March 2023 - tor-commits - lists.torproject.org

[tor] branch main updated: Reworded OpenSSL bug 7712 detection warning to avoid OpenSSL 1.1.1b detection false positive.
by gitolite role 07 Mar '23

07 Mar '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository tor. The following commit(s) were added to refs/heads/main by this push: new c71f31dccc Reworded OpenSSL bug 7712 detection warning to avoid OpenSSL 1.1.1b detection false positive. new 85f5318f7f Merge branch 'tor-gitlab/mr/696' c71f31dccc is described below commit c71f31dccca9f0e82d1f0a6bb17ed1926a6a054a Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Thu Feb 16 13:27:30 2023 +0000 Reworded OpenSSL bug 7712 detection warning to avoid OpenSSL 1.1.1b detection false positive. --- src/lib/tls/tortls_openssl.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/lib/tls/tortls_openssl.c b/src/lib/tls/tortls_openssl.c index 77de2d6a11..12260c09d3 100644 --- a/src/lib/tls/tortls_openssl.c +++ b/src/lib/tls/tortls_openssl.c @@ -1734,8 +1734,7 @@ tor_tls_export_key_material,(tor_tls_t *tls, uint8_t *secrets_out, * issue 7712. */ openssl_bug_7712_is_present = 1; log_warn(LD_GENERAL, "Detected OpenSSL bug 7712: disabling TLS 1.3 on " - "future connections. A fix is expected to appear in OpenSSL " - "1.1.1b."); + "future connections."); } } if (openssl_bug_7712_is_present) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[torspec] branch main updated (29fbf57 -> 99a5803)
by gitolite role 07 Mar '23

07 Mar '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository torspec. from 29fbf57 a few more grammar / whitespace fixes new ba581c9 Clarify that ESTABLISH_INTRO signature doesn't cover SIG_LEN. new 85c2b70 rend-spec-v3 ESTABLISH_INTRO: Actually name which key AUTH_KEY is new 99a5803 Merge branch 'tor-gitlab/mr/118' The 3 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: rend-spec-v3.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 3

[tor] branch release-0.4.7 updated (0b38e2e75a -> 322c1ed8fb)
by gitolite role 07 Mar '23

07 Mar '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch release-0.4.7 in repository tor. from 0b38e2e75a Merge branch 'maint-0.4.7' into release-0.4.7 new 36612b9bf8 vote AuthDirMaxServersPerAddr in consensus params new 322c1ed8fb Merge branch 'maint-0.4.7' into release-0.4.7 The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: changes/ticket40753 | 5 +++++ src/feature/dirauth/dirvote.c | 8 ++++++++ 2 files changed, 13 insertions(+) create mode 100644 changes/ticket40753 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 1

[tor] branch maint-0.4.7 updated (21b3397f9b -> 36612b9bf8)
by gitolite role 07 Mar '23

07 Mar '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch maint-0.4.7 in repository tor. from 21b3397f9b metrics: Decrement hs_intro_established_count on intro circuit close. new 36612b9bf8 vote AuthDirMaxServersPerAddr in consensus params The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: changes/ticket40753 | 5 +++++ src/feature/dirauth/dirvote.c | 8 ++++++++ 2 files changed, 13 insertions(+) create mode 100644 changes/ticket40753 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch main updated: vote AuthDirMaxServersPerAddr in consensus params
by gitolite role 07 Mar '23

07 Mar '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository tor. The following commit(s) were added to refs/heads/main by this push: new 36612b9bf8 vote AuthDirMaxServersPerAddr in consensus params new 73eab76e6d Merge branch 'maint-0.4.7' 36612b9bf8 is described below commit 36612b9bf8f432ccfc5fc637dd86463b84ab4882 Author: Roger Dingledine <arma(a)torproject.org> AuthorDate: Sun Feb 12 15:50:55 2023 -0500 vote AuthDirMaxServersPerAddr in consensus params Directory authorities now include their AuthDirMaxServersPerAddr config option in the consensus parameter section of their vote. Now external tools can better predict how they will behave. In particular, the value should make its way to the https://consensus-health.torproject.org/#consensusparams page. Once enough dir auths vote this param, they should also compute a consensus value for it in the consensus document. Nothing uses this consensus value yet, but we could imagine having dir auths consult it in the future. Implements ticket 40753. --- changes/ticket40753 | 5 +++++ src/feature/dirauth/dirvote.c | 8 ++++++++ 2 files changed, 13 insertions(+) diff --git a/changes/ticket40753 b/changes/ticket40753 new file mode 100644 index 0000000000..c5dc76b006 --- /dev/null +++ b/changes/ticket40753 @@ -0,0 +1,5 @@ + o Minor features (directory authorities): + - Directory authorities now include their AuthDirMaxServersPerAddr + config option in the consensus parameter section of their vote. Now + external tools can better predict how they will behave. Implements + ticket 40753. diff --git a/src/feature/dirauth/dirvote.c b/src/feature/dirauth/dirvote.c index 1bb4fd7de1..0591125d51 100644 --- a/src/feature/dirauth/dirvote.c +++ b/src/feature/dirauth/dirvote.c @@ -4878,6 +4878,14 @@ dirserv_generate_networkstatus_vote_obj(crypto_pk_t *private_key, smartlist_split_string(v3_out->net_params, paramline->value, NULL, 0, 0); } + + /* for transparency and visibility, include our current value of + * AuthDirMaxServersPerAddr in our consensus params. Once enough dir + * auths do this, external tools should be able to use that value to + * help understand which relays are allowed into the consensus. */ + smartlist_add_asprintf(v3_out->net_params, "AuthDirMaxServersPerAddr=%d", + d_options->AuthDirMaxServersPerAddr); + smartlist_sort_strings(v3_out->net_params); } v3_out->bw_file_headers = bw_file_headers; -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[bridgedb] branch main updated (ce9f631 -> d43d0ff)
by gitolite role 07 Mar '23

07 Mar '23

This is an automated email from the git hooks/post-receive script. meskio pushed a change to branch main in repository bridgedb. from ce9f631 Remove bridge fingerprint from sortedKeys as well as map add d43d0ff Add changelog entry for version 0.15 No new revisions were added by this update. Summary of changes: CHANGELOG | 11 +++++++++++ 1 file changed, 11 insertions(+) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[bridgedb] annotated tag bridgedb-0.15.0 created (now 1f1e142)
by gitolite role 07 Mar '23

07 Mar '23

This is an automated email from the git hooks/post-receive script. meskio pushed a change to annotated tag bridgedb-0.15.0 in repository bridgedb. at 1f1e142 (tag) tagging d43d0ff416ccf45850040d1841a1d8d27d28fd59 (commit) replaces bridgedb-0.14.0 by meskio on Tue Mar 7 12:19:26 2023 +0100 - Log ----------------------------------------------------------------- Release BridgeDB version 0.15.0 -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEs7M6f/ZpXzXMAQR+Urj1rJei2oYFAmQHHesACgkQUrj1rJei 2oY9YQ/9FvmXhECwBKTkjzkS+oXI8pojx5dqIOIvAd51EyrkNcg0pHJo4gXRi7SQ 1qlbChzVHTlO50OnBgaPHTn02H13RhCc4kChHq/SFPWCkwGD/6PckdNpxJr7dDjH qQMpde11wq72x1HFjPOUaJ8moTLzruUeNOUXP4J7k/sqOUbKZ4Yxtau1Lyz9E2jE fwLyk+Q0cZxUzcbaKVpFq4vAToGwa4rqwMCpGt2wjFkru7AT1o0giA3AuN9R26VZ NXsUQVXra3Z678IrWLabyyhBIciQdBgxVXBRvwd5t4Gbyr5D2+cUr++PMRKpIm/5 PxQVduSBeVphCY5dfE/Ldf4e4A8LaBQA8xTnQjNYiDoThZyrUpDRNlTO1SiVah1v jzzPkw4gb5SBqW42Z4fLGYg7taaNmLLLZjaJ2A++XgBraCuXYy6BhD2pfboi7WqF 63qhvUOKR9gtJRkcqfQznPf3Aw1P7fq5b+YHqzBIQGe5FDvXPtahUhUBtX2rDECB EYXfPHvwLrLRGf+DWKdqyYdWLseMouzH5RQHmSD/wZIjwrO69qR6UQS8/x2XWCHa E7kfmvDvh5ukOoyimTcEPKNNbKZKArWgYSznAJia0jrX4nT78pB9jKqPNFhLmV/o BprEPRc2h54Oi18bfVvfY9lTLoSE4LXu8uE5CBRN3HXVwSTaTLc= =L3iM -----END PGP SIGNATURE----- ----------------------------------------------------------------------- This annotated tag includes the following new commits: new d43d0ff Add changelog entry for version 0.15 The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 1

[bridgedb] branch main updated: Remove bridge fingerprint from sortedKeys as well as map
by gitolite role 07 Mar '23

07 Mar '23

This is an automated email from the git hooks/post-receive script. meskio pushed a commit to branch main in repository bridgedb. The following commit(s) were added to refs/heads/main by this push: new ce9f631 Remove bridge fingerprint from sortedKeys as well as map ce9f631 is described below commit ce9f6318b00989e7c6834f1fbce4d86fd9156aa9 Author: Cecylia Bocovich <cohosh(a)torproject.org> AuthorDate: Fri Feb 17 14:24:44 2023 -0500 Remove bridge fingerprint from sortedKeys as well as map --- bridgedb/bridgerings.py | 2 ++ bridgedb/test/test_bridgerings.py | 14 ++++++++++++++ 2 files changed, 16 insertions(+) diff --git a/bridgedb/bridgerings.py b/bridgedb/bridgerings.py index ebbaa9b..73f8702 100644 --- a/bridgedb/bridgerings.py +++ b/bridgedb/bridgerings.py @@ -187,6 +187,8 @@ class BridgeRing(object): pos = self.hmac(bridge.identity) if pos in self.bridges: del self.bridges[pos] + if pos in self.sortedKeys: + self.sortedKeys.remove(pos) def insert(self, bridge): """Add a **bridge** to this hashring. diff --git a/bridgedb/test/test_bridgerings.py b/bridgedb/test/test_bridgerings.py index 7c899ab..c8391ff 100644 --- a/bridgedb/test/test_bridgerings.py +++ b/bridgedb/test/test_bridgerings.py @@ -87,6 +87,20 @@ class BridgeRingTests(unittest.TestCase): self.assertGreaterEqual(len(bridges), 1) + def test_remove(self): + """Remove should remove the bridge from the map and sortedKeys""" + bridges = copy.deepcopy(util.generateFakeBridges()) + + [self.ring.insert(bridge) for bridge in bridges] + pos0 = self.ring.hmac(bridges[0].identity) + pos1 = self.ring.hmac(bridges[1].identity) + + self.ring.remove(bridges[0]) + self.assertIn(pos1, self.ring.sortedKeys) + self.assertNotIn(pos0, self.ring.sortedKeys) + self.assertIn(pos1, self.ring.bridges) + self.assertNotIn(pos0, self.ring.bridges) + def test_clear(self): """Clear should get rid of all the inserted bridges.""" self.addRandomBridges() -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.8.0esr-12.5-1] fixup! Bug 41089: Add tor-browser build scripts + Makefile to tor-browser
by Pier Angelo Vendrame (＠pierov) 06 Mar '23

06 Mar '23

Pier Angelo Vendrame pushed to branch tor-browser-102.8.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: f1ea47b4 by Dan Ballard at 2023-03-06T13:47:51+00:00 fixup! Bug 41089: Add tor-browser build scripts + Makefile to tor-browser update 'make run' to process optional parameter ARGS="..." - - - - - 1 changed file: - tools/torbrowser/Makefile Changes: ===================================== tools/torbrowser/Makefile ===================================== @@ -34,7 +34,7 @@ fat-aar: all: build deploy run: - $(BINARIES)/dev/Browser/start-tor-browser -v + $(BINARIES)/dev/Browser/start-tor-browser -v $(ARGS) jslint: ./jslint.sh $(DEV_ROOT) $(JS) View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f1ea47b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f1ea47b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40801: Correct the ExecShell open path on the Windows system-wide installer
by Pier Angelo Vendrame (＠pierov) 06 Mar '23

06 Mar '23

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: fffda1fd by Pier Angelo Vendrame at 2023-03-06T10:21:29+01:00 Bug 40801: Correct the ExecShell open path on the Windows system-wide installer - - - - - 1 changed file: - projects/browser/windows-installer.nsi Changes: ===================================== projects/browser/windows-installer.nsi ===================================== @@ -240,6 +240,9 @@ ${EndIf} FunctionEnd Function StartBrowser -ExecShell "open" "$INSTDIR/Start [% c('var/Project_Name') %].lnk" +[% IF !system_install_mode -%] + ExecShell "open" "$INSTDIR/Start [% c('var/Project_Name') %].lnk" +[% ELSE -%] + ExecShell "open" "$INSTDIR/[% c('var/exe_name') %].exe" +[% END -%] FunctionEnd - View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… You're receiving this email because of your account on gitlab.torproject.org.

1 0