- tor-commits - lists.torproject.org

[metrics-web/master] Add a robots.txt to discourage indexing database lookups.
by karsten＠torproject.org 12 Sep '11

12 Sep '11

commit 46264713a550421c358e471a1dd1c50f20a46e5f Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Mon Sep 12 08:21:42 2011 +0200 Add a robots.txt to discourage indexing database lookups. --- web/robots.txt | 12 ++++++++++++ 1 files changed, 12 insertions(+), 0 deletions(-) diff --git a/web/robots.txt b/web/robots.txt new file mode 100644 index 0000000..3b8e76e --- /dev/null +++ b/web/robots.txt @@ -0,0 +1,12 @@ +User-agent: * +Disallow: /networkstatus.html +Disallow: /routerdetail.html +Disallow: /relay.html +Disallow: /csv/ +Disallow: /serverdesc +Disallow: /extrainfodesc +Disallow: /descriptor.html +Disallow: /consensus +Disallow: /votes +Disallow: /consensus-health.html +

1 0

[tor/master] Describe rend_intro_point_t more completely
by nickm＠torproject.org 11 Sep '11

11 Sep '11

commit aa900b17ca0f25b490ed5fc6d9559b5a30fd4ea8 Author: Robert Ransom <rransom.8774(a)gmail.com> Date: Sat Sep 10 19:05:53 2011 -0400 Describe rend_intro_point_t more completely --- src/or/or.h | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/src/or/or.h b/src/or/or.h index 2e5edff..10af3d5 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -3454,7 +3454,9 @@ typedef struct rend_encoded_v2_service_descriptor_t { char *desc_str; /**< Descriptor string. */ } rend_encoded_v2_service_descriptor_t; -/** Introduction point information. */ +/** Introduction point information. Used both in rend_service_t (on + * the service side) and in rend_service_descriptor_t (on both the + * client and service side). */ typedef struct rend_intro_point_t { extend_info_t *extend_info; /**< Extend info of this introduction point. */ crypto_pk_env_t *intro_key; /**< Introduction key that replaces the service

1 0

[tor/master] Describe rend_service_descriptor_t more completely
by nickm＠torproject.org 11 Sep '11

11 Sep '11

commit 07a5cf285a3b87f9ec73f69b8821a33744853606 Author: Robert Ransom <rransom.8774(a)gmail.com> Date: Sat Sep 10 19:09:01 2011 -0400 Describe rend_service_descriptor_t more completely --- src/or/or.h | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/src/or/or.h b/src/or/or.h index 10af3d5..a2f4083 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -3463,7 +3463,8 @@ typedef struct rend_intro_point_t { * key, if this descriptor is V2. */ } rend_intro_point_t; -/** Information used to connect to a hidden service. */ +/** Information used to connect to a hidden service. Used on both the + * service side and the client side. */ typedef struct rend_service_descriptor_t { crypto_pk_env_t *pk; /**< This service's public key. */ int version; /**< Version of the descriptor format: 0 or 2. */

1 0

[tor/master] Demote 'INTRODUCE2 cell is too {old, new}' message to info level
by nickm＠torproject.org 11 Sep '11

11 Sep '11

commit 8ea6d29fe468dc91d1c7dfc45ad5b4196e89ebdd Author: Robert Ransom <rransom.8774(a)gmail.com> Date: Sat Sep 10 21:40:09 2011 -0400 Demote 'INTRODUCE2 cell is too {old,new}' message to info level --- changes/bug2442b | 8 ++++++++ src/or/rendservice.c | 4 +++- 2 files changed, 11 insertions(+), 1 deletions(-) diff --git a/changes/bug2442b b/changes/bug2442b new file mode 100644 index 0000000..02e1636 --- /dev/null +++ b/changes/bug2442b @@ -0,0 +1,8 @@ + * Minor bugfixes: + + - Demote the 'INTRODUCE2 cell is too {old,new}' log message to + info level. There is nothing that a hidden service's operator + can do to fix its clients' clocks. Bugfix on 0.2.1.6-alpha; + fixes part of bug 2442. + + diff --git a/src/or/rendservice.c b/src/or/rendservice.c index 5f55537..6ed9650 100644 --- a/src/or/rendservice.c +++ b/src/or/rendservice.c @@ -1019,7 +1019,9 @@ rend_service_introduce(origin_circuit_t *circuit, const uint8_t *request, v3_shift += 4; if ((now - ts) < -1 * REND_REPLAY_TIME_INTERVAL / 2 || (now - ts) > REND_REPLAY_TIME_INTERVAL / 2) { - log_warn(LD_REND, "INTRODUCE2 cell is too %s. Discarding.", + /* This is far more likely to mean that a client's clock is + * skewed than that a replay attack is in progress. */ + log_info(LD_REND, "INTRODUCE2 cell is too %s. Discarding.", (now - ts) < 0 ? "old" : "new"); return -1; }

1 0

[tor/master] Demote HS 'replay detected' log message for DH public keys to info level
by nickm＠torproject.org 11 Sep '11

11 Sep '11

commit b10735903b8135c9295e356ad7ea2222a339ab14 Author: Robert Ransom <rransom.8774(a)gmail.com> Date: Sat Sep 10 20:54:26 2011 -0400 Demote HS 'replay detected' log message for DH public keys to info level --- changes/bug2442 | 8 ++++++++ src/or/rendservice.c | 9 ++++++++- 2 files changed, 16 insertions(+), 1 deletions(-) diff --git a/changes/bug2442 b/changes/bug2442 new file mode 100644 index 0000000..cbcc22b --- /dev/null +++ b/changes/bug2442 @@ -0,0 +1,8 @@ + * Minor bugfixes: + + - Demote the 'replay detected' log message emitted when a hidden + service receives the same Diffie-Hellman public key in two + different INTRODUCE2 cells to info level. A normal Tor client + can cause that log message during its normal operation. Bugfix + on 0.2.1.6-alpha; fixes part of bug 2442. + diff --git a/src/or/rendservice.c b/src/or/rendservice.c index 926f380..5f55537 100644 --- a/src/or/rendservice.c +++ b/src/or/rendservice.c @@ -1123,7 +1123,14 @@ rend_service_introduce(origin_circuit_t *circuit, const uint8_t *request, * part 1. */ access_time = digestmap_get(service->accepted_intros, diffie_hellman_hash); if (access_time != NULL) { - log_warn(LD_REND, "Possible replay detected! We received an " + /* A Tor client will send a new INTRODUCE1 cell with the same rend + * cookie and DH public key as its previous one if its intro circ + * times out while in state CIRCUIT_PURPOSE_C_INTRODUCE_ACK_WAIT . + * If we received the first INTRODUCE1 cell (the intro-point relay + * converts it into an INTRODUCE2 cell), we are already trying to + * connect to that rend point (and may have already succeeded); + * drop this cell. */ + log_info(LD_REND, "We received an " "INTRODUCE2 cell with same first part of " "Diffie-Hellman handshake %d seconds ago. Dropping " "cell.",

1 0

[tor/master] Merge remote-tracking branch 'origin/maint-0.2.2'
by nickm＠torproject.org 11 Sep '11

11 Sep '11

commit 386966142ecebc23e78e57ae26323aee33d410f9 Merge: cca806c 8ea6d29 Author: Nick Mathewson <nickm(a)torproject.org> Date: Sun Sep 11 16:25:14 2011 -0400 Merge remote-tracking branch 'origin/maint-0.2.2' changes/bug2442 | 8 ++++++++ changes/bug2442b | 8 ++++++++ src/or/or.h | 7 +++++-- src/or/rendservice.c | 13 +++++++++++-- 4 files changed, 32 insertions(+), 4 deletions(-)

1 0

[tor/maint-0.2.2] Demote HS 'replay detected' log message for DH public keys to info level
by nickm＠torproject.org 11 Sep '11

11 Sep '11

commit b10735903b8135c9295e356ad7ea2222a339ab14 Author: Robert Ransom <rransom.8774(a)gmail.com> Date: Sat Sep 10 20:54:26 2011 -0400 Demote HS 'replay detected' log message for DH public keys to info level --- changes/bug2442 | 8 ++++++++ src/or/rendservice.c | 9 ++++++++- 2 files changed, 16 insertions(+), 1 deletions(-) diff --git a/changes/bug2442 b/changes/bug2442 new file mode 100644 index 0000000..cbcc22b --- /dev/null +++ b/changes/bug2442 @@ -0,0 +1,8 @@ + * Minor bugfixes: + + - Demote the 'replay detected' log message emitted when a hidden + service receives the same Diffie-Hellman public key in two + different INTRODUCE2 cells to info level. A normal Tor client + can cause that log message during its normal operation. Bugfix + on 0.2.1.6-alpha; fixes part of bug 2442. + diff --git a/src/or/rendservice.c b/src/or/rendservice.c index 926f380..5f55537 100644 --- a/src/or/rendservice.c +++ b/src/or/rendservice.c @@ -1123,7 +1123,14 @@ rend_service_introduce(origin_circuit_t *circuit, const uint8_t *request, * part 1. */ access_time = digestmap_get(service->accepted_intros, diffie_hellman_hash); if (access_time != NULL) { - log_warn(LD_REND, "Possible replay detected! We received an " + /* A Tor client will send a new INTRODUCE1 cell with the same rend + * cookie and DH public key as its previous one if its intro circ + * times out while in state CIRCUIT_PURPOSE_C_INTRODUCE_ACK_WAIT . + * If we received the first INTRODUCE1 cell (the intro-point relay + * converts it into an INTRODUCE2 cell), we are already trying to + * connect to that rend point (and may have already succeeded); + * drop this cell. */ + log_info(LD_REND, "We received an " "INTRODUCE2 cell with same first part of " "Diffie-Hellman handshake %d seconds ago. Dropping " "cell.",

1 0

[tor/maint-0.2.2] Demote 'INTRODUCE2 cell is too {old, new}' message to info level
by nickm＠torproject.org 11 Sep '11

11 Sep '11

commit 8ea6d29fe468dc91d1c7dfc45ad5b4196e89ebdd Author: Robert Ransom <rransom.8774(a)gmail.com> Date: Sat Sep 10 21:40:09 2011 -0400 Demote 'INTRODUCE2 cell is too {old,new}' message to info level --- changes/bug2442b | 8 ++++++++ src/or/rendservice.c | 4 +++- 2 files changed, 11 insertions(+), 1 deletions(-) diff --git a/changes/bug2442b b/changes/bug2442b new file mode 100644 index 0000000..02e1636 --- /dev/null +++ b/changes/bug2442b @@ -0,0 +1,8 @@ + * Minor bugfixes: + + - Demote the 'INTRODUCE2 cell is too {old,new}' log message to + info level. There is nothing that a hidden service's operator + can do to fix its clients' clocks. Bugfix on 0.2.1.6-alpha; + fixes part of bug 2442. + + diff --git a/src/or/rendservice.c b/src/or/rendservice.c index 5f55537..6ed9650 100644 --- a/src/or/rendservice.c +++ b/src/or/rendservice.c @@ -1019,7 +1019,9 @@ rend_service_introduce(origin_circuit_t *circuit, const uint8_t *request, v3_shift += 4; if ((now - ts) < -1 * REND_REPLAY_TIME_INTERVAL / 2 || (now - ts) > REND_REPLAY_TIME_INTERVAL / 2) { - log_warn(LD_REND, "INTRODUCE2 cell is too %s. Discarding.", + /* This is far more likely to mean that a client's clock is + * skewed than that a replay attack is in progress. */ + log_info(LD_REND, "INTRODUCE2 cell is too %s. Discarding.", (now - ts) < 0 ? "old" : "new"); return -1; }

1 0

[tor/maint-0.2.2] Fix log message typo.
by nickm＠torproject.org 11 Sep '11

11 Sep '11

commit c621e528833aaf871b81d21afa7495f84cbdd66b Author: Robert Ransom <rransom.8774(a)gmail.com> Date: Sat Sep 10 16:15:52 2011 -0400 Fix log message typo. --- changes/typo-fix-ohkah8Ah | 9 +++++++++ src/or/rendservice.c | 2 +- 2 files changed, 10 insertions(+), 1 deletions(-) diff --git a/changes/typo-fix-ohkah8Ah b/changes/typo-fix-ohkah8Ah new file mode 100644 index 0000000..9b4e5c0 --- /dev/null +++ b/changes/typo-fix-ohkah8Ah @@ -0,0 +1,9 @@ + * Minor bugfixes: + + - Clarify a log message specifying the characters permitted in + HiddenServiceAuthorizeClient client names. Previously, the log + message said that "[A-Za-z0-9+-_]" were permitted; that could + have given the impression that every ASCII character between "+" + and "_" was permitted. Now we say "[A-Za-z0-9+_-]". Bugfix on + 0.2.1.5-alpha. + diff --git a/src/or/rendservice.c b/src/or/rendservice.c index 681c4b8..926f380 100644 --- a/src/or/rendservice.c +++ b/src/or/rendservice.c @@ -409,7 +409,7 @@ rend_config_services(or_options_t *options, int validate_only) if (strspn(client_name, REND_LEGAL_CLIENTNAME_CHARACTERS) != len) { log_warn(LD_CONFIG, "HiddenServiceAuthorizeClient contains an " "illegal client name: '%s'. Valid " - "characters are [A-Za-z0-9+-_].", + "characters are [A-Za-z0-9+_-].", client_name); SMARTLIST_FOREACH(clients, char *, cp, tor_free(cp)); smartlist_free(clients);

1 0

[tor/maint-0.2.2] Describe rend_intro_point_t more completely
by nickm＠torproject.org 11 Sep '11

11 Sep '11

commit aa900b17ca0f25b490ed5fc6d9559b5a30fd4ea8 Author: Robert Ransom <rransom.8774(a)gmail.com> Date: Sat Sep 10 19:05:53 2011 -0400 Describe rend_intro_point_t more completely --- src/or/or.h | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/src/or/or.h b/src/or/or.h index 2e5edff..10af3d5 100644 --- a/src/or/or.h +++ b/src/or/or.h @@ -3454,7 +3454,9 @@ typedef struct rend_encoded_v2_service_descriptor_t { char *desc_str; /**< Descriptor string. */ } rend_encoded_v2_service_descriptor_t; -/** Introduction point information. */ +/** Introduction point information. Used both in rend_service_t (on + * the service side) and in rend_service_descriptor_t (on both the + * client and service side). */ typedef struct rend_intro_point_t { extend_info_t *extend_info; /**< Extend info of this introduction point. */ crypto_pk_env_t *intro_key; /**< Introduction key that replaces the service

1 0