December 2019 - tor-commits - lists.torproject.org

[translation/communitytpo-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-contentspot
by translation＠torproject.org 19 Dec '19

19 Dec '19

commit a0c7d546d2c1ccaf1d2b541ae7cf09c8f068c6d6 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Dec 19 09:45:29 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-conten… --- contents+ro.po | 63 +++++++++++++++++++++++++++++++++++++++++++++++++++------- 1 file changed, 56 insertions(+), 7 deletions(-) diff --git a/contents+ro.po b/contents+ro.po index cdadf058a2..4b30c61249 100644 --- a/contents+ro.po +++ b/contents+ro.po @@ -6545,6 +6545,10 @@ msgid "" "was either harvested off of your machine from a keylogger, or it was " "captured via a kiosk, or from open wireless." msgstr "" +"În ceea ce privește contul dvs., având în vedere că atacatorul a folosit Tor" +" și nu un botnet mare (sau IP-ul mașinii dvs. în sine), este probabil ca " +"parola dvs. să fie prelevată de pe mașina dvs. de la un keylogger, fie să fi" +" fost capturată printr-un chioșc, sau de la un wireless deschis." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6555,6 +6559,12 @@ msgid "" "en/download, Spybot SD: http://www.safer-networking.org/nl/home/index.html, " "and/or AdAware: http://www.lavasoft.com/?domain=lavasoftusa.com." msgstr "" +"Recomandarea noastră este să tratăm acest eveniment ca și cum ar fi existat " +"o autentificare dintr-un punct de acces wireless deschis în orașul dvs. " +"Resetați parola și dacă nu aveți deja antivirus, descărcați gratuit AVG: " +"http://free.avg.com/us-en/download, Spybot SD: http://www.safer-" +"networking.org/nl/home/index.html și/sau AdAware: " +"http://www.lavasoft.com/?domain=lavasoftusa.com." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6562,6 +6572,8 @@ msgid "" "Use these to scan to check for keyloggers or spyware that someone with " "access to your computer may have installed." msgstr "" +"Utilizați-le pentru scanare și verificare dacă există cheyloggers sau " +"spyware care au fost instalate pe computer." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6569,21 +6581,24 @@ msgid "" "To help protect yourself while using open wireless, consider using this " "Firefox plugin: https://www.eff.org/https-everywhere/ and encourage the" msgstr "" +"Pentru a vă ajuta să vă protejați în timp ce utilizați wireless deschis, " +"luați în considerare utilizarea acestui plugin Firefox: https://www.eff.org" +"/https-everywhere/ și încurajați" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "site maintainer to support HTTPS logins." -msgstr "" +msgstr "menținerea de site pentru a sprijini autentificările HTTPS." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "## Hacking (PHP Webshells, XSS, SQL Injection)" -msgstr "" +msgstr "## Hacking (PHP Webshells, XSS, SQL Injection)" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "This also does not mean that there is nothing that can be done." -msgstr "" +msgstr "De asemenea, acest lucru nu înseamnă că nu se poate face nimic." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6592,6 +6607,9 @@ msgid "" "and investigating to determine means, motive, and opportunity are still very" " effective." msgstr "" +"Pentru incidente grave, tehnicile tradiționale de lucru ale poliției de a " +"alerga și a investiga pentru a determina mijloacele, motivul și " +"oportunitatea sunt încă foarte eficiente." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6600,6 +6618,9 @@ msgid "" "to flag visitors coming from Tor nodes as requiring special treatment: " "https://www.torproject.org/projects/tordnsel.html.en." msgstr "" +"În plus, proiectul Tor oferă un DNSRBL automat pentru a vă solicita să " +"semnalizați vizitatorii care provin de la nodurile Tor, care necesită un " +"tratament special: https://www.torproject.org/projects/tordnsel.html.en." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6607,6 +6628,8 @@ msgid "" "The same list is available through the Tor Bulk Exit List: " "https://check.torproject.org/cgi-bin/TorBulkExitList.py" msgstr "" +"Aceeași listă este disponibilă prin Lista de ieșire din volumul tor: " +"https://check.torproject.org/cgi-bin/TorBulkExitList.py" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6616,11 +6639,16 @@ msgid "" "maintained to free of vulnerabilities that can lead to situations such as " "this (PHP webshell/XSS compromise/SQL Injection compromise)." msgstr "" +"Cu toate acestea, în loc să interzicem utilizatorilor legitimi Tor să " +"folosească serviciul în general, vă recomandăm să vă asigurați că aceste " +"servicii sunt actualizate și întreținute pentru a nu prezenta " +"vulnerabilități care pot duce la situații precum aceasta (PHP webshell/XSS " +"compromise/SQL Injection compromise)." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "## E-Commerce Fraud" -msgstr "" +msgstr "## Frauda în comerțul electronic" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6629,6 +6657,9 @@ msgid "" "to flag orders coming from Tor nodes as requiring special review: " "https://www.torproject.org/projects/tordnsel.html.en" msgstr "" +"În plus, proiectul Tor oferă un DNSRBL automat pentru a vă solicita să " +"semnalizați comenzile provenind de la nodurile Tor, deoarece necesită o " +"revizuire specială: https://www.torproject.org/projects/tordnsel.html.en" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6636,6 +6667,8 @@ msgid "" "It also provides a Bulk Exit List service for retrieving the entire list: " "https://check.torproject.org/cgi-bin/TorBulkExitList.py" msgstr "" +"Proiectul oferă, de asemenea, un serviciu Bulk Exit List pentru regăsirea " +"întregii liste: https://check.torproject.org/cgi-bin/TorBulkExitList.py" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6643,11 +6676,14 @@ msgid "" "You can use this list to help you take a closer look at Tor orders, or to " "hold them temporarily for additional verification, without losing" msgstr "" +"Puteți utiliza această listă pentru a vă ajuta să aruncați o privire mai " +"atentă asupra comenzilor Tor sau pentru a le reține temporar pentru " +"verificări suplimentare, fără a pierde" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "legitimate customers." -msgstr "" +msgstr "clienții legitimi." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6655,11 +6691,14 @@ msgid "" "In fact, in my experience, the fraud processing teams contracted by many " "ISPs simply mark all requests from Tor nodes as fraud using that" msgstr "" +"De fapt, din experiența mea, echipele de procesare a fraudei contractate de " +"mulți furnizori ISP, marchează pur și simplu toate cererile de la nodurile " +"Tor ca fraude folosind" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "very list." -msgstr "" +msgstr "această listă." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6668,11 +6707,14 @@ msgid "" "solely based on IP, especially if you contract out fraud detection to a " "third party." msgstr "" +"Așadar, este chiar posibil ca aceasta să fie o comandă legitimă, dar care a " +"fost marcată ca fraudă bazată exclusiv pe IP, mai ales dacă contractați " +"detectarea fraudei către o terță parte." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "## Threats of Violence (Advice for Real-Time Discussion)" -msgstr "" +msgstr "## Amenințări de violență (sfaturi pentru discuții în timp real)" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6684,6 +6726,13 @@ msgid "" " a Tor exit node on their network. It has also been reviewed by someone who" " works in Abuse at a major ISP." msgstr "" +"Dacă se ajunge la o plângere gravă de abuz neacoperită de acest set de " +"șabloane, cel mai bun răspuns este să urmați un model cu partea care " +"reclamă. Acesta nu este un aviz juridic. Acest lucru nu a fost scris sau " +"revizuit de un avocat. A fost scris de cineva cu experiență în lucrul cu " +"diverse ISP-uri care au avut probleme cu un nod de ieșire Tor din rețeaua " +"lor. De asemenea, a fost revizuit de cineva care lucrează ca abuz la un ISP " +"major." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body)

1 0

[tor/master] Merge remote-tracking branch 'tor-github/pr/1584'
by teor＠torproject.org 19 Dec '19

19 Dec '19

commit 5c98a42f491145a0d706ba01bfc1947477f76534 Merge: b7304027f 9a556dee8 Author: teor <teor(a)torproject.org> Date: Thu Dec 19 19:33:29 2019 +1000 Merge remote-tracking branch 'tor-github/pr/1584' scripts/coccinelle/check_cocci_parse.sh | 47 ++++++++++++++++++++++++++++++--- 1 file changed, 44 insertions(+), 3 deletions(-)

1 0

[tor/master] cocci: Require spatch >= 1.0.4 to run checks
by teor＠torproject.org 19 Dec '19

19 Dec '19

commit 9a556dee81cc83faa563fc49ed94ff4924d7a4bd Author: teor <teor(a)torproject.org> Date: Tue Dec 3 14:53:33 2019 +1000 cocci: Require spatch >= 1.0.4 to run checks No changes file required: not in any released version of tor. Fixes bug 32663. --- scripts/coccinelle/check_cocci_parse.sh | 47 ++++++++++++++++++++++++++++++--- 1 file changed, 44 insertions(+), 3 deletions(-) diff --git a/scripts/coccinelle/check_cocci_parse.sh b/scripts/coccinelle/check_cocci_parse.sh index 220b40594..aebfac70f 100755 --- a/scripts/coccinelle/check_cocci_parse.sh +++ b/scripts/coccinelle/check_cocci_parse.sh @@ -21,8 +21,49 @@ exitcode=0 export TOR_COCCI_EXCEPTIONS_FILE="${TOR_COCCI_EXCEPTIONS_FILE:-$scripts_cocci/exceptions.txt}" -if ! command -v spatch; then - echo "Install coccinelle's spatch to check cocci C parsing!" +PURPOSE="cocci C parsing" + +echo "Checking spatch:" + +if ! command -v spatch ; then + echo "Install coccinelle's spatch to check $PURPOSE." + exit "$exitcode" +fi + +# Returns true if $1 is greater than or equal to $2 +version_ge() +{ + if test "$1" = "$2" ; then + # return true + return 0 + fi + LOWER_VERSION="$(printf '%s\n' "$1" "$2" | $SORT_V | head -n 1)" + # implicit return + test "$LOWER_VERSION" != "$1" +} + +# 'sort -V' is a gnu extension +SORT_V="sort -V" +# Use 'sort -n' if 'sort -V' doesn't work +if ! version_ge "1" "0" ; then + echo "Your 'sort -V' command appears broken. Falling back to 'sort -n'." + echo "Some spatch version checks may give the wrong result." + SORT_V="sort -n" +fi + +# Print the full spatch version, for diagnostics +spatch --version + +MIN_SPATCH_V="1.0.4" +# This pattern needs to handle version strings like: +# spatch version 1.0.0-rc19 +# spatch version 1.0.6 compiled with OCaml version 4.05.0 +SPATCH_V=$(spatch --version | head -1 | \ + sed 's/spatch version $[0-9][^ ]*$.*/\1/') + +if ! version_ge "$SPATCH_V" "$MIN_SPATCH_V" ; then + echo "Tor requires coccinelle spatch >= $MIN_SPATCH_V to check $PURPOSE." + echo "But you have $SPATCH_V. Please install a newer version." exit "$exitcode" fi @@ -44,7 +85,7 @@ else fi if test "$exitcode" != 0 ; then - echo "Please fix these cocci parsing errors in the above files" + echo "Please fix these $PURPOSE errors in the above files" echo "Set VERBOSE=1 for more details" echo "Try running test-operator-cleanup or 'make autostyle-operators'" echo "As a last resort, you can modify scripts/coccinelle/exceptions.txt"

1 0

[translation/communitytpo-contentspot] https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-contentspot
by translation＠torproject.org 19 Dec '19

19 Dec '19

commit ea60ac52abd97215fb8575ddb748d85b9359ab93 Author: Translation commit bot <translation(a)torproject.org> Date: Thu Dec 19 09:15:29 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=communitytpo-conten… --- contents+ro.po | 27 +++++++++++++++++++++++++-- 1 file changed, 25 insertions(+), 2 deletions(-) diff --git a/contents+ro.po b/contents+ro.po index 8e96c91271..cdadf058a2 100644 --- a/contents+ro.po +++ b/contents+ro.po @@ -6447,11 +6447,14 @@ msgid "" "the service to defend against the attack from the Internet at large rather " "than specifically tailoring behavior for Tor." msgstr "" +"În general, considerăm că problemele de acest fel sunt rezolvate cel mai " +"bine prin îmbunătățirea serviciului de apărare împotriva atacului de pe " +"Internet, în loc să se adapteze în mod special comportamentul pentru Tor." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "## SSH Bruteforce Attempts" -msgstr "" +msgstr "## Încercări Bruteforce SSH" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6459,6 +6462,8 @@ msgid "" "If you are concerned about SSH scans, you might consider running your SSHD " "on a port other than the default of 22." msgstr "" +"Dacă vă preocupă scanările SSH, puteți lua în considerare rularea SSHD-ului " +"pe un alt port decât pe portul implicit 22." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6466,6 +6471,8 @@ msgid "" "Many worms, scanners, and botnets scan the entire Internet looking for SSH " "logins." msgstr "" +"Mulți viermi, scanere și botnete scanează întregul Internet în căutarea de " +"conectări SSH." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6473,6 +6480,8 @@ msgid "" "The fact that a few logins happened to come from Tor is likely a small blip " "on your overall login attempt rate." msgstr "" +"Faptul că au avut loc câteva autentificări provenite de la Tor este probabil" +" un mic efect asupra ratei generale de încercare de autentificare." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6480,6 +6489,8 @@ msgid "" "You might also consider a rate limiting solution: " "https://kvz.io/blog/2007/07/28/block-brute-force-attacks-with-iptables/" msgstr "" +"Ați putea lua în considerare și o soluție de limitare a ratelor: " +"https://kvz.io/blog/2007/07/28/block-brute-force-attacks-with-iptables/" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6488,6 +6499,10 @@ msgid "" " an automated DNSRBL for you to query to block login attempts coming from " "Tor nodes: https://www.torproject.org/projects/tordnsel.html.en" msgstr "" +"Dacă de fapt este o problemă gravă specifică Tor, proiectul Tor vă oferă un " +"DNSRBL automat pentru a vă solicita să blocați încercările de conectare care" +" provin de la nodurile Tor: " +"https://www.torproject.org/projects/tordnsel.html.en" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6496,11 +6511,16 @@ msgid "" " to your SSH port: https://check.torproject.org/cgi-" "bin/TorBulkExitList.py?ip=YOUR_IP&port=22" msgstr "" +"De asemenea, este posibil să descărcați o listă cu toate IP-urile de ieșire " +"Tor care se vor conecta la portul SSH: https://check.torproject.org/cgi-" +"bin/TorBulkExitList.py?ip=YOUR_IP&port=22" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "You can use this list to create iptables rules to block the network." msgstr "" +"Puteți utiliza această listă pentru a crea reguli iptables pentru a bloca " +"rețeaua." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) @@ -6508,11 +6528,14 @@ msgid "" "However, we still recommend using the general approach, as the attack will " "likely simply reappear from an open proxy or other IP once Tor is blocked." msgstr "" +"Cu toate acestea, recomandăm totuși să utilizăm abordarea generală, deoarece" +" atacul va reapărea pur și simplu dintr-un proxy deschis sau alt IP, odată " +"ce Tor este blocat." #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body) msgid "## Hacked Gmail, Web Forum, or Misc Account Access" -msgstr "" +msgstr "## Gmail hacked, Forum Web sau Acces la conturi diverse" #: https//community.torproject.org/relay/community-resources/tor-abuse-templates/ #: (content/relay-operations/community-resources/tor-abuse-templates/contents+en.lrpage.body)

1 0

[meek/turbotunnel] Regen man pages.
by dcf＠torproject.org 19 Dec '19

19 Dec '19

commit df63758ebbca4b89cc35dfdc80f6ae77e76c5f6e Author: David Fifield <david(a)bamsoftware.com> Date: Thu Dec 19 00:12:30 2019 -0700 Regen man pages. --- doc/meek-client.1 | 28 +++++++++++++++++++++++-- doc/meek-server.1 | 61 ++++++++++++++++++++++++++++++++++++++++++++++++++----- 2 files changed, 82 insertions(+), 7 deletions(-) diff --git a/doc/meek-client.1 b/doc/meek-client.1 index 58fd755..96b202e 100644 --- a/doc/meek-client.1 +++ b/doc/meek-client.1 @@ -2,12 +2,12 @@ .\" Title: meek-client .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/> -.\" Date: 02/06/2019 +.\" Date: 12/19/2019 .\" Manual: \ \& .\" Source: \ \& .\" Language: English .\" -.TH "MEEK\-CLIENT" "1" "02/06/2019" "\ \&" "\ \&" +.TH "MEEK\-CLIENT" "1" "12/19/2019" "\ \&" "\ \&" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -55,6 +55,23 @@ Front domain name\&. If provided, this domain name will replace the domain name in the DNS request and TLS SNI field\&. The URL\(cqs true domain name will still appear in the Host header of HTTP requests\&. .RE .PP +\fBquic\-tls\-pubkey\fR=\fIPUBKEYHASH\fR +.RS 4 +Server public key hashes to accept for the inner QUIC TLS layer\&. These have nothing to do with the outer HTTPS layer, which verifies certificates in the usual PKI way\&. The format of +\fIPUBKEYHASH\fR +is a base64\-encoded SHA\-256 hash of the Subject Public Key Info, as in HPKP\&. This argument may be used more than once; all public key hashes provided are considered good to verify server certificates\&. To generate a public key hash from a certificate file, +.sp +.if n \{\ +.RS 4 +.\} +.nf +$ openssl x509 \-in quic\&.pem \-pubkey \-noout | openssl pkey \-pubin \-outform der | openssl dgst \-sha256 \-binary | openssl enc \-base64 +.fi +.if n \{\ +.RE +.\} +.RE +.PP \fButls\fR=\fICLIENTHELLOID\fR .RS 4 Use the @@ -284,6 +301,13 @@ options in a torrc file\&. Name of a file to write log messages to (default stderr)\&. .RE .PP +\fB\-\-quic\-tls\-pubkey\fR=\fIPUBKEYHASH\fR[,\fIPUBKEYHASH\fR]\&... +.RS 4 +Comma\-separated list of server public key hashes to accept for the inner QUIC TLS layer\&. The option may be given only once, but you can separate multiple hashes using commas\&. Prefer using the +\fBquic\-tls\-pubkey\fR +SOCKS arg over using this command line option\&. +.RE +.PP \fB\-\-url\fR=\fIURL\fR .RS 4 URL to correspond with\&. Prefer using the diff --git a/doc/meek-server.1 b/doc/meek-server.1 index 3b7a07e..3b1c233 100644 --- a/doc/meek-server.1 +++ b/doc/meek-server.1 @@ -2,12 +2,12 @@ .\" Title: meek-server .\" Author: [FIXME: author] [see http://docbook.sf.net/el/author] .\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/> -.\" Date: 01/17/2019 +.\" Date: 12/19/2019 .\" Manual: \ \& .\" Source: \ \& .\" Language: English .\" -.TH "MEEK\-SERVER" "1" "01/17/2019" "\ \&" "\ \&" +.TH "MEEK\-SERVER" "1" "12/19/2019" "\ \&" "\ \&" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -67,6 +67,40 @@ and allow use to use your own externally acquired certificate\&. .RE .sp +Besides the external HTTPS\-layer TLS, you will need to configure certificates for the internal QUIC TLS layer using the \fB\-\-quic\-tls\-cert\fR and \fB\-\-quic\-tls\-key\fR options\&. You cannot use an automatic Let\(cqs Encrypt certificate for this layer, but you also do not have to get it signed by a CA (you can use a self\-signed certificate), because the client will authenticate it by its public key\&. To generate a certificate and private key for the QUIC layer: +.sp +.if n \{\ +.RS 4 +.\} +.nf +$ openssl genpkey \-algorithm ED25519 > quic\&.key +$ openssl req \-new \-key quic\&.key \-x509 \-days 1000 \-nodes \-out quic\&.crt +Country Name (2 letter code) [AU]:\&. +State or Province Name (full name) [Some\-State]:\&. +Locality Name (eg, city) []:\&. +Organization Name (eg, company) [Internet Widgits Pty Ltd]:\&. +Organizational Unit Name (eg, section) []:\&. +Common Name (e\&.g\&. server FQDN or YOUR name) []:meek\-quic +Email Address []:\&. +$ cat quic\&.key quic\&.crt > quic\&.pem +.fi +.if n \{\ +.RE +.\} +.sp +You can pass quic\&.pem to both the \fB\-\-quic\-tls\-cert\fR and \fB\-\-quic\-tls\-key\fR options\&. To renew the certificate using the same key: +.sp +.if n \{\ +.RS 4 +.\} +.nf +$ openssl req \-new \-key quic\&.pem \-x509 \-days 1000 \-nodes \-out quic\&.pem\&.new +$ mv quic\&.pem\&.new quic\&.pem +.fi +.if n \{\ +.RE +.\} +.sp Configuration for meek\-server usually appears in a torrc file\&. Here is a sample configuration using automatic Let\(cqs Encrypt certificates: .sp .if n \{\ @@ -75,7 +109,7 @@ Configuration for meek\-server usually appears in a torrc file\&. Here is a samp .nf ExtORPort auto ServerTransportListenAddr 0\&.0\&.0\&.0:443 -ServerTransportPlugin meek exec \&./meek\-server \-\-acme\-hostnames meek\-server\&.example \-\-log meek\-server\&.log +ServerTransportPlugin meek exec \&./meek\-server \-\-acme\-hostnames meek\-server\&.example \-\-quic\-tls\-cert=quic\&.pem \-\-quic\-tls\-key=quic\&.pem \-\-log meek\-server\&.log .fi .if n \{\ .RE @@ -89,7 +123,7 @@ Here is a sample configuration using externally acquired certificates: .nf ExtORPort auto ServerTransportListenAddr meek 0\&.0\&.0\&.0:8443 -ServerTransportPlugin meek exec \&./meek\-server 8443 \-\-cert cert\&.pem \-\-key key\&.pem \-\-log meek\-server\&.log +ServerTransportPlugin meek exec \&./meek\-server 8443 \-\-cert cert\&.pem \-\-key key\&.pem \-\-quic\-tls\-cert=quic\&.pem \-\-quic\-tls\-key=quic\&.pem \-\-log meek\-server\&.log .fi .if n \{\ .RE @@ -101,7 +135,7 @@ To listen on ports 80 and 443 without needed to run as root, on Linux, you can u .RS 4 .\} .nf -setcap \*(Aqcap_net_bind_service=+ep\*(Aq /usr/local/bin/meek\-server +$ setcap \*(Aqcap_net_bind_service=+ep\*(Aq /usr/local/bin/meek\-server .fi .if n \{\ .RE @@ -149,6 +183,23 @@ option in torrc, rather than use the option\&. .RE .PP +\fB\-\-quic\-tls\-cert\fR=\fIFILENAME\fR +.RS 4 +Name of a PEM\-encoded TLS certificate for the inner QUIC TLS layer\&. The certificate will be reloaded at runtime if the file changes\&. The inner QUIC TLS layer is entirely independent of the outer HTTPS layer that is configured using +\fB\-\-cert\fR +and +\fB\-\-key\fR\&. +.RE +.PP +\fB\-\-quic\-tls\-key\fR=\fIFILENAME\fR +.RS 4 +Name of a PEM\-encoded TLS private key file for the inner QUIC TLS layer\&. It may be the same file as +\fB\-\-quic\-tls\-cert\fR\&. The private key will be reloaded at runtime if the file changes\&. The inner QUIC TLS layer is entirely independent of the outer HTTPS layer that is configured using +\fB\-\-cert\fR +and +\fB\-\-key\fR\&. +.RE +.PP \fB\-h\fR, \fB\-\-help\fR .RS 4 Display a help message and exit\&.

1 0

[research-web/staging] empty commit to trigger jenkins
by irl＠torproject.org 18 Dec '19

18 Dec '19

commit 86cab7445c9386119d2e4eb136eabfdebb43bf82 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Wed Dec 18 23:18:11 2019 +0000 empty commit to trigger jenkins

1 0

[research-web/master] empty commit to trigger jenkins
by irl＠torproject.org 18 Dec '19

18 Dec '19

commit 86cab7445c9386119d2e4eb136eabfdebb43bf82 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Wed Dec 18 23:18:11 2019 +0000 empty commit to trigger jenkins

1 0

[research-web/staging] reissue tech reports with missing nsf acks
by irl＠torproject.org 18 Dec '19

18 Dec '19

commit 7853de9f12625146df303520fb010642e6da6305 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Wed Dec 18 23:01:31 2019 +0000 reissue tech reports with missing nsf acks --- .../techreports/metrics-evaluation-2019-03-25.pdf | Bin 330531 -> 910400 bytes static/techreports/modern-collector-2018-12-19.pdf | Bin 340684 -> 354888 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/static/techreports/metrics-evaluation-2019-03-25.pdf b/static/techreports/metrics-evaluation-2019-03-25.pdf index b0a89e2..4cd30f1 100644 Binary files a/static/techreports/metrics-evaluation-2019-03-25.pdf and b/static/techreports/metrics-evaluation-2019-03-25.pdf differ diff --git a/static/techreports/modern-collector-2018-12-19.pdf b/static/techreports/modern-collector-2018-12-19.pdf index 3e4ff65..b425f77 100644 Binary files a/static/techreports/modern-collector-2018-12-19.pdf and b/static/techreports/modern-collector-2018-12-19.pdf differ

1 0

[research-web/master] reissue tech reports with missing nsf acks
by irl＠torproject.org 18 Dec '19

18 Dec '19

commit 7853de9f12625146df303520fb010642e6da6305 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Wed Dec 18 23:01:31 2019 +0000 reissue tech reports with missing nsf acks --- .../techreports/metrics-evaluation-2019-03-25.pdf | Bin 330531 -> 910400 bytes static/techreports/modern-collector-2018-12-19.pdf | Bin 340684 -> 354888 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/static/techreports/metrics-evaluation-2019-03-25.pdf b/static/techreports/metrics-evaluation-2019-03-25.pdf index b0a89e2..4cd30f1 100644 Binary files a/static/techreports/metrics-evaluation-2019-03-25.pdf and b/static/techreports/metrics-evaluation-2019-03-25.pdf differ diff --git a/static/techreports/modern-collector-2018-12-19.pdf b/static/techreports/modern-collector-2018-12-19.pdf index 3e4ff65..b425f77 100644 Binary files a/static/techreports/modern-collector-2018-12-19.pdf and b/static/techreports/modern-collector-2018-12-19.pdf differ

1 0

[tech-reports/master] Adding missing NSF acks
by irl＠torproject.org 18 Dec '19

18 Dec '19

commit e54872951fb1411d3327c2b5e0bbcb514ca18b13 Author: Iain R. Learmonth <irl(a)fsfe.org> Date: Wed Dec 18 22:54:53 2019 +0000 Adding missing NSF acks --- 2018/modern-collector/modern-collector.tex | 9 +++++---- 2019/metrics-evaluation/metrics-evaluation.tex | 8 ++++---- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/2018/modern-collector/modern-collector.tex b/2018/modern-collector/modern-collector.tex index 74d67ca..f1ff6a9 100644 --- a/2018/modern-collector/modern-collector.tex +++ b/2018/modern-collector/modern-collector.tex @@ -114,10 +114,11 @@ CollecTor service. {\renewcommand{\thefootnote}{} \footnotetext{This work was supported by Open Technology Fund under contract -number 1002-2017-018. Support does not imply endorsement. With thanks to Nick -Mathewson and Tim Wilson-Brown for their help in clarifying certain points in -specifications and how they are implemented in \texttt{tor}, and thanks to -Damian Johnson for his assistance in experimentation using the \stem~library.}} +number 1002-2017-018, and by NSF grants CNS-1526306 and CNS-1619454. Support +does not imply endorsement. With thanks to Nick Mathewson and Tim Wilson-Brown +for their help in clarifying certain points in specifications and how they are +implemented in \texttt{tor}, and thanks to Damian Johnson for his assistance in +experimentation using the \stem~library.}} \end{abstract} \pagebreak \section{Introduction}\label{sec:intro}% diff --git a/2019/metrics-evaluation/metrics-evaluation.tex b/2019/metrics-evaluation/metrics-evaluation.tex index bb5b035..3054d31 100644 --- a/2019/metrics-evaluation/metrics-evaluation.tex +++ b/2019/metrics-evaluation/metrics-evaluation.tex @@ -57,10 +57,10 @@ Karsten Loesing\\The Tor Project\\ \href{mailto:karsten@torproject.org}{karsten@ their products. {\renewcommand{\thefootnote}{} \footnotetext{This work was supported by Open Technology Fund under contract -number 1002-2017-018. Support does not imply endorsement. With thanks to the -OONI team for their assistance in completing a comparison between our two data -pipelines, and thanks to Ana Custura for her contributions to the OnionPerf -section of this report. +number 1002-2017-018, and by NSF grants CNS-1526306 and CNS-1619454. Support +does not imply endorsement. With thanks to the OONI team for their assistance +in completing a comparison between our two data pipelines, and thanks to Ana +Custura for her contributions to the OnionPerf section of this report. }} \end{abstract}

1 0