April 2019 - tor-commits - lists.torproject.org

[community/master] Finish templating
by hiro＠torproject.org 10 Apr '19

10 Apr '19

commit 12735c762a90c68370c6b8a872bd9bf59f881ba7 Author: hiro <hiro(a)torproject.org> Date: Wed Apr 10 16:24:46 2019 +0200 Finish templating --- .../becoming-tor-translator/contents.lr | 4 +- content/localization/contents+en.lr | 4 +- content/localization/contents+es.lr | 4 +- content/localization/contents+fr.lr | 4 +- content/localization/contents.lr | 4 +- content/localization/pick-a-project/contents.lr | 17 +++++ content/localization/translate-strings/contents.lr | 17 +++++ content/onion-services/contents+en.lr | 2 + content/onion-services/contents+es.lr | 2 + content/onion-services/contents+fr.lr | 2 + content/onion-services/contents.lr | 2 + content/onion-services/setup/contents.lr | 19 ++++++ content/onion-services/ssl-tls/contents.lr | 19 ++++++ content/user-testing/current/contents.lr | 2 +- content/user-testing/signup/contents.lr | 2 +- databags/pagenav+en.ini | 6 +- databags/pagenav+es.ini | 34 +++++----- databags/pagenav+fr.ini | 34 +++++----- templates/localization.html | 78 ++++++++++++++++++++++ templates/onion-services.html | 46 +++++++++++++ templates/outreach.html | 3 +- 21 files changed, 263 insertions(+), 42 deletions(-) diff --git a/content/localization/becoming-tor-translator/contents.lr b/content/localization/becoming-tor-translator/contents.lr index fe556fd..3724fbc 100644 --- a/content/localization/becoming-tor-translator/contents.lr +++ b/content/localization/becoming-tor-translator/contents.lr @@ -8,9 +8,9 @@ _template: layout.html --- title: Becoming Tor translator --- -subtitle: +subtitle: Pictures and instructions ... --- -key: 5 +key: 1 --- html: localization.html --- diff --git a/content/localization/contents+en.lr b/content/localization/contents+en.lr index b483d03..6c9d732 100644 --- a/content/localization/contents+en.lr +++ b/content/localization/contents+en.lr @@ -6,7 +6,7 @@ color: primary --- _template: layout.html --- -title: Join the Tor Community +title: Localization --- subtitle: We want Tor to work for everyone in the world, which means a lot of languages. Will you help us to translate? --- @@ -15,3 +15,5 @@ key: 5 html: localization.html --- body: + +In order for Tor to work for everyone, it needs to speak everyone's languages. Our translation team works hard to make this a reality, and we can always use more volunteers to help translate. Our current translation priorities are translating Tor Browser and the Tor website into our tier 1 and tier 2 languages (listed below), but we welcome translations for other materials and languages, too. diff --git a/content/localization/contents+es.lr b/content/localization/contents+es.lr index b483d03..6c9d732 100644 --- a/content/localization/contents+es.lr +++ b/content/localization/contents+es.lr @@ -6,7 +6,7 @@ color: primary --- _template: layout.html --- -title: Join the Tor Community +title: Localization --- subtitle: We want Tor to work for everyone in the world, which means a lot of languages. Will you help us to translate? --- @@ -15,3 +15,5 @@ key: 5 html: localization.html --- body: + +In order for Tor to work for everyone, it needs to speak everyone's languages. Our translation team works hard to make this a reality, and we can always use more volunteers to help translate. Our current translation priorities are translating Tor Browser and the Tor website into our tier 1 and tier 2 languages (listed below), but we welcome translations for other materials and languages, too. diff --git a/content/localization/contents+fr.lr b/content/localization/contents+fr.lr index b483d03..6c9d732 100644 --- a/content/localization/contents+fr.lr +++ b/content/localization/contents+fr.lr @@ -6,7 +6,7 @@ color: primary --- _template: layout.html --- -title: Join the Tor Community +title: Localization --- subtitle: We want Tor to work for everyone in the world, which means a lot of languages. Will you help us to translate? --- @@ -15,3 +15,5 @@ key: 5 html: localization.html --- body: + +In order for Tor to work for everyone, it needs to speak everyone's languages. Our translation team works hard to make this a reality, and we can always use more volunteers to help translate. Our current translation priorities are translating Tor Browser and the Tor website into our tier 1 and tier 2 languages (listed below), but we welcome translations for other materials and languages, too. diff --git a/content/localization/contents.lr b/content/localization/contents.lr index b483d03..6c9d732 100644 --- a/content/localization/contents.lr +++ b/content/localization/contents.lr @@ -6,7 +6,7 @@ color: primary --- _template: layout.html --- -title: Join the Tor Community +title: Localization --- subtitle: We want Tor to work for everyone in the world, which means a lot of languages. Will you help us to translate? --- @@ -15,3 +15,5 @@ key: 5 html: localization.html --- body: + +In order for Tor to work for everyone, it needs to speak everyone's languages. Our translation team works hard to make this a reality, and we can always use more volunteers to help translate. Our current translation priorities are translating Tor Browser and the Tor website into our tier 1 and tier 2 languages (listed below), but we welcome translations for other materials and languages, too. diff --git a/content/localization/pick-a-project/contents.lr b/content/localization/pick-a-project/contents.lr new file mode 100644 index 0000000..323ce32 --- /dev/null +++ b/content/localization/pick-a-project/contents.lr @@ -0,0 +1,17 @@ +section: localization +--- +section_id: localization +--- +color: primary +--- +_template: layout.html +--- +title: Pick a project +--- +subtitle: How to find things ... +--- +key: 2 +--- +html: localization.html +--- +body: diff --git a/content/localization/translate-strings/contents.lr b/content/localization/translate-strings/contents.lr new file mode 100644 index 0000000..803e52e --- /dev/null +++ b/content/localization/translate-strings/contents.lr @@ -0,0 +1,17 @@ +section: localization +--- +section_id: localization +--- +color: primary +--- +_template: layout.html +--- +title: Translate strings +--- +subtitle: How to do this ... +--- +key: 3 +--- +html: localization.html +--- +body: diff --git a/content/onion-services/contents+en.lr b/content/onion-services/contents+en.lr index b862a5d..2c93936 100644 --- a/content/onion-services/contents+en.lr +++ b/content/onion-services/contents+en.lr @@ -15,3 +15,5 @@ key: 6 html: onion-services.html --- body: + +Onion services are services that can only be accessed over Tor. Running an onion service gives your users all the security of HTTPS with the added privacy benefits of Tor Browser. diff --git a/content/onion-services/contents+es.lr b/content/onion-services/contents+es.lr index b862a5d..2c93936 100644 --- a/content/onion-services/contents+es.lr +++ b/content/onion-services/contents+es.lr @@ -15,3 +15,5 @@ key: 6 html: onion-services.html --- body: + +Onion services are services that can only be accessed over Tor. Running an onion service gives your users all the security of HTTPS with the added privacy benefits of Tor Browser. diff --git a/content/onion-services/contents+fr.lr b/content/onion-services/contents+fr.lr index b862a5d..2c93936 100644 --- a/content/onion-services/contents+fr.lr +++ b/content/onion-services/contents+fr.lr @@ -15,3 +15,5 @@ key: 6 html: onion-services.html --- body: + +Onion services are services that can only be accessed over Tor. Running an onion service gives your users all the security of HTTPS with the added privacy benefits of Tor Browser. diff --git a/content/onion-services/contents.lr b/content/onion-services/contents.lr index b862a5d..2c93936 100644 --- a/content/onion-services/contents.lr +++ b/content/onion-services/contents.lr @@ -15,3 +15,5 @@ key: 6 html: onion-services.html --- body: + +Onion services are services that can only be accessed over Tor. Running an onion service gives your users all the security of HTTPS with the added privacy benefits of Tor Browser. diff --git a/content/onion-services/setup/contents.lr b/content/onion-services/setup/contents.lr new file mode 100644 index 0000000..571feca --- /dev/null +++ b/content/onion-services/setup/contents.lr @@ -0,0 +1,19 @@ +section: onion services +--- +section_id: onion-services +--- +color: primary +--- +image: cloud-upload-alt +--- +_template: layout.html +--- +title: Set up your .onion Service +--- +subtitle: Learn how to set up a .onion of your very own. +--- +key: 1 +--- +html: onion-services.html +--- +body: diff --git a/content/onion-services/ssl-tls/contents.lr b/content/onion-services/ssl-tls/contents.lr new file mode 100644 index 0000000..5d9233e --- /dev/null +++ b/content/onion-services/ssl-tls/contents.lr @@ -0,0 +1,19 @@ +section: onion services +--- +section_id: onion-services +--- +color: primary +--- +image: lock +--- +_template: layout.html +--- +title: Adding SSL/TLS to a .onion site +--- +subtitle: Add more security and authenticity for your .onion. +--- +key: 2 +--- +html: onion-services.html +--- +body: diff --git a/content/user-testing/current/contents.lr b/content/user-testing/current/contents.lr index 5192ba2..1d10937 100644 --- a/content/user-testing/current/contents.lr +++ b/content/user-testing/current/contents.lr @@ -1,6 +1,6 @@ section: user testing --- -section_id: user testing +section_id: user-testing --- color: primary --- diff --git a/content/user-testing/signup/contents.lr b/content/user-testing/signup/contents.lr index f6ed4bf..e238096 100644 --- a/content/user-testing/signup/contents.lr +++ b/content/user-testing/signup/contents.lr @@ -1,6 +1,6 @@ section: user testing --- -section_id: user testing +section_id: user-testing --- color: primary --- diff --git a/databags/pagenav+en.ini b/databags/pagenav+en.ini index 1ad40f2..1f4097c 100644 --- a/databags/pagenav+en.ini +++ b/databags/pagenav+en.ini @@ -14,9 +14,9 @@ label = Training path = outreach label = Outreach -[translations] -path = translations -label = Translations +[localization] +path = localization +label = Localization [onion-services] path = onion-services diff --git a/databags/pagenav+es.ini b/databags/pagenav+es.ini index 43f44fd..1f4097c 100644 --- a/databags/pagenav+es.ini +++ b/databags/pagenav+es.ini @@ -1,19 +1,23 @@ -[history] -path = about/history -label = History +[relay-operations] +path = relay-operations +label = Relay Operations -[people] -path = about/people -label = People +[user-testing] +path = user-testing +label = User Testing -[sponsors] -path = about/sponsors -label = Sponsors +[training] +path = training +label = Training -[reports] -path = about/reports -label = Reports +[outreach] +path = outreach +label = Outreach -[jobs] -path = about/jobs -label = Jobs +[localization] +path = localization +label = Localization + +[onion-services] +path = onion-services +label = .Onion Services diff --git a/databags/pagenav+fr.ini b/databags/pagenav+fr.ini index 43f44fd..1f4097c 100644 --- a/databags/pagenav+fr.ini +++ b/databags/pagenav+fr.ini @@ -1,19 +1,23 @@ -[history] -path = about/history -label = History +[relay-operations] +path = relay-operations +label = Relay Operations -[people] -path = about/people -label = People +[user-testing] +path = user-testing +label = User Testing -[sponsors] -path = about/sponsors -label = Sponsors +[training] +path = training +label = Training -[reports] -path = about/reports -label = Reports +[outreach] +path = outreach +label = Outreach -[jobs] -path = about/jobs -label = Jobs +[localization] +path = localization +label = Localization + +[onion-services] +path = onion-services +label = .Onion Services diff --git a/templates/localization.html b/templates/localization.html index e69de29..fb18348 100644 --- a/templates/localization.html +++ b/templates/localization.html @@ -0,0 +1,78 @@ +<div class="container py-5"> + <h2 class="text-primary">{{ _('Localization is how we reach a global community.') }}</h2> + <div class="row py-5"> + <div class="col-8"> + {{ this.body }} + </div> + <div class="col-4 bg-light"> + <p>Illustration area</p> + </div> + </div> + <div class="row"> + <div class="col-sm-6 col-md-6 col-sm-12 col-xl-6 py-4"> + <h4 class="text-primary text-uppercase">Tier 1</h4> + <table class="table table-hover"> + <thead> + <tr> + <th scope="col">{{ _('Language') }}</th> + <th scope="col">{{ _('Projects supported') }}</th> + </tr> + </thead> + <tbody> + <tr> + <td>{{ _('English') }}</td> + <td>{{ _('Tor Browser, Website') }}</td> + </tr> + <tr> + <td>{{ _('German') }}</td> + <td>{{ _('Tor Browser, Website') }}</td> + </tr> + <tr> + <td>{{ _('French') }}</td> + <td>{{ _('Tor Browser, Website') }}</td> + </tr> + </tbody> + </table> + </div> + <div class="col-sm-6 col-md-6 col-sm-12 col-xl-6 py-4"> + <h4 class="text-primary text-uppercase">Tier 2</h4> + <table class="table table-hover"> + <thead> + <tr> + <th scope="col">{{ _('Language') }}</th> + <th scope="col">{{ _('Projects supported') }}</th> + </tr> + </thead> + <tbody> + <tr> + <td>{{ _('Portuguese') }}</td> + <td>{{ _('Tor Browser, Website') }}</td> + </tr> + <tr> + <td>{{ _('Arabic') }}</td> + <td>{{ _('Tor Browser, Website') }}</td> + </tr> + <tr> + <td>{{ _('Greek') }}</td> + <td>{{ _('Tor Browser, Website') }}</td> + </tr> + </tbody> + </table> + </div> + </div> + <div class="row"> + {% for child in this.children|sort(attribute='key') %} + <div class="col-sm-6 col-md-6 col-sm-12 col-xl-6 py-4"> + <div class="card h-100 border-0"> + <div class="card-body"> + <div class="card-body"> + <h4 class="text-primary">.{{ child.key }}</h4> + <h4 class="card-title text-primary">{{ child.title }}</h4> + <p class="card-text">{{ child.subtitle }}</p> + </div> + </div> + </div> + </div> + {% endfor %} + </div> +</div> diff --git a/templates/onion-services.html b/templates/onion-services.html index e69de29..c9bc3b5 100644 --- a/templates/onion-services.html +++ b/templates/onion-services.html @@ -0,0 +1,46 @@ +<div class="container py-5"> + <h2 class="text-primary">{{ _('What are Onion Services?') }}</h2> + <div class="row py-5"> + <div class="col-8"> + {{ this.body }} + </div> + <div class="col-4 bg-light"> + <p>Illustration area</p> + </div> + </div> + <h2 class="text-primary"><u>{{ _('Learn more about onion services here') }} + <i class="fas fa-arrow-right"></i></u> + </h2> + <div class="row py-5"> + {% for child in this.children|sort(attribute='key') %} + <div class="col-sm-6 col-md-6 col-sm-12 col-xl-6 py-4"> + <div class="card h-100 border-0"> + <div class="card-body"> + <h2 class="text-primary display-2"><i class="fas fa-{{ child.image }}"></i></h2> + <h4 class="card-title text-primary">{{ child.title }}</h4> + <p class="card-text">{{ child.subtitle }}</p> + <a href="{{ this.path }}">Call to action <i class="fas fa-arrow-right"></i></a> + </div> + </div> + </div> + {% endfor %} + </div> + <div class="row py-5 text-center mx-auto"> + <h2 class="display-4 text-primary text-center mx-auto">{{ _('Onionize any website') }}</h2> + <p class="text-center"> + {{ _('There\'s a toolkit that lets you take any existing website and host it as a .onion site. You would wanna do this because .onion sites are more secure than just regular sites. We show you how to use this toolkit and onionize a site.') }} + </p> + </div> + <div class="row mx-auto"> + <div class="col-6"> + <h3 class="text-primary text-center mx-auto"><u>{{ _('Learn more') }} + <i class="fas fa-arrow-right"></i></u> + </h3> + </div> + <div class="col-6"> + <h3 class="text-primary text-center mx-auto"><u>{{ _('Check out the code') }} + <i class="fas fa-arrow-right"></i></u> + </h3> + </div> + </div> +</div> diff --git a/templates/outreach.html b/templates/outreach.html index c414b95..5bfb9a3 100644 --- a/templates/outreach.html +++ b/templates/outreach.html @@ -7,7 +7,8 @@ <div class="col-4"> </div> </div> - <div class="row py-5"> + <div class="row"> + <h2 class="text-primary">{{ _('Help us translate') }}</h2> {% for child in this.children|sort(attribute='key') %} <div class="col-sm-4 col-md-4 col-sm-12 col-xl-4 py-4"> <div class="card h-100 border-0">

1 0

[tor-browser-build/master] Merge remote-tracking branch 'boklm/bug_30089_v4'
by gk＠torproject.org 10 Apr '19

10 Apr '19

commit c14145264cd1f8eaff3a465d0014d5bf1d061e8a Merge: ed424fd 99b49ad Author: Georg Koppen <gk(a)torproject.org> Date: Wed Apr 10 13:46:27 2019 +0000 Merge remote-tracking branch 'boklm/bug_30089_v4' projects/android-toolchain/build | 4 +--- projects/debootstrap-image/config | 8 -------- projects/tor-browser/build.android | 2 +- projects/tor-browser/config | 6 +----- rbm.conf | 2 ++ 5 files changed, 5 insertions(+), 17 deletions(-)

1 0

[tor-browser-build/master] Bug 30089: Use apksigner instead of jarsigner
by gk＠torproject.org 10 Apr '19

10 Apr '19

commit 99b49adf8e049ff5d5c091485fb3a45b6e6e359c Author: Nicolas Vigier <boklm(a)torproject.org> Date: Wed Apr 10 12:28:03 2019 +0200 Bug 30089: Use apksigner instead of jarsigner --- projects/android-toolchain/build | 4 +--- projects/debootstrap-image/config | 8 -------- projects/tor-browser/build.android | 2 +- projects/tor-browser/config | 6 +----- rbm.conf | 2 ++ 5 files changed, 5 insertions(+), 17 deletions(-) diff --git a/projects/android-toolchain/build b/projects/android-toolchain/build index ff899d2..9fe40f7 100644 --- a/projects/android-toolchain/build +++ b/projects/android-toolchain/build @@ -21,9 +21,7 @@ rm -fR android-ndk-r15c # The architectures we support archs="arm x86" for arch in $archs; do - # API 16 is the minimum we currently support for Tor Browser on Android for - # 32bit. - ./build/tools/make_standalone_toolchain.py --api 16 --arch $arch --install-dir=./$arch + ./build/tools/make_standalone_toolchain.py --api [% c("var/android_min_api") %] --arch $arch --install-dir=./$arch done # Tool Archives diff --git a/projects/debootstrap-image/config b/projects/debootstrap-image/config index 7d535ec..7fa3551 100644 --- a/projects/debootstrap-image/config +++ b/projects/debootstrap-image/config @@ -94,14 +94,6 @@ targets: suite: jessie arch: i386 - # Still needed to fix faketime issues in tor-browser for Android, see: #29453 - buster-amd64: - var: - minimal_apt_version: '1.8.0~alpha3.1' - container: - suite: buster - arch: amd64 - stretch-amd64: var: minimal_apt_version: 1.4.9 diff --git a/projects/tor-browser/build.android b/projects/tor-browser/build.android index 2de8d36..ffaf93d 100644 --- a/projects/tor-browser/build.android +++ b/projects/tor-browser/build.android @@ -25,4 +25,4 @@ zip -d $apk lib/armeabi/tor.so [% END %] # Sign a QA build. This apk is not a debug version and doesn't contain a debug flag in the manifest -[% c("var/faketime") %] jarsigner -verbose -digestalg SHA1 -sigalg MD5withRSA -keystore $rootdir/android-qa.keystore -signedjar $qa_apk $apk androidqakey -storepass android -keypass android +java -jar /usr/share/apksigner/apksigner.jar sign --verbose --min-sdk-version [% c("var/android_min_api") %] --ks $rootdir/android-qa.keystore --out $qa_apk --in $apk --ks-key-alias androidqakey --key-pass pass:android --ks-pass pass:android diff --git a/projects/tor-browser/config b/projects/tor-browser/config index 0a82092..c14b9d7 100644 --- a/projects/tor-browser/config +++ b/projects/tor-browser/config @@ -52,11 +52,7 @@ targets: var: arch_deps: - openjdk-8-jdk - - faketime - # On some machines using faketime with Stretch to make the debug signature - # leads to a stalled build. Work around this by switching to Buster. - container: - suite: buster + - apksigner input_files: - project: container-image diff --git a/rbm.conf b/rbm.conf index 1a0c6ca..7be1106 100644 --- a/rbm.conf +++ b/rbm.conf @@ -191,6 +191,8 @@ targets: var: android: 1 compiler: android-toolchain + # API 16 is the minimum we currently support for Tor Browser on Android + android_min_api: 16 snowflake: 0 fteproxy: 0 container:

1 0

[tor-browser-build/master] Bug 30039: Use the target_prepend option in https-everywhere
by gk＠torproject.org 10 Apr '19

10 Apr '19

commit ed424fd45a740f1b62857456fbcf616976012986 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Mon Apr 8 13:38:36 2019 +0200 Bug 30039: Use the target_prepend option in https-everywhere Update rbm for #30039, adding support for the target_prepend and target_append options in input_files. In projects/https-everywhere/config we now use the target_prepend option instead of the target option for the python input file. This does not change the output of the build. However this makes it possible in the future to check the channel or platform we build for in the python project (which was not possible before as we were using the target option, replacing all the initial targets). --- projects/https-everywhere/config | 2 +- rbm | 2 +- rbm.conf | 1 + 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/projects/https-everywhere/config b/projects/https-everywhere/config index a9409cd..d84cdf6 100644 --- a/projects/https-everywhere/config +++ b/projects/https-everywhere/config @@ -32,5 +32,5 @@ input_files: - project: container-image - project: python name: python - target: + target_prepend: - common-stretch diff --git a/rbm b/rbm index 70d1ff3..87adfb7 160000 --- a/rbm +++ b/rbm @@ -1 +1 @@ -Subproject commit 70d1ff3e7c1c5c69a1b4cdb61ee1b6b9e2a9bc4a +Subproject commit 87adfb7b7be7e7e0f437020dbf8a119673133412 diff --git a/rbm.conf b/rbm.conf index 1a0c6ca..64192b4 100644 --- a/rbm.conf +++ b/rbm.conf @@ -162,6 +162,7 @@ targets: container: suite: stretch arch: amd64 + pre_pkginst: '' deps: - build-essential - python

1 0

[webwml/master] How to use cookie authentication for onion services (#27680)
by hiro＠torproject.org 10 Apr '19

10 Apr '19

commit 46f49331df64b1ecf9fb61631294a1e3bc57e446 Author: traumschule <traumschuleriebau(a)riseup.net> Date: Sun Sep 16 01:12:48 2018 +0200 How to use cookie authentication for onion services (#27680) --- docs/en/faq.wml | 13 +++++++++++++ docs/en/tor-onion-service.wml | 30 ++++++++++++++++++++++++++++++ 2 files changed, 43 insertions(+) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index 889cbe6b..61d2da95 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -214,6 +214,8 @@ <li><a href="#AccessOnionServices">How do I access onion services?</a></li> <li><a href="#ProvideAnOnionService">How do I provide an onion service? </a></li> + <li><a href="#CookieAuthOnionService">How do I set up cookie authentication + for an onion service? </ul> <a id="dev"></a> @@ -3090,6 +3092,17 @@ href="https://www.noisebridge.net/wiki/Noisebridge_Tor">Noisebridge</a> <hr> + <a id="CookieAuthOnionService"></a> + <h3><a class="anchor" href="#CookieAuthOnionService">How do set up cookie + authentication for an onion service?</a></h3> + + <p> + See the <a href="<page docs/tor-onion-service>#CookieAuthentication"> + "Cookie authentication" in the official onion service configuration instructions</a>. + </p> + + <hr> + <a id="Development"></a> <h2><a class="anchor" href="#Development">Development:</a></h2> diff --git a/docs/en/tor-onion-service.wml b/docs/en/tor-onion-service.wml index 2bd13ad8..1215c572 100644 --- a/docs/en/tor-onion-service.wml +++ b/docs/en/tor-onion-service.wml @@ -225,8 +225,38 @@ HiddenServicePort 22 127.0.0.1:22 </pre> + <p> To set up an onion service on Raspbian have a look at Alec Muffett's <a href="https://github.com/alecmuffett/eotk">Enterprise Onion Toolkit</a>. + </p> + + <h3><a name="CookieAuthentication">Cookie authentication</a></h3> + + <p>To set up cookie authentication add following lines to your + <a href="<page docs/faq>#torrc">torrc</a> as specified for + <a href="<page docs/tor-manual>#HidServAuth">HidServAuth</a> and + <a href="<page docs/tor-manual>#HiddenServiceAuthorizeClient"> + HiddenServiceAuthorizeClient</a> in the manual. + First add following line to the torrc file of your onion service: + </p> + <pre> + HiddenServiceAuthorizeClient [auth-type] [service-name] + </pre> + <p> + Then restart/reload tor and read the cookie from the hostname file of your + onion service, for example in + <tt>/var/lib/tor/hidden_service_path/hostname</tt>. + To access it with another tor service add following line to torrc + and (re)start/reload it: + </p> + <pre> + HidServAuth [onion-address] [auth-cookie] [service-name] + </pre> + <p> + You are now able to browse to the onion service address. + </p> + + <h3><a name="OpSec">Operational security</a></h3> <p>Onion services operators need to practice proper <a href="https://trac.torproject.org/projects/tor/wiki/doc/OperationalSecurity">

1 0

[webwml/master] Document hsv3 Client Authorization (#27680)
by hiro＠torproject.org 10 Apr '19

10 Apr '19

commit e07739ceacb8d7c8288722841ffc1de6baa87cd1 Author: traumschule <traumschuleriebau(a)riseup.net> Date: Tue Nov 6 11:26:14 2018 +0100 Document hsv3 Client Authorization (#27680) --- docs/en/tor-onion-service.wml | 59 ++++++++++++++++++++++++++++++++++--------- 1 file changed, 47 insertions(+), 12 deletions(-) diff --git a/docs/en/tor-onion-service.wml b/docs/en/tor-onion-service.wml index 1215c572..134f1632 100644 --- a/docs/en/tor-onion-service.wml +++ b/docs/en/tor-onion-service.wml @@ -230,23 +230,24 @@ <a href="https://github.com/alecmuffett/eotk">Enterprise Onion Toolkit</a>. </p> - <h3><a name="CookieAuthentication">Cookie authentication</a></h3> + <a name="CookieAuthentication"></a><a name="ClientAuthorization"></a> + <h3><a href="#ClientAuthorization">Client Authorization</a></h3> - <p>To set up cookie authentication add following lines to your - <a href="<page docs/faq>#torrc">torrc</a> as specified for + <p>To set up Cookie Authentication for <strong>v2</strong> services + see the entries for the <a href="<page docs/tor-manual>#HidServAuth">HidServAuth</a> and <a href="<page docs/tor-manual>#HiddenServiceAuthorizeClient"> - HiddenServiceAuthorizeClient</a> in the manual. - First add following line to the torrc file of your onion service: + HiddenServiceAuthorizeClient</a> options in the manual. + First add following line to the <a href="<page docs/faq>#torrc">torrc</a> file of your onion service: </p> <pre> HiddenServiceAuthorizeClient [auth-type] [service-name] </pre> <p> - Then restart/reload tor and read the cookie from the hostname file of your - onion service, for example in - <tt>/var/lib/tor/hidden_service_path/hostname</tt>. - To access it with another tor service add following line to torrc + Restart/reload tor and read the cookie from the hostname file of your + onion service, for example in<br/> + <tt>/var/lib/tor/hidden_service_path/hostname</tt>.<br/> + To access it with a tor client add following line to torrc and (re)start/reload it: </p> <pre> @@ -256,7 +257,41 @@ You are now able to browse to the onion service address. </p> - <h3><a name="OpSec">Operational security</a></h3> + <p>To set up Client Authorization for <strong>v3</strong> + (<a href="#four">"next-gen"</a>) services as specified in + <a href="https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt#n615"> + rend-spec-v3.txt</a> for the tor service running the onion follow the + instructions in + <a href="<page docs/tor-manual-dev>#_client_authorization"> + Client Authorization</a>. + Note that to revoke clients you need to restart the tor service + (see <a href="https://trac.torproject.org/projects/tor/ticket/28275">#28275</a>). + At the moment you need to create the keys yourself with a script + (like these written in + <a href="https://gist.github.com/mtigas/9c2386adf65345be34045dace134140b">bash</a> + or <a href="https://github.com/haxxpop/torkeygen">rust</a>). + </p> + <p> + To access it with a tor client make sure you have + <a href="<page docs/tor-manual-dev>#ClientOnionAuthDir"> + ClientOnionAuthDir</a> set in torrc. + In the <ClientOnionAuthDir> directory, create an + <i>.auth_private</i> file for the onion service corresponding to this key + (i.e. 'bob_onion.auth_private').<br/> + The contents of the + <tt><ClientOnionAuthDir>/<user>.auth_private</tt> + file should look like: + <pre> + <56-char-onion-addr-without-.onion-part>:descriptor:x25519:BBBEAUAO3PIFAH7SBGBI6A2QFAZBXG2NVN7HMBXFCZENJVF6C5AQ + </pre> + Then (re)start/reload it and you should be able to browse to the onion + service address. + </p> + + <hr/> + + <a name="OpSec"></a> + <h3><a href="#OpSec">Operational security</a></h3> <p>Onion services operators need to practice proper <a href="https://trac.torproject.org/projects/tor/wiki/doc/OperationalSecurity"> @@ -329,7 +364,7 @@ </p> <h3>How to setup your own prop224 service</h3> - <p>It's easy! Just use your <a href"#two">regular onion service</a> torrc + <p>It's easy! Just use your <a href="#two">regular onion service</a> torrc and add <var>HiddenServiceVersion 3</var> in your onion service torrc block. ` Here is an example torrc designed for testing: @@ -370,7 +405,7 @@ HiddenServicePort 6668 127.0.0.1:6667 <h3>How to help the next-gen onion development</h3> <p>Please let us know if you find any bugs! - We are still in testing & development stage so things are very liquid and + We are still in testing & development stage so things are very liquid and in active development. If you want to help with development, check out the list of <a href="https://trac.torproject.org/projects/tor/query?status=!closed&keywords=~pro…"> open prop224 bugs</a>.

1 0

[translation/torbutton-browseronboardingproperties_completed] Update translations for torbutton-browseronboardingproperties_completed
by translation＠torproject.org 10 Apr '19

10 Apr '19

commit f7d085248f3fb8e80606a5d444a853d5352a86b1 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Apr 10 13:19:44 2019 +0000 Update translations for torbutton-browseronboardingproperties_completed --- lt/browserOnboarding.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lt/browserOnboarding.properties b/lt/browserOnboarding.properties index 0adf265df..12574df7e 100644 --- a/lt/browserOnboarding.properties +++ b/lt/browserOnboarding.properties @@ -26,7 +26,7 @@ onboarding.tour-tor-circuit-display.next-button=Pereiti į saugumą onboarding.tour-tor-security=Saugumas onboarding.tour-tor-security.title=Pasirinkite savo patyrimą. onboarding.tour-tor-security.description=Mes taip pat siūlome papildomus nustatymus, kurių pagalba galima būtų dar pagerinti jūsų naršyklės saugumą. Mūsų saugumo nustatymai leidžia jums blokuoti reikiamus elementus, kurie galėtų būti panaudoti siekiant užpulti jūsų kompiuterį. Spustelėkite žemiau, norėdami pamatyti ką skirtingi parametrai atlieka. -onboarding.tour-tor-security.description-suffix=Note: By default, NoScript and HTTPS Everywhere are not included on the toolbar, but you can customize your toolbar to add them. +onboarding.tour-tor-security.description-suffix=Pastaba: Pagal numatymą, NoScript ir HTTPS Everywhere nėra įtraukti į įrankių juostą, tačiau norėdami juos pridėti, galite tinkinti savo įrankių juostą. onboarding.tour-tor-security-level.button=Žiūrėti savo saugumo lygmenį onboarding.tour-tor-security-level.next-button=Pereiti į patyrimo patarimus

1 0

[translation/torbutton-browseronboardingproperties] Update translations for torbutton-browseronboardingproperties
by translation＠torproject.org 10 Apr '19

10 Apr '19

commit 8fee6132d3f208713fb823207b1fb5bdd46121f3 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Apr 10 13:19:36 2019 +0000 Update translations for torbutton-browseronboardingproperties --- lt/browserOnboarding.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lt/browserOnboarding.properties b/lt/browserOnboarding.properties index 0adf265df..12574df7e 100644 --- a/lt/browserOnboarding.properties +++ b/lt/browserOnboarding.properties @@ -26,7 +26,7 @@ onboarding.tour-tor-circuit-display.next-button=Pereiti į saugumą onboarding.tour-tor-security=Saugumas onboarding.tour-tor-security.title=Pasirinkite savo patyrimą. onboarding.tour-tor-security.description=Mes taip pat siūlome papildomus nustatymus, kurių pagalba galima būtų dar pagerinti jūsų naršyklės saugumą. Mūsų saugumo nustatymai leidžia jums blokuoti reikiamus elementus, kurie galėtų būti panaudoti siekiant užpulti jūsų kompiuterį. Spustelėkite žemiau, norėdami pamatyti ką skirtingi parametrai atlieka. -onboarding.tour-tor-security.description-suffix=Note: By default, NoScript and HTTPS Everywhere are not included on the toolbar, but you can customize your toolbar to add them. +onboarding.tour-tor-security.description-suffix=Pastaba: Pagal numatymą, NoScript ir HTTPS Everywhere nėra įtraukti į įrankių juostą, tačiau norėdami juos pridėti, galite tinkinti savo įrankių juostą. onboarding.tour-tor-security-level.button=Žiūrėti savo saugumo lygmenį onboarding.tour-tor-security-level.next-button=Pereiti į patyrimo patarimus

1 0

[translation/support-portal] Update translations for support-portal
by translation＠torproject.org 10 Apr '19

10 Apr '19

commit 01a22896efe2820c4d6e5d3e5b968cc4c73968e3 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Apr 10 12:50:56 2019 +0000 Update translations for support-portal --- contents+ru.po | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/contents+ru.po b/contents+ru.po index 22a9239cc..f3bd1dcb0 100644 --- a/contents+ru.po +++ b/contents+ru.po @@ -356,6 +356,8 @@ msgid "" "For example, torbrowser-install-8.0.8_en-US.exe is accompanied by " "torbrowser-install-8.0.8_en-US.exe.asc." msgstr "" +"Например, torbrowser-install-8.0.8_en-US.exe сопровождается файлом " +"torbrowser-install-8.0.8_en-US.exe.asc" #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description) @@ -370,6 +372,8 @@ msgid "" "We now show how you can verify the downloaded file's digital signature on " "different operating systems." msgstr "" +"Сейчас мы покажем Вам, как Вы можете подтвердить цифровую подпись скачанного" +" файла на разных операционных системах." #: https//support.torproject.org/tbb/how-to-verify-signature/ #: (content/tbb/how-to-verify-signature/contents+en.lrquestion.description)

1 0

[translation/torbutton-browseronboardingproperties_completed] Update translations for torbutton-browseronboardingproperties_completed
by translation＠torproject.org 10 Apr '19

10 Apr '19

commit b9254b47545483b70b3907a6fb292f5ecea99277 Author: Translation commit bot <translation(a)torproject.org> Date: Wed Apr 10 12:49:40 2019 +0000 Update translations for torbutton-browseronboardingproperties_completed --- es-ES/browserOnboarding.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/es-ES/browserOnboarding.properties b/es-ES/browserOnboarding.properties index 092ba8f41..9dd6fbf21 100644 --- a/es-ES/browserOnboarding.properties +++ b/es-ES/browserOnboarding.properties @@ -26,7 +26,7 @@ onboarding.tour-tor-circuit-display.next-button=Ir a la Seguridad onboarding.tour-tor-security=Seguridad onboarding.tour-tor-security.title=Elige tu experiencia. onboarding.tour-tor-security.description=También te proporcionamos configuraciones adicionales para aumentar la seguridad de tu navegador. Nuestra Configuración de Seguridad te permite bloquear elementos que podrían usarse para atacar tu computadora. Haz clic a continuación para ver lo que hacen las diferentes opciones. -onboarding.tour-tor-security.description-suffix=Note: By default, NoScript and HTTPS Everywhere are not included on the toolbar, but you can customize your toolbar to add them. +onboarding.tour-tor-security.description-suffix=Nota: De forma predeterminada, NoScript y HTTPS Everywhere no están incluidos en la barra de herramientas, pero puedes personalizarla para agregarlos. onboarding.tour-tor-security-level.button=Mira tu nivel de seguridad onboarding.tour-tor-security-level.next-button=Ir a los Consejos de Expertos

1 0