypcio(a)googlemail.com> Date: Fri Oct 18 15:17:05 2019 +0000 giving netbsd's bridge setup a new KEY id. --- content/relay-operations/technical-setup/bridge/netbsd/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/relay-operations/technical-setup/bridge/netbsd/contents.lr b/content/relay-operations/technical-setup/bridge/netbsd/contents.lr index 8262eda..41f7b46 100644 --- a/content/relay-operations/technical-setup/bridge/netbsd/contents.lr +++ b/content/relay-operations/technical-setup/bridge/netbsd/contents.lr @@ -6,7 +6,7 @@ title: NetBSD --- html: two-columns-page.html --- -key: 3 +key: 6 --- body:

1 0

[community/master] bring DragonflyBSD to build bridges with us;
by phw＠torproject.org 29 Oct '19

29 Oct '19

commit 3c5efc632f2e3d1eab05133c83d832a95b868b51 Author: Vinicius Zavam <egypcio(a)googlemail.com> Date: Fri Oct 4 19:16:47 2019 +0000 bring DragonflyBSD to build bridges with us; - dfbsd is based on FreeBSD, and still keeps its default settings/paths; - packages names and most configurations are just the same as fbsd; - obfs4 is available! we can have more diverse bridges running :) --- .../bridge/dragonflybsd/contents.lr | 140 +++++++++++++++++++++ 1 file changed, 140 insertions(+) diff --git a/content/relay-operations/technical-setup/bridge/dragonflybsd/contents.lr b/content/relay-operations/technical-setup/bridge/dragonflybsd/contents.lr new file mode 100644 index 0000000..7300d3d --- /dev/null +++ b/content/relay-operations/technical-setup/bridge/dragonflybsd/contents.lr @@ -0,0 +1,140 @@ +_model: page +--- +color: primary +--- +title: DragonflyBSD +--- +html: two-columns-page.html +--- +key: 3 +--- +body: + +### 1. Bootstrap `pkg` + +DragonFlyBSD's daily snapshots and releases (starting with 3.4) come with `pkg` already installed. Upgrades from earlier releases, however, will not have it. + +If `pkg` is missing on the system for any reason, it can be quickly bootstrapped without having to build it from source or even having **DPorts** installed: + +``` +cd /usr +make pkg-bootstrap +rehash +pkg-static install -y pkg +rehash +``` + +##### 1.1. Recommended Steps to Setup `pkg` + +Here, it will be similar to what we have on a **FreeBSD** system, and we are going to use HTTPS to fetch our packages, and updates - so here we also need an extra package to help us out (`ca_root_nss`). + +Installing the `ca_root_nss` package: + +``` +pkg install ca_root_nss +``` + +For fresh installations, the file `/usr/local/etc/pkg/repos/df-latest.conf.sample` is copied to `/usr/local/etc/pkg/repos/df-latest`. The files ending in the ".sample" extension are ignored; pkg(8) only reads files that end in ".conf" and it will read as many as it finds. + +**DragonflyBSD** has 2 packages repositories: + + - Avalon (mirror-master.dragonflybsd.org) + - Wolfpond (pkg.wolfpond.org) + +We can simply edit the **URL** used to point out the repositories on `/usr/local/etc/pkg/repos/df-latest` and that's it! Remember to use **pkg+https://** for Avalon. + +After applying all these changes, we update the packages list again and try to check if there's already a new update to apply: + +``` +pkg update -f +pkg upgrade -y -f +``` + +### 2. Install `tor` DragonflyBSD's Package + +Here we can choose to install the latest stable version, like: + +``` +pkg install tor +``` + + ... or install an alpha release: + + +``` +pkg install tor-devel + +### 3. Configure `/usr/local/etc/tor/torrc` to run **Tor** as a Bridge + +``` +RunAsDaemon 1 +BridgeRelay 1 + +# Replace "TODO1" with a Tor port of your choice. This port must be externally +# reachable. Avoid port 9001 because it's commonly associated with Tor and +# censors may be scanning the Internet for this port. +ORPort TODO1 + +ServerTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy + +# Replace "TODO2" with an obfs4 port of your choice. This port must be +# externally reachable and must be different from the one specified for ORPort. +# Avoid port 9001 because it's commonly associated with +# Tor and censors may be scanning the Internet for this port. +ServerTransportListenAddr obfs4 0.0.0.0:TODO2 + +# Local communication port between Tor and obfs4. Always set this to "auto". +# "Ext" means "extended", not "external". Don't try to set a specific port +# number, nor listen on 0.0.0.0. +ExtORPort auto + +# Replace "<address(a)email.com>" with your email address so we can contact you if +# there are problems with your bridge. This is optional but encouraged. +ContactInfo <address(a)email.com> + +# Pick a nickname that you like for your bridge. This is optional. +Nickname PickANickname + +Log notice file /var/log/tor/notices.log +``` + +Don't forget to change the `ORPort`, `ServerTransportListenAddr`, `ContactInfo`, and `Nickname` options. + +* Please note that both `ORPort` and the port you used as `TODO2` (for obfs4) must be reachable. If your bridge is behind a firewall or NAT, make sure to open/forward both ports. You can use [our reachability test](https://bridges.torproject.org/scan/) to see if your obfs4 port is reachable from the Internet. + +* Are you firewalling your DragonflyBSD? If so, make sure that `obfs4proxy` can talk to `tor` over the loopback interface - do not forget to whitelist the **ExtORPort**. + +### 4. Start `tor`: + +Here we set `tor` to start at boot time and use the setuid feature, in order to bind to lower ports like 443 (the daemon itself will still run as a regular non-privileged user). + +``` +echo "tor_setuid=YES" >> /etc/rc.conf +echo "tor_enable=YES" >> /etc/rc.conf +service tor start +``` + +### 5. Monitor your logs + +To confirm your bridge is running with no issues, you should see something like this in `/var/log/tor/notices.log`: + +``` +[notice] Your Tor server's identity key fingerprint is '<NICKNAME> <FINGERPRINT>' +[notice] Your Tor bridge's hashed identity key fingerprint is '<NICKNAME> <HASHED FINGERPRINT>' +[notice] Registered server transport 'obfs4' at '[::]:46396' +[notice] Tor has successfully opened a circuit. Looks like client functionality is working. +[notice] Bootstrapped 100%: Done +[notice] Now checking whether ORPort <redacted>:3818 is reachable... (this may take up to 20 minutes -- look for log messages indicating success) +[notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. +``` + +### 6. Final Notes + +If you are having troubles setting up your bridge, have a look at [our help section](https://community.torproject.org/relay/getting-help/). If your bridge is now running, check out the [post-install notes](https://community.torproject.org/relay/setup/bridge/post-install/). + +--- +subtitle: How to deploy an obfs4 bridge on DragonflyBSD +--- +section: Bridge +--- +section_id: bridge

1 0

[community/master] revisiting dragonfly's bridge setup; thanks @mpguerra and @NullHypothesis! :)
by phw＠torproject.org 29 Oct '19

29 Oct '19

commit 1ee18ecd6f257637b96b4b917d79650440a87384 Author: Vinicius Zavam <egypcio(a)googlemail.com> Date: Fri Oct 18 15:15:13 2019 +0000 revisiting dragonfly's bridge setup; thanks @mpguerra and @NullHypothesis! :) --- .../technical-setup/bridge/dragonflybsd/contents.lr | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/content/relay-operations/technical-setup/bridge/dragonflybsd/contents.lr b/content/relay-operations/technical-setup/bridge/dragonflybsd/contents.lr index 7300d3d..630b347 100644 --- a/content/relay-operations/technical-setup/bridge/dragonflybsd/contents.lr +++ b/content/relay-operations/technical-setup/bridge/dragonflybsd/contents.lr @@ -6,7 +6,7 @@ title: DragonflyBSD --- html: two-columns-page.html --- -key: 3 +key: 5 --- body: @@ -50,19 +50,20 @@ pkg update -f pkg upgrade -y -f ``` -### 2. Install `tor` DragonflyBSD's Package +### 2. Install `tor` and `obfs4proxy` DragonflyBSD's Package Here we can choose to install the latest stable version, like: ``` -pkg install tor +pkg install tor obfs4proxy-tor ``` ... or install an alpha release: ``` -pkg install tor-devel +pkg install tor-devel obfs4proxy-tor +``` ### 3. Configure `/usr/local/etc/tor/torrc` to run **Tor** as a Bridge @@ -119,6 +120,10 @@ service tor start To confirm your bridge is running with no issues, you should see something like this in `/var/log/tor/notices.log`: ``` +tail /var/log/tor/notices.log +``` + +``` [notice] Your Tor server's identity key fingerprint is '<NICKNAME> <FINGERPRINT>' [notice] Your Tor bridge's hashed identity key fingerprint is '<NICKNAME> <HASHED FINGERPRINT>' [notice] Registered server transport 'obfs4' at '[::]:46396'

1 0