November 2019 - tor-commits - lists.torproject.org

[translation/https_everywhere] https://gitweb.torproject.org/translation.git/commit/?h=https_everywhere
by translation＠torproject.org 06 Nov '19

06 Nov '19

commit 6a9ae936c70450df37b167c632013af91946a52d Author: Translation commit bot <translation(a)torproject.org> Date: Wed Nov 6 05:45:56 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=https_everywhere --- da/https-everywhere.dtd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/da/https-everywhere.dtd b/da/https-everywhere.dtd index ef0fd7322..d0b4fc949 100644 --- a/da/https-everywhere.dtd +++ b/da/https-everywhere.dtd @@ -45,7 +45,7 @@ <!ENTITY https-everywhere.cancel.he_blocking_explainer "HTTPS Everywhere bemærkede at du navigerede til en side som ikke bruger HTTPS, og prøvede i stedet at sende dig til HTTPS-versionen. HTTPS-versionen er ikke tilgængelig. Stedet understøtter højst sandsynligt ikke HTTPS, men der er også mulighed for at en angriber blokerer HTTPS-versionen. Hvis du ønsker at vise den ukrypterede version af siden, så kan du stadig gøre det ved at deaktivere 'Kryptér alle steder kvalificeret (EASE)'-valgmuligheden i din HTTPS Everywhere-udvidelse. Vær opmærksom på at deaktivering af valgmuligheden kan gøre din browser sårbar overfor netværksbaserede nedgraderingsangreb på de websteder du besøger."> <!ENTITY https-everywhere.cancel.he_blocking_network "netværksbaserede nedgraderingsangreb"> <!ENTITY https-everywhere.cancel.open_page "Åbn usikker side"> -<!ENTITY https-everywhere.cancel.http_once "Open insecure page for this session only"> +<!ENTITY https-everywhere.cancel.http_once "Åbn usikker side, kun i denne session"> <!ENTITY https-everywhere.chrome.settings_for_this_site_header "Indstillinger til stedet"> <!ENTITY https-everywhere.chrome.settings_for_this_site_subheader "Skift dine præferencer for krypterede forbindelser">

1 0

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 06 Nov '19

06 Nov '19

commit 3026a2b6db202e36e1ece4a4e282fc0a5360887b Author: Translation commit bot <translation(a)torproject.org> Date: Wed Nov 6 05:23:24 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+tr.po | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/contents+tr.po b/contents+tr.po index 6e2ac9c9d..5d2d55745 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -5838,6 +5838,8 @@ msgstr "" #: (content/operators/packaged-tor/contents+en.lrquestion.title) msgid "Should I install Tor from my package manager, or build from source?" msgstr "" +"Tor uygulamasını paket yöneticisinden mi yüklemeliyim yoksa kaynak kodundan " +"mı derlemeliyim?" #: https//support.torproject.org/operators/packaged-tor/ #: (content/operators/packaged-tor/contents+en.lrquestion.description) @@ -5846,6 +5848,9 @@ msgid "" "to installing Tor from the [Tor Project's " "repository](https://support.torproject.org/apt/tor-deb-repo/)." msgstr "" +"Özellikle Debian ya da Ubuntu kullanıyorsanız, Tor uygulamasını [Tor Projesi" +" deposu](https://support.torproject.org/apt/tor-deb-repo/) üzerinden " +"yüklemenizin bir kaç yararı vardır." #: https//support.torproject.org/operators/packaged-tor/ #: (content/operators/packaged-tor/contents+en.lrquestion.description) @@ -5853,6 +5858,8 @@ msgid "" "* Your `ulimit -n` gets set to 32768 high enough for Tor to keep open all " "the connections it needs." msgstr "" +"* `ulimit -n` değeri 32768 olarak ayarlanır. Bu değer Tor tarafından gerek " +"duyulan tüm bağlantıların açık tutulması için yeterince yüksektir." #: https//support.torproject.org/operators/packaged-tor/ #: (content/operators/packaged-tor/contents+en.lrquestion.description) @@ -5860,11 +5867,15 @@ msgid "" "* A user profile is created just for Tor, so Tor doesn't need to run as " "root." msgstr "" +"* Yalnız Tor için özel bir kullanıcı profili oluşturulur. Böylece Tor " +"uygulamasının root olarak çalışması gerekmez." #: https//support.torproject.org/operators/packaged-tor/ #: (content/operators/packaged-tor/contents+en.lrquestion.description) msgid "* An init script is included so that Tor runs at boot." msgstr "" +"* Bir başlatma betiği eklenir. Böylece Tor bilgisayar başlatılırken " +"çalışabilir." #: https//support.torproject.org/operators/packaged-tor/ #: (content/operators/packaged-tor/contents+en.lrquestion.description) @@ -5872,11 +5883,14 @@ msgid "" "* Tor runs with `--verify-config`, so that most problems with your config " "file get caught." msgstr "" +"* Tor `--verify-config` seçeneği ile çalışır. Böylece yapılandırma " +"dosyasında olabilecek pek çok sorun yakalanabilir." #: https//support.torproject.org/operators/packaged-tor/ #: (content/operators/packaged-tor/contents+en.lrquestion.description) msgid "* Tor can bind to low level ports, then drop privileges." msgstr "" +"* Tor alt düzey kapı numaralarına bağlanabilir ve izinleri kaldırabilir." #: https//support.torproject.org/operators/relay-flexible/ #: (content/operators/relay-flexible/contents+en.lrquestion.title)

1 0

[tor/release-0.4.2] Merge branch 'maint-0.4.0' into maint-0.4.1
by teor＠torproject.org 06 Nov '19

06 Nov '19

commit de6ceb0bee8c1bf56d8929940a109bdc2a2d7521 Merge: 4f9a00339 03e77ef03 Author: teor <teor(a)torproject.org> Date: Wed Nov 6 11:19:46 2019 +1000 Merge branch 'maint-0.4.0' into maint-0.4.1 changes/bug31408 | 5 ++++ changes/bug31837 | 5 ++++ src/lib/fs/conffile.c | 10 +++++--- src/test/test_config.c | 68 +++++++++++++++++++++++++++++++++++++++++++++++++ src/test/test_rebind.py | 16 +++++++----- 5 files changed, 93 insertions(+), 11 deletions(-)

1 0

[tor/release-0.4.2] Merge branch 'maint-0.3.5' into maint-0.4.0
by teor＠torproject.org 06 Nov '19

06 Nov '19

commit 03e77ef036e41486b8bfe138d11790c928f49f35 Merge: 54e2d0dc2 1bde356bf Author: teor <teor(a)torproject.org> Date: Wed Nov 6 11:19:38 2019 +1000 Merge branch 'maint-0.3.5' into maint-0.4.0 changes/bug30916 | 4 +++ changes/bug31107 | 4 +++ changes/bug31408 | 5 ++++ changes/bug31837 | 5 ++++ changes/ticket31466 | 5 ++++ src/core/or/channeltls.c | 10 ++++++- src/core/or/connection_edge.c | 6 ++-- src/feature/relay/router.c | 18 +++++------- src/lib/fs/conffile.c | 10 ++++--- src/test/test_config.c | 68 +++++++++++++++++++++++++++++++++++++++++++ src/test/test_rebind.py | 16 +++++----- 11 files changed, 127 insertions(+), 24 deletions(-)

1 0

[tor/release-0.4.2] Merge branch 'maint-0.4.1' into maint-0.4.2
by teor＠torproject.org 06 Nov '19

06 Nov '19

commit 76fd872db88782c6bce1b539e27ba1d1ab88cbdb Merge: 2395800d3 de6ceb0be Author: teor <teor(a)torproject.org> Date: Wed Nov 6 11:19:54 2019 +1000 Merge branch 'maint-0.4.1' into maint-0.4.2

1 0

[tor/release-0.4.2] Merge branch 'maint-0.4.2' into release-0.4.2
by teor＠torproject.org 06 Nov '19

06 Nov '19

commit 3edd4842e38e925677bbd8911f0bdd0f9ab41bb0 Merge: dbae58d58 76fd872db Author: teor <teor(a)torproject.org> Date: Wed Nov 6 11:19:58 2019 +1000 Merge branch 'maint-0.4.2' into release-0.4.2

1 0

[tor/release-0.2.9] Merge remote-tracking branch 'tor-github/pr/1330' into maint-0.2.9
by teor＠torproject.org 06 Nov '19

06 Nov '19

commit c06d540ff9b507e0fa9749948fe406fb17dbee73 Merge: 752c35ca9 3c97ab3c2 Author: teor <teor(a)torproject.org> Date: Wed Nov 6 11:14:53 2019 +1000 Merge remote-tracking branch 'tor-github/pr/1330' into maint-0.2.9 changes/bug31107 | 4 ++++ src/or/channeltls.c | 10 +++++++++- 2 files changed, 13 insertions(+), 1 deletion(-)

1 0

[tor/release-0.2.9] Treat an unexpected constant-sized VERSIONS cell as a PROTOCOL_WARN.
by teor＠torproject.org 06 Nov '19

06 Nov '19

commit 3c97ab3c24ba4a133377c7ec6ec89cc6903ffb2e Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue Sep 17 09:09:36 2019 -0400 Treat an unexpected constant-sized VERSIONS cell as a PROTOCOL_WARN. We previously used tor_fragile_assert() to declare that this case could not happen: VERSIONS cells are always supposed to be variable-sized, right? This is incorrect, though. On a v1 link protocol connection, all cells are fixed-sized. There aren't supposed to be any VERSIONS cells with this version of the protocol, but apparently, somebody was messing up. (The v1 link protocol is obsolete, so probably the implementer responsible didn't mean to be using it.) Fixes bug 31107. Bugfix on 0.2.4.4-alpha, when we introduced a tor_fragile_assert() for this case. --- changes/bug31107 | 4 ++++ src/or/channeltls.c | 10 +++++++++- 2 files changed, 13 insertions(+), 1 deletion(-) diff --git a/changes/bug31107 b/changes/bug31107 new file mode 100644 index 000000000..9652927c3 --- /dev/null +++ b/changes/bug31107 @@ -0,0 +1,4 @@ + o Minor bugfixes (logging, protocol violations): + - Do not log a nonfatal assertion failure when receiving a VERSIONS + cell on a connection using the obsolete v1 link protocol. Log a + protocol_warn instead. Fixes bug 31107; bugfix on 0.2.4.4-alpha. diff --git a/src/or/channeltls.c b/src/or/channeltls.c index d44f71913..6f4e413dc 100644 --- a/src/or/channeltls.c +++ b/src/or/channeltls.c @@ -1098,7 +1098,15 @@ channel_tls_handle_cell(cell_t *cell, or_connection_t *conn) /* do nothing */ break; case CELL_VERSIONS: - tor_fragile_assert(); + /* A VERSIONS cell should always be a variable-length cell, and + * so should never reach this function (which handles constant-sized + * cells). But if the connection is using the (obsolete) v1 link + * protocol, all cells will be treated as constant-sized, and so + * it's possible we'll reach this code. + */ + log_fn(LOG_PROTOCOL_WARN, LD_CHANNEL, + "Received unexpected VERSIONS cell on a channel using link " + "protocol %d; ignoring.", conn->link_proto); break; case CELL_NETINFO: ++stats_n_netinfo_cells_processed;

1 0

[tor/release-0.2.9] Add a rate-limit to our warning about the disabled .exit notation
by teor＠torproject.org 06 Nov '19

06 Nov '19

commit f0e4120996d3a96252200ea5302dcde3af6e0bc0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Wed Sep 18 15:38:33 2019 -0400 Add a rate-limit to our warning about the disabled .exit notation This warning would previously be given every time we tried to open a connection to a foo.exit address, which could potentially be used to flood the logs. Now, we don't allow this warning to appear more than once every 15 minutes. Fixes bug 31466; bugfix on 0.2.2.1-alpha, when .exit was first deprecated. --- changes/ticket31466 | 5 +++++ src/or/connection_edge.c | 8 +++++--- 2 files changed, 10 insertions(+), 3 deletions(-) diff --git a/changes/ticket31466 b/changes/ticket31466 new file mode 100644 index 000000000..e535b4502 --- /dev/null +++ b/changes/ticket31466 @@ -0,0 +1,5 @@ + o Minor bugfixes (logging): + - Rate-limit our the logging message about the obsolete .exit notation. + Previously, there was no limit on this warning, which could potentially + be triggered many times by a hostile website. Fixes bug 31466; + bugfix on 0.2.2.1-alpha. diff --git a/src/or/connection_edge.c b/src/or/connection_edge.c index 7a97c632d..5638d9a1b 100644 --- a/src/or/connection_edge.c +++ b/src/or/connection_edge.c @@ -1186,9 +1186,11 @@ connection_ap_handshake_rewrite(entry_connection_t *conn, * disallowed when they're coming straight from the client, but you're * allowed to have them in MapAddress commands and so forth. */ if (!strcmpend(socks->address, ".exit") && !options->AllowDotExit) { - log_warn(LD_APP, "The \".exit\" notation is disabled in Tor due to " - "security risks. Set AllowDotExit in your torrc to enable " - "it (at your own risk)."); + static ratelim_t exit_warning_limit = RATELIM_INIT(60*15); + log_fn_ratelim(&exit_warning_limit, LOG_WARN, LD_APP, + "The \".exit\" notation is disabled in Tor due to " + "security risks. Set AllowDotExit in your torrc to enable " + "it (at your own risk)."); control_event_client_status(LOG_WARN, "SOCKS_BAD_HOSTNAME HOSTNAME=%s", escaped(socks->address)); out->end_reason = END_STREAM_REASON_TORPROTOCOL;

1 0

[tor/release-0.2.9] Merge remote-tracking branch 'tor-github/pr/1342' into maint-0.2.9
by teor＠torproject.org 06 Nov '19

06 Nov '19

commit 0650bf3695ae2e118426f3f6ecf1f8a344562119 Merge: c06d540ff f0e412099 Author: teor <teor(a)torproject.org> Date: Wed Nov 6 11:15:45 2019 +1000 Merge remote-tracking branch 'tor-github/pr/1342' into maint-0.2.9 changes/ticket31466 | 5 +++++ src/or/connection_edge.c | 8 +++++--- 2 files changed, 10 insertions(+), 3 deletions(-)

1 0