- tor-commits - lists.torproject.org

[gettor/develop] Add file for fetching latest Orfox version
by sukhbir＠torproject.org 28 Feb '16

28 Feb '16

commit ab66a2c7b58ad3415335c33d0651e7d0dd01f2c9 Author: Sukhbir Singh <sukhbir(a)torproject.org> Date: Sat Feb 27 11:01:19 2016 -0500 Add file for fetching latest Orfox version --- orfox.py | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/orfox.py b/orfox.py new file mode 100644 index 0000000..eb2ee4b --- /dev/null +++ b/orfox.py @@ -0,0 +1,15 @@ +import urllib2 +import xml.etree.ElementTree as ET + +URL = "https://guardianproject.info/fdroid/repo/index.xml" +PACKAGE = "https://guardianproject.info/fdroid/repo/" + +PATH = ".//application[13]/package/" + +def orfox_data(): + tree = ET.fromstring(urllib2.urlopen(URL).read()) + + package_name = PACKAGE + tree.find(PATH + "apkname").text + package_version = tree.find(PATH + "version").text.rsplit("-")[-1] + + return package_name, package_version

1 0

[tor/master] Merge branch 'bug18392'
by nickm＠torproject.org 27 Feb '16

27 Feb '16

commit 0a276947ba6a04d303f59630b744045459d94504 Merge: 3687526 7255b11 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sat Feb 27 10:17:51 2016 +0100 Merge branch 'bug18392' src/common/util.c | 49 ++++++++++++++++++++++++++++++++++++++----------- 1 file changed, 38 insertions(+), 11 deletions(-)

1 0

[tor/master] Fix check_private_dir() to work on Windows again.
by nickm＠torproject.org 27 Feb '16

27 Feb '16

commit 7255b1121d8cdba4427c86a63bada1c07edc45be Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Feb 25 13:31:28 2016 -0500 Fix check_private_dir() to work on Windows again. On windows, you cannot open() a directory. So for Windows we should just take our previous stat-based approach. Closes bug 18392; bug not in any released Tor. --- src/common/util.c | 49 ++++++++++++++++++++++++++++++++++++++----------- 1 file changed, 38 insertions(+), 11 deletions(-) diff --git a/src/common/util.c b/src/common/util.c index 488f1b6..5713235 100644 --- a/src/common/util.c +++ b/src/common/util.c @@ -2059,15 +2059,14 @@ check_private_dir(const char *dirname, cpd_check_t check, int fd; int r; struct stat st; - //char *f; + + tor_assert(dirname); + #ifndef _WIN32 unsigned unwanted_bits = 0; const struct passwd *pw = NULL; uid_t running_uid; gid_t running_gid; -#else - (void)effective_user; -#endif /* * Goal is to harden the implementation by removing any @@ -2078,7 +2077,6 @@ check_private_dir(const char *dirname, cpd_check_t check, * Several suggestions taken from: * https://developer.apple.com/library/mac/documentation/Security/Conceptual/S… */ - tor_assert(dirname); /* Open directory. * O_NOFOLLOW to ensure that it does not follow symbolic links */ @@ -2099,15 +2097,11 @@ check_private_dir(const char *dirname, cpd_check_t check, /* Should we create the directory? */ if (check & CPD_CREATE) { log_info(LD_GENERAL, "Creating directory %s", dirname); -#if defined (_WIN32) - r = mkdir(dirname); -#else if (check & CPD_GROUP_READ) { r = mkdir(dirname, 0750); } else { r = mkdir(dirname, 0700); } -#endif /* check for mkdir() error */ if (r) { @@ -2153,7 +2147,6 @@ check_private_dir(const char *dirname, cpd_check_t check, return -1; } -#ifndef _WIN32 if (effective_user) { /* Look up the user and group information. * If we have a problem, bail out. */ @@ -2234,8 +2227,42 @@ check_private_dir(const char *dirname, cpd_check_t check, return 0; } } -#endif close(fd); +#else + /* Win32 case: we can't open() a directory. */ + (void)effective_user; + + char *f = tor_strdup(dirname); + clean_name_for_stat(f); + log_debug(LD_FS, "stat()ing %s", f); + r = stat(sandbox_intern_string(f), &st); + tor_free(f); + if (r) { + if (errno != ENOENT) { + log_warn(LD_FS, "Directory %s cannot be read: %s", dirname, + strerror(errno)); + return -1; + } + if (check & CPD_CREATE) { + log_info(LD_GENERAL, "Creating directory %s", dirname); + r = mkdir(dirname); + if (r) { + log_warn(LD_FS, "Error creating directory %s: %s", dirname, + strerror(errno)); + return -1; + } + } else if (!(check & CPD_CHECK)) { + log_warn(LD_FS, "Directory %s does not exist.", dirname); + return -1; + } + return 0; + } + if (!(st.st_mode & S_IFDIR)) { + log_warn(LD_FS, "%s is not a directory", dirname); + return -1; + } + +#endif return 0; }

1 0

[tor/master] Fix an unused-variable warning
by nickm＠torproject.org 27 Feb '16

27 Feb '16

commit d5cbc21ad1138bb40e636851042a686784e7d786 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sat Feb 27 10:20:15 2016 +0100 Fix an unused-variable warning --- src/common/util.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/common/util.c b/src/common/util.c index 5713235..2bb2c2b 100644 --- a/src/common/util.c +++ b/src/common/util.c @@ -2056,13 +2056,13 @@ int check_private_dir(const char *dirname, cpd_check_t check, const char *effective_user) { - int fd; int r; struct stat st; tor_assert(dirname); #ifndef _WIN32 + int fd; unsigned unwanted_bits = 0; const struct passwd *pw = NULL; uid_t running_uid;

1 0

[translation/mat-gui_completed] Update translations for mat-gui_completed
by translation＠torproject.org 27 Feb '16

27 Feb '16

commit 4c735e7c89bf40944d43e61af5b3644ac16e4e03 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Feb 27 06:45:35 2016 +0000 Update translations for mat-gui_completed --- eu.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/eu.po b/eu.po index 741d341..8e772bd 100644 --- a/eu.po +++ b/eu.po @@ -11,7 +11,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2016-02-10 23:06+0100\n" -"PO-Revision-Date: 2016-02-26 20:05+0000\n" +"PO-Revision-Date: 2016-02-27 06:41+0000\n" "Last-Translator: Antxon Baldarra <baldarra(a)bitmessage.ch>\n" "Language-Team: Basque (http://www.transifex.com/otf/torproject/language/eu/)\n" "MIME-Version: 1.0\n"

1 0

[translation/mat-gui] Update translations for mat-gui
by translation＠torproject.org 27 Feb '16

27 Feb '16

commit 360455bbc13385748f47fd4c432adc708123d6c5 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Feb 27 06:45:30 2016 +0000 Update translations for mat-gui --- eu.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/eu.po b/eu.po index 741d341..8e772bd 100644 --- a/eu.po +++ b/eu.po @@ -11,7 +11,7 @@ msgstr "" "Project-Id-Version: The Tor Project\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2016-02-10 23:06+0100\n" -"PO-Revision-Date: 2016-02-26 20:05+0000\n" +"PO-Revision-Date: 2016-02-27 06:41+0000\n" "Last-Translator: Antxon Baldarra <baldarra(a)bitmessage.ch>\n" "Language-Team: Basque (http://www.transifex.com/otf/torproject/language/eu/)\n" "MIME-Version: 1.0\n"

1 0

[webwml/master] ... without breaking the script
by sebastian＠torproject.org 27 Feb '16

27 Feb '16

commit 7249d28fce4ce09e8871da740fb90529fde78b23 Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Sat Feb 27 07:37:53 2016 +0100 ... without breaking the script --- docs/en/debian.wml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/en/debian.wml b/docs/en/debian.wml index 87c4fd6..a5a97c1 100644 --- a/docs/en/debian.wml +++ b/docs/en/debian.wml @@ -19,7 +19,7 @@ var software = { 'lucid': [ 'lucid'], 'precise': [ 'precise'], 'saucy': [ 'saucy'], - 'trusty': [ 'trusty'], + 'trusty': [ 'trusty'], }, 'experimental-0.2.7.x': { 'wheezy': [ 'wheezy' ], 'jessie': [ 'jessie' ], 'stretch': [ 'stretch' ], @@ -27,7 +27,7 @@ var software = { 'lucid': [ 'lucid'], 'precise': [ 'precise'], 'saucy': [ 'saucy'], - 'trusty': [ 'trusty'], + 'trusty': [ 'trusty'], }, }, 'tor (from source)': { '_stable': { 'squeeze': [ 'squeeze' ], 'wheezy': [ 'wheezy' ], @@ -37,7 +37,7 @@ var software = { 'lucid': [ 'lucid'], 'precise': [ 'precise'], 'saucy': [ 'saucy'], - 'trusty': [ 'trusty'], + 'trusty': [ 'trusty'], }, 'experimental-0.2.7.x': { 'wheezy': [ 'wheezy' ], 'jessie': [ 'jessie' ], 'stretch': [ 'stretch' ], @@ -45,7 +45,7 @@ var software = { 'lucid': [ 'lucid'], 'precise': [ 'precise'], 'saucy': [ 'saucy'], - 'trusty': [ 'trusty'], + 'trusty': [ 'trusty'], }, }, };

1 0

[webwml/master] add ed255 docs to the FAQ (#17021)
by sebastian＠torproject.org 27 Feb '16

27 Feb '16

commit 9b92b660218a8f02bfd32170ecd6a3de3198eade Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Sat Feb 27 06:45:40 2016 +0100 add ed255 docs to the FAQ (#17021) Wording mostly s7r's from the ticket. --- docs/en/faq.wml | 74 +++++++++++++++++++++++++++++++++++++++++++++++++++++---- 1 file changed, 70 insertions(+), 4 deletions(-) diff --git a/docs/en/faq.wml b/docs/en/faq.wml index 2fe5d7d..4c082db 100644 --- a/docs/en/faq.wml +++ b/docs/en/faq.wml @@ -188,6 +188,8 @@ be?</a></li> relay?</a></li> <li><a href="#UpgradeOrMove">I want to upgrade/move my relay. How do I keep the same key?</a></li> + <li><a href="#OfflineED25519">How do offline ed25519 identity keys work? + What do I need to know?</a></li> <li><a href="#MultipleRelays">I want to run more than one relay.</a></li> <li><a href="#NTService">How do I run my Tor relay as an NT service? @@ -2733,19 +2735,83 @@ lots How do I keep the same key?</a></h3> <p> - When upgrading your Tor relay, or running it on a different computer, - the important part is to keep the same identity key (stored in - "keys/secret_id_key" in your DataDirectory). +When upgrading your Tor relay, or moving it on a different computer, the +important part is to keep the same identity keys (stored in +"keys/ed25519_master_id_secret_key" and "keys/secret_id_key" in your +DataDirectory). Keeping backups of the identity keys so you can restore +a relay in the future is the recommended way to ensure the reputation of +the relay won't be wasted. </p> + <p> This means that if you're upgrading your Tor relay and you keep the same torrc and the same DataDirectory, then the upgrade should just work and your relay will keep using the same key. If you need to pick a new -DataDirectory, be sure to copy your old keys/secret_id_key over. +DataDirectory, be sure to copy your old +keys/ed25519_master_id_secret_key and keys/secret_id_key over. +</p> + +<p> +Note: As of Tor 0.2.7 we are using new generation identities for relays +based on ed25519 elliptic curve cryptography. Eventually they will +replace the old RSA identities, but that will happen in time, to ensure +compatibility with older versions. Until then, each relay will have both +an ed25519 identity (identity key file: +keys/ed25519_master_id_secret_key) and a RSA identity (identity key +file: keys/secret_id_key). You need to copy / backup both of them in +order to restore your relay, change your DataDirectory or migrate the +relay on a new computer. </p> + <hr> +<a id="OfflineED25519"></a> +<h3><a class="anchor" href="#OfflineED25519">How do offline ed25519 +identity keys work? What do I need to know?</a></h3> + +<p> +As of Tor 0.2.7 offline ed25519 identity keys are supported. In simple words, it works like this: +<ul> +<li>there is a master ed25519 identity secret key file named +"ed25519_master_id_secret_key". This is the most important one, so make +sure you keep a backup in a secure place - the file is sensitive and +should be protected. Tor could encrypt it for you if you generate it +manually and enter a password when asked.</li> + +<li>a medium term signing key named "ed25519_signing_secret_key" is +generated for Tor to use. Also, a certificate is generated named +"ed25519_signing_cert" which is signed by the master identity secret key +and confirms that the medium term signing key is valid for a certain +period of time. The default validity is 30 days, but this can be +customized by setting "SigningKeyLifetime N days|weeks|months" in +torrc.</li> +<li>there is also a master public key named +"ed25519_master_id_public_key, which is the actual identity of the relay +advertised in the network. This one is not sensitive and can be easily +computed from "ed5519_master_id_secret_key".</li> +</ul> +Tor will only need access to the medium term signing key and certificate +as long as they are valid, so the master identity secret key can be kept +outside DataDirectory/keys, on a storage media or a different computer. +You'll have to manually renew the medium term signing key and +certificate before they expire otherwise the Tor process on the relay +will exit upon expiration. +</p> + +<p> +This feature is optional, you don't need to use it unless you want to. +If you want your relay to run unattended for longer time without having +to manually do the medium term signing key renewal on regular basis, +best to leave the master identity secret key in DataDirectory/keys, just +make a backup in case you'll need to reinstall it. If you want to use +this feature, you can consult our <a +href="https://trac.torproject.org/projects/tor/wiki/doc/TorRelaySecurity/OfflineK…">more +detailed guide</a> on the topic. +</p> + +<hr> + <a id="NTService"></a> <h3><a class="anchor" href="#NTService">How do I run my Tor relay as an NT service?</a></h3>

1 0

[webwml/master] remove utopic from supported .deb versions
by sebastian＠torproject.org 27 Feb '16

27 Feb '16

commit e63a653aaf526dd0d23ebc149654a4f47a3d33d6 Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Sat Feb 27 07:36:28 2016 +0100 remove utopic from supported .deb versions --- docs/en/debian.wml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/docs/en/debian.wml b/docs/en/debian.wml index e1e7bcc..87c4fd6 100644 --- a/docs/en/debian.wml +++ b/docs/en/debian.wml @@ -20,7 +20,6 @@ var software = { 'precise': [ 'precise'], 'saucy': [ 'saucy'], 'trusty': [ 'trusty'], - 'utopic': [ 'utopic'] }, 'experimental-0.2.7.x': { 'wheezy': [ 'wheezy' ], 'jessie': [ 'jessie' ], 'stretch': [ 'stretch' ], @@ -29,7 +28,6 @@ var software = { 'precise': [ 'precise'], 'saucy': [ 'saucy'], 'trusty': [ 'trusty'], - 'utopic': [ 'utopic'] }, }, 'tor (from source)': { '_stable': { 'squeeze': [ 'squeeze' ], 'wheezy': [ 'wheezy' ], @@ -40,7 +38,6 @@ var software = { 'precise': [ 'precise'], 'saucy': [ 'saucy'], 'trusty': [ 'trusty'], - 'utopic': [ 'utopic'] }, 'experimental-0.2.7.x': { 'wheezy': [ 'wheezy' ], 'jessie': [ 'jessie' ], 'stretch': [ 'stretch' ], @@ -49,7 +46,6 @@ var software = { 'precise': [ 'precise'], 'saucy': [ 'saucy'], 'trusty': [ 'trusty'], - 'utopic': [ 'utopic'] }, }, }; @@ -238,7 +234,6 @@ I run <option value="precise">Ubuntu Precise Pangolin</option> <option value="saucy">Ubuntu Saucy Salamander</option> <option value="trusty">Ubuntu Trusty Tahr</option> -<option value="utopic">Ubuntu Utopic Unicorn</option> </select> and want <select id="package" onchange="update()"></select>

1 0

[translation/torbutton-brandproperties_completed] Update translations for torbutton-brandproperties_completed
by translation＠torproject.org 27 Feb '16

27 Feb '16

commit 2fcc8ef856cb092566f1f46ff8e7761543531663 Author: Translation commit bot <translation(a)torproject.org> Date: Sat Feb 27 05:46:17 2016 +0000 Update translations for torbutton-brandproperties_completed --- zh_TW/brand.properties | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/zh_TW/brand.properties b/zh_TW/brand.properties index d8cb6c3..dfc06d7 100644 --- a/zh_TW/brand.properties +++ b/zh_TW/brand.properties @@ -2,10 +2,10 @@ # License, v. 2.0. If a copy of the MPL was not distributed with this # file, You can obtain one at http://mozilla.org/MPL/2.0/. -brandShorterName=Tor 瀏覽器 -brandShortName=Tor -brandFullName=Tor 瀏覽器 -vendorShortName=Tor +brandShorterName=洋蔥路由瀏覽器 +brandShortName=洋蔥路由瀏覽器 +brandFullName=洋蔥路由瀏覽器 +vendorShortName=Tor 計畫 homePageSingleStartMain=Firefox Start:包含內建搜尋的快速首頁 homePageImport=從 %S 匯入您的首頁

1 0