June 2022 - tor-commits - lists.torproject.org

[torspec] branch main updated (c6cf0ad -> b29e64e)
by gitolite role 07 Jun '22

07 Jun '22

This is an automated email from the git hooks/post-receive script. arma pushed a change to branch main in repository torspec. from c6cf0ad Reindex for prop340. new f9e386e fix a trivial typo new b29e64e proof-reading on prop 266 The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: padding-spec.txt | 2 +- proposals/266-removing-current-obsolete-clients.txt | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 2

[builders/tor-browser-build] branch master updated: fixup! Bug 40451: Create Release Prep issue template
by gitolite role 03 Jun '22

03 Jun '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch master in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/master by this push: new 4905b8c fixup! Bug 40451: Create Release Prep issue template 4905b8c is described below commit 4905b8ccead19196270f19d654ccf553a7be23fa Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Fri Jun 3 16:16:42 2022 +0000 fixup! Bug 40451: Create Release Prep issue template add android publishing steps --- .gitlab/issue_templates/Release Prep.md | 42 ++++++++++++++++++++++++--------- 1 file changed, 31 insertions(+), 11 deletions(-) diff --git a/.gitlab/issue_templates/Release Prep.md b/.gitlab/issue_templates/Release Prep.md index 46a78df..86318d0 100644 --- a/.gitlab/issue_templates/Release Prep.md +++ b/.gitlab/issue_templates/Release Prep.md @@ -1,6 +1,8 @@ <details> <summary>Explanation of variables</summary> +- `$(BUILD_SERVER)` : the server the main builder is using to build a tor-browser release +- `$(STAGING_SERVER)` : the server the signer is using to to run the signing process - `$(TOR_LAUNCHER_VERSION)` : version of `tor-launcher`, used in tags - example : `0.2.33` - `$(ESR_VERSION)` : the Mozilla defined ESR version, used in various places for building tor-browser tags, labels, etc @@ -157,16 +159,19 @@ Tor Browser Alpha (and Nightly) are on the `master` branch, while Stable lives i - [ ] `input_files/sha256sum` for `go` : update sha256sum of archive (sha256 sums are displayed on the go download page) - [ ] ***(Android Only)*** Update allowed_addons.json by running (from `tor-browser-build` root)`./tools/fetch_allowed_addons.py > projects/tor-browser/allowed_addons.json - [ ] Update `ChangeLog.txt` + - [ ] Ensure ChangeLog.txt is sync'd between alpha and stable branches - [ ] Open MR with above changes -- [ ] Begin build on `tb-build-03` +- [ ] Begin build on `$(BUILD_SERVER)` - [ ] Sign/Tag commit : `make signtag-(alpha|release)` - [ ] Push tag to origin -### notify tor-qa -- [ ] Email tor-qa(a)lists.torproject.org - - [ ] Provide links to unsigned builds on `tb-build-03` +### notify stakeholders +- [ ] Email tor-qa mailing list: tor-qa(a)lists.torproject.org + - [ ] Provide links to unsigned builds on `$(BUILD_SERVER)` - [ ] Call out any new functionality which needs testing - [ ] Link to any known issues +- [ ] Email Tails dev mailing list: tails-dev(a)boum.org + - [ ] Provide links to unsigned builds on `$(BUILD_SERVER)` ### blog: https://gitlab.torproject.org/tpo/web/blog.git @@ -198,7 +203,7 @@ Tor Browser Alpha (and Nightly) are on the `master` branch, while Stable lives i ### signing + publishing - [ ] Ensure builders have matching builds -- [ ] On staging machine, ensure updated: +- [ ] On `$(STAGING_SERVER)`, ensure updated: - [ ] `tor-browser-build/tools/signing/set-config` - [ ] `NSS_DB_DIR` : location of the `nssdb7` directory - [ ] `tor-browser-build/tools/signing/set-config.hosts` @@ -212,17 +217,32 @@ Tor Browser Alpha (and Nightly) are on the `master` branch, while Stable lives i - [ ] `tbb_version` : tor browser version string, same as `var/torbrowser_version` in `rbm.conf` (examples: `11.5a12`, `11.0.13`) - [ ] `tbb_version_build` : the tor-browser-build build number (if `var/torbrowser_build` in `rbm.conf` is `buildN` then this value is `N`) - [ ] `tbb_version_type` : either `alpha` for alpha releases or `release` for stable releases +- [ ] ***(Android Only)*** : *TODO* - [ ] run do-all-signing script: - `cd tor-browser-build/tools/signing/` - `./do-all-signing.sh` - **NOTE**: at this point the signed desktop binaries should have been copied to `staticiforme` - [ ] Update `staticiforme.torproject.org`: - - From `screen` session on `staticiforme.torproject.org` - - [ ] Static update components : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` - - [ ] Enable update responses : - - [ ] alpha: `./deploy_update_responses-alpha.sh` - - **OR** - - [ ] release: `./deploy_update_responses-release.sh` + - From `screen` session on `staticiforme.torproject.org` + - [ ] Static update components : `static-update-component cdn.torproject.org && static-update-component dist.torproject.org` + - [ ] Enable update responses : + - [ ] alpha: `./deploy_update_responses-alpha.sh` + - [ ] release: `./deploy_update_responses-release.sh` +- [ ] ***(Android Only)*** : Publish APKs to Google Play + - [ ] Log into https://play.google.com/apps/publish + - Select correct app: + - [ ] Tor Browser + - [ ] Tor Browser Alpha + - [ ] Navigate to `Release > Production` and click `Create new release` button + - [ ] Upload the `*.multi.apk` APKs + - [ ] If necessary, update the 'Release Name' (should be automatically populated) + - [ ] Update Release Notes + - [ ] Next to 'Release notes', click `Copy from a previous release` + - [ ] Edit blog post url to point to most recent blog post + - [ ] Save, review, and configure rollout percentage + - [ ] 25% rollout when publishing a scheduled update + - [ ] 100% rollout when publishing a security-driven release + - [ ] ***Optional*** Update rollout percentage to 100% after confirmed no major issues </details> -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] annotated tag tbb-11.0.14-build1 created (now f9a52a9)
by gitolite role 03 Jun '22

03 Jun '22

This is an automated email from the git hooks/post-receive script. boklm pushed a change to annotated tag tbb-11.0.14-build1 in repository builders/tor-browser-build. at f9a52a9 (tag) tagging 640e93a03fdc9b34df299141bb2e63ec3e1911fa (commit) replaces tbb-11.0.13-build1 by Nicolas Vigier on Fri Jun 3 07:03:28 2022 +0000 - Log ----------------------------------------------------------------- Tagging build1 for 11.0.14 -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEERUguU2ZCQz6Cn30CHd4wt2RHEBQFAmKZskIACgkQHd4wt2RH EBS3yBAAytXyxtTLjbT9P0WoOTqK/2R8DCW9sQGCMWalM/OUAsMsW8DiaqBsg9lu RasiGrTpTIec1wnBdP4eHsNrULG1co5XdELIXvF0PLjexwTqm7PJg/OA/mtX3/pd mRN5qO6RKATgEJye03lYTeJwFN82UhkfL2m/5YTvPZ2IYFd6QEUTHBNrm4bLZRVl tcdWSTw+p+lypO7B+tzplJjSZbm82CaO3Y2C/piNfDeHlRX+qDJbTtq3IrsSUYYe LrJgnxaypbSpsy05csWPoqv28JJRfpOqkessFoiIuudippv6xVqzjf9NwLQbeKgn Pl+BtA8E+DrsIC6WBsKLRJT0BZR3Hr/0GTb77d8bIARKyP482wsiBdYBpzuiaatR Wnizju0bDfM/MbcgCR9wqKB6hw2cxaMMQe8oMgBnp+oVX118gqLf5OM8vQ3yYY5L iRfHR1cZ35A1YjIyZaQfhfBgvVwLKw/tEaPRBA06Faqvi7BMHzWYbkWOeIuZkWMm K/rSJxAGphLp57cjlInnDORdgT3njz2KtLGeC+7+kXyzjHQI3B6SH85ftp/KwHSe 1yoq7KMdcBqLsJIPAVu9gmUb57e5qr4nzUDyz7btR7ni26GbLKb7M+S7miIj4WDS Aj/4zSjgt7ynfLCZGpxAJ12bfG96HhIJsRgGH7u0zrhbbdlVoQc= =QYfq -----END PGP SIGNATURE----- ----------------------------------------------------------------------- No new revisions were added by this update. -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch maint-11.0 updated (e4e9282 -> 640e93a)
by gitolite role 03 Jun '22

03 Jun '22

This is an automated email from the git hooks/post-receive script. boklm pushed a change to branch maint-11.0 in repository builders/tor-browser-build. from e4e9282 Fix typo in ChangeLog.txt new 2ce902f Bug 40474: Bump version of pion/webrtc to v3.1.41 new 640e93a Bug 40405: Prepare stable release 11.0.14(Desktop+Android) The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: projects/firefox/config | 4 +- projects/go/config | 4 +- projects/goyaml/config | 4 +- projects/pion-datachannel/config | 5 +- projects/pion-dtls/config | 4 +- projects/pion-ice/config | 8 +- projects/pion-interceptor/config | 2 +- projects/pion-logging/config | 2 +- projects/pion-mdns/config | 2 +- projects/pion-rtcp/config | 2 +- projects/pion-rtp/config | 2 +- projects/pion-sctp/config | 5 +- projects/pion-sdp/config | 2 +- projects/pion-srtp/config | 2 +- projects/pion-stun/config | 4 - projects/pion-transport/config | 2 +- projects/pion-turn/config | 2 +- projects/pion-udp/config | 2 +- projects/pion-webrtc/config | 7 +- projects/testify/config | 2 +- .../tor-browser/Bundle-Data/Docs/ChangeLog.txt | 268 +++++++++++++++++++-- projects/tor-browser/allowed_addons.json | 206 ++++++++-------- projects/tor-browser/config | 4 +- projects/uuid/config | 2 +- rbm.conf | 4 +- 25 files changed, 397 insertions(+), 154 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 2

[tor] branch release-0.4.7 updated (5f2b75aafd -> dc7902ed55)
by gitolite role 02 Jun '22

02 Jun '22

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch release-0.4.7 in repository tor. from 5f2b75aafd Merge branch 'maint-0.4.6' into maint-0.4.7 new 9769b77c9b Demote log message to info. new 89a273e7f7 Bug 40620: Changes file new dc7902ed55 Merge branch 'tor-gitlab/mr/583' into maint-0.4.7 The 3 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: changes/bug40620 | 3 +++ src/core/mainloop/mainloop.c | 4 ++-- 2 files changed, 5 insertions(+), 2 deletions(-) create mode 100644 changes/bug40620 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch maint-0.4.7 updated (5f2b75aafd -> dc7902ed55)
by gitolite role 02 Jun '22

02 Jun '22

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch maint-0.4.7 in repository tor. from 5f2b75aafd Merge branch 'maint-0.4.6' into maint-0.4.7 new 9769b77c9b Demote log message to info. new 89a273e7f7 Bug 40620: Changes file new dc7902ed55 Merge branch 'tor-gitlab/mr/583' into maint-0.4.7 The 3 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: changes/bug40620 | 3 +++ src/core/mainloop/mainloop.c | 4 ++-- 2 files changed, 5 insertions(+), 2 deletions(-) create mode 100644 changes/bug40620 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch main updated (36c714687b -> b733f9d6ac)
by gitolite role 02 Jun '22

02 Jun '22

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository tor. from 36c714687b Fix dispatch_cfg_t comment new 9769b77c9b Demote log message to info. new 89a273e7f7 Bug 40620: Changes file new dc7902ed55 Merge branch 'tor-gitlab/mr/583' into maint-0.4.7 new b733f9d6ac Merge branch 'maint-0.4.7' The 4 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: changes/bug40620 | 3 +++ src/core/mainloop/mainloop.c | 4 ++-- 2 files changed, 5 insertions(+), 2 deletions(-) create mode 100644 changes/bug40620 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 4

[pluggable-transports/snowflake] branch main updated: Don't use entropy for test
by gitolite role 02 Jun '22

02 Jun '22

This is an automated email from the git hooks/post-receive script. meskio pushed a commit to branch main in repository pluggable-transports/snowflake. The following commit(s) were added to refs/heads/main by this push: new f38c91f Don't use entropy for test f38c91f is described below commit f38c91f906af5b806f463e790eddc134961abf1f Author: meskio <meskio(a)torproject.org> AuthorDate: Thu Jun 2 11:19:47 2022 +0200 Don't use entropy for test Use math/rand instead of crypto/rand, so entropy is not a blocker when running the tests. --- common/amp/armor_test.go | 2 +- common/utls/roundtripper_test.go | 14 +++++++++++--- 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/common/amp/armor_test.go b/common/amp/armor_test.go index 594ae65..fc7561e 100644 --- a/common/amp/armor_test.go +++ b/common/amp/armor_test.go @@ -1,9 +1,9 @@ package amp import ( - "crypto/rand" "io" "io/ioutil" + "math/rand" "strings" "testing" ) diff --git a/common/utls/roundtripper_test.go b/common/utls/roundtripper_test.go index 6a91385..bccb799 100644 --- a/common/utls/roundtripper_test.go +++ b/common/utls/roundtripper_test.go @@ -1,12 +1,12 @@ package utls import ( - "crypto/rand" "crypto/rsa" "crypto/tls" "crypto/x509" "crypto/x509/pkix" "math/big" + "math/rand" "net/http" "testing" "time" @@ -26,7 +26,15 @@ func TestRoundTripper(t *testing.T) { Convey("[Test]Set up http servers", t, func(c C) { c.Convey("[Test]Generate Self-Signed Cert", func(c C) { // Ported from https://gist.github.com/samuel/8b500ddd3f6118d052b5e6bc16bc4c09 - priv, err := rsa.GenerateKey(rand.Reader, 4096) + + // note that we use the insecure math/rand here because some platforms + // fail the test suite at build time in Debian, due to entropy starvation. + // since that's not a problem at test time, we do *not* use a secure + // mechanism for key generation. + // + // DO NOT REUSE THIS CODE IN PRODUCTION, IT IS DANGEROUS + insecureRandReader := rand.New(rand.NewSource(1337)) + priv, err := rsa.GenerateKey(insecureRandReader, 4096) c.So(err, ShouldBeNil) template := x509.Certificate{ SerialNumber: big.NewInt(1), @@ -40,7 +48,7 @@ func TestRoundTripper(t *testing.T) { ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}, BasicConstraintsValid: true, } - derBytes, err := x509.CreateCertificate(rand.Reader, &template, &template, priv.Public(), priv) + derBytes, err := x509.CreateCertificate(insecureRandReader, &template, &template, priv.Public(), priv) c.So(err, ShouldBeNil) selfSignedPrivateKey = priv selfSignedCert = derBytes -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[company/policies] branch master updated: Add minutes for the 2022-01-17 meeting.
by gitolite role 02 Jun '22

02 Jun '22

This is an automated email from the git hooks/post-receive script. julius pushed a commit to branch master in repository company/policies. The following commit(s) were added to refs/heads/master by this push: new 401ec9c Add minutes for the 2022-01-17 meeting. 401ec9c is described below commit 401ec9ce55f17d9aff06772e41d7636929aa453b Author: Julius Mittenzwei <julius.mittenzwei(a)openpublishing.com> AuthorDate: Thu Jun 2 14:34:00 2022 +0200 Add minutes for the 2022-01-17 meeting. --- minutes/TPI_Board_Meeting_Minutes-2022-01-17.txt | 17 +++++++++++++++++ ..._Meeting_Minutes-2022-01-17.txt.5FA53B246DEA01A5.asc | 16 ++++++++++++++++ 2 files changed, 33 insertions(+) diff --git a/minutes/TPI_Board_Meeting_Minutes-2022-01-17.txt b/minutes/TPI_Board_Meeting_Minutes-2022-01-17.txt new file mode 100644 index 0000000..93a3ccc --- /dev/null +++ b/minutes/TPI_Board_Meeting_Minutes-2022-01-17.txt @@ -0,0 +1,17 @@ +Tor Board Meeting Minutes for January 17, 2022 + +Video and phone conference meeting called to order at, 12:21 pm est 5:23 pm utc + +Present: Desigan Chinniah, Biella Coleman, Kendra Albert Rabbi Rob, Ramy Raoof, Julius Mittenzwei, Matt Blaze (after 12:33) + + +I. Board Administration Updates and Motions + +- Motion: The Board moves to approve a three year term for Rabbi Rob, +effective January 17, 2022. Kendra moved the motion, Ramy seconded, and all voted in favor. +- Motion: Approval of Sept 13 2021 minutes: Kendra moved the motion, Rabbi Rob seconded, all voted in favor. +- Motion: The Tor Board moves to accept Ramy Raoff’s and Chelsea Kolmo’s resignation, effective January 17, 2022. Kendra moved the motion, Biella seconded, and all voted in favor. +- Rabbi Rob will write up a description of the Vice-Chair position (roles, responsibilities, expectation and time commitments) and send it to the board for consideration. We will move to identify a person during our next + + +Meeting adjourned at 12:43 diff --git a/minutes/TPI_Board_Meeting_Minutes-2022-01-17.txt.5FA53B246DEA01A5.asc b/minutes/TPI_Board_Meeting_Minutes-2022-01-17.txt.5FA53B246DEA01A5.asc new file mode 100644 index 0000000..c05aacb --- /dev/null +++ b/minutes/TPI_Board_Meeting_Minutes-2022-01-17.txt.5FA53B246DEA01A5.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCAAdFiEEAvsEvZkfYc+iy7I2X6U7JG3qAaUFAmKYrjcACgkQX6U7JG3q +AaWZyBAA4Osmqyk4RxmcwQeT9wdk//y5kobxJWsTNnPrLsP48w5hiAUwgtqKK/Ta +Kdq7echv4yxuDBiw3MXfIrM//p1Gs1KY9cG3j1DxYkXWgJhoahIuC/Ce7g43552b +4LrXwZX6smc3+J0CGp5RWhXxU6aRxfTJqjP2dR3jX30YX0OIF+arAm4PytWOy8Sp +mnTC+Rwg0QwgdYw+QGDBKNW11Gv0ZveOennWiTZTVy7p2p++GkUxYp9ncWNrj9/l +X6gdw9Q/HISDP/AThuLiZ9GUaXshewqgVA3spi7ZfFh9I9PqNAAmS8UDCJ1V6ohT +B2oxyYuyWsaXIZgnoYAoZdlPXFyIIwnj1k5oXQEji6uWKhER1oBLMDj8xB3jv7sH +/6v155J8d9iOvoLVlBVC84sPdWzSUbFoFws23sYkiKUpMzQNZ4gqlDHDXMSwS1Da +j5QtZt2eZBSmr91bD7but3G8ngkzDgHobi4JfLw1MnKbIRZb2hhTs9MtRZksu96M +ZCZvoccpc03qS3t1WbwjKIQRfDo8tcw1/nE2OUXAtpgThbUct0BTf1XZITWHhqVt +D5OAwfbhQKksbfwmOi/5MihF+9ZfbIwwYKkJkSFwoBtPHJXV3SA2Ai8MkqaolFXx +ZTUPH+MjFqi1ZMdxNz3B+oXv101cLF09XTLUdvsk5oqbgxIW41U= +=TLre +-----END PGP SIGNATURE----- -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[bridgedb] branch main updated (a8b6e1c -> ecbbc6f)
by gitolite role 02 Jun '22

02 Jun '22

This is an automated email from the git hooks/post-receive script. meskio pushed a change to branch main in repository bridgedb. from a8b6e1c Prepare for version 0.13.2 new 46127ac Add a delay when retrying to connect to the rdsys backend new ecbbc6f fixup! Add a delay when retrying to connect to the rdsys backend The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: bridgedb/rdsys.py | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 2