- tor-commits - lists.torproject.org

[tor/maint-0.2.2] Oops; that function got renamed.
by nickm＠torproject.org 17 May '11

17 May '11

commit 2e07925a5285fd50626e853c48ab5b79eec8e933 Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue May 17 19:45:05 2011 -0400 Oops; that function got renamed. --- src/or/routerparse.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/or/routerparse.c b/src/or/routerparse.c index 57436f7..ce98a47 100644 --- a/src/or/routerparse.c +++ b/src/or/routerparse.c @@ -4336,7 +4336,7 @@ microdescs_parse_from_string(const char *s, const char *eos, } tok = find_by_keyword(tokens, K_ONION_KEY); - if (!crypto_pk_check_key_public_exponent(tok->key)) { + if (!crypto_pk_public_exponent_ok(tok->key)) { log_warn(LD_DIR, "Relay's onion key had invalid exponent."); goto next;

1 0

[tor/maint-0.2.2] Check onion keys in microdescriptors, too
by nickm＠torproject.org 17 May '11

17 May '11

commit 480a75cbbd8067b32b2954303ca69401bfee58d9 Author: Robert Ransom <rransom.8774(a)gmail.com> Date: Thu Apr 28 15:16:54 2011 -0700 Check onion keys in microdescriptors, too --- changes/bug3207 | 4 ++++ src/or/routerparse.c | 5 +++++ 2 files changed, 9 insertions(+), 0 deletions(-) diff --git a/changes/bug3207 b/changes/bug3207 new file mode 100644 index 0000000..65a7dac --- /dev/null +++ b/changes/bug3207 @@ -0,0 +1,4 @@ + o Minor bugfixes: + - Require that onion keys have exponent 65537 in microdescriptors too. + Fixes part of bug 3207; bugfix on 0.2.2.25-alpha + diff --git a/src/or/routerparse.c b/src/or/routerparse.c index be7a3fe..57436f7 100644 --- a/src/or/routerparse.c +++ b/src/or/routerparse.c @@ -4336,6 +4336,11 @@ microdescs_parse_from_string(const char *s, const char *eos, } tok = find_by_keyword(tokens, K_ONION_KEY); + if (!crypto_pk_check_key_public_exponent(tok->key)) { + log_warn(LD_DIR, + "Relay's onion key had invalid exponent."); + goto next; + } md->onion_pkey = tok->key; tok->key = NULL;

1 0

r24767: {website} Update version-alpha string to 0.2.2.26-beta (website/trunk/include)
by Sebastian Hahn 17 May '11

17 May '11

Author: sebastian Date: 2011-05-17 22:47:52 +0000 (Tue, 17 May 2011) New Revision: 24767 Modified: website/trunk/include/versions.wmi Log: Update version-alpha string to 0.2.2.26-beta Modified: website/trunk/include/versions.wmi =================================================================== --- website/trunk/include/versions.wmi 2011-05-17 15:29:45 UTC (rev 24766) +++ website/trunk/include/versions.wmi 2011-05-17 22:47:52 UTC (rev 24767) @@ -1,5 +1,5 @@ <define-tag version-stable whitespace=delete>0.2.1.30</define-tag> -<define-tag version-alpha whitespace=delete>0.2.2.25-alpha</define-tag> +<define-tag version-alpha whitespace=delete>0.2.2.26-beta</define-tag> <define-tag version-win32-stable whitespace=delete>0.2.1.30</define-tag> <define-tag version-win32-alpha whitespace=delete>0.2.2.25-alpha</define-tag>

1 0

[torspec/master] It's 0.2.2.26-beta, not -alpha.
by nickm＠torproject.org 17 May '11

17 May '11

commit 731705f03aaa47d4780cc88f3491c08d0ce3641b Author: Nick Mathewson <nickm(a)torproject.org> Date: Tue May 17 18:10:34 2011 -0400 It's 0.2.2.26-beta, not -alpha. --- control-spec.txt | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/control-spec.txt b/control-spec.txt index 162ac70..00bfbfe 100644 --- a/control-spec.txt +++ b/control-spec.txt @@ -639,7 +639,7 @@ "net/listeners/dns" "net/listeners/control" A space-separated list of the addresses at which Tor is listening for - connections of each specified type. [New in Tor 0.2.2.26-alpha.] + connections of each specified type. [New in Tor 0.2.2.26-beta.] Examples: C: GETINFO version desc/name/moria1

1 0

[tor/release-0.2.2] give 0.2.2.26-beta a changelog blurb
by arma＠torproject.org 17 May '11

17 May '11

commit db3cd62e97294fa14b5b4ecdb3cd1ab7b249b8a5 Author: Roger Dingledine <arma(a)torproject.org> Date: Tue May 17 16:52:41 2011 -0400 give 0.2.2.26-beta a changelog blurb --- ChangeLog | 11 ++++++++--- 1 files changed, 8 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index b211ac7..8f52364 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,9 @@ Changes in version 0.2.2.26-beta - 2011-05-17 + Tor 0.2.2.26-beta fixes a variety of potential privacy problems. It + also introduces a new "socksport auto" approach that should make it + easier to run multiple Tors on the same system, and does a lot of + cleanup to get us closer to a release candidate. + o Security/privacy fixes: - Replace all potentially sensitive memory comparison operations with versions whose runtime does not depend on the data being @@ -46,7 +51,7 @@ Changes in version 0.2.2.26-beta - 2011-05-17 enforce permissions on an AF_UNIX sockets. Permissions on the directory holding the socket, however, seems to work everywhere. - Rate-limit a warning about failures to download v2 networkstatus - documents. Resolves part of bug 1352. + documents. Resolves part of bug 1352. - Backport code from 0.2.3.x that allows directory authorities to clean their microdescriptor caches. Needed to resolve bug 2230. - When an HTTPS proxy reports "403 Forbidden", we now explain @@ -101,7 +106,7 @@ Changes in version 0.2.2.26-beta - 2011-05-17 Fix posted by "cypherpunks." - The microdesc journal is supposed to get rebuilt only if it is at least _half_ the length of the store, not _twice_ the length - of the store. Bugfix on 0.2.2.6-alpha; fixes part of bug 2230. + of the store. Bugfix on 0.2.2.6-alpha; fixes part of bug 2230. - Fix a potential null-pointer dereference while computing a consensus. Bugfix on tor-0.2.0.3-alpha, found with the help of clang's analyzer. @@ -115,7 +120,7 @@ Changes in version 0.2.2.26-beta - 2011-05-17 where if the function had ever in the future been used to check for the presence of a too-large number, it would have given an incorrect result. (Fortunately, we only used it for 16-bit - values.) Fixes bug 3175; bugfix on 0.1.0.1-rc. + values.) Fixes bug 3175; bugfix on 0.1.0.1-rc. - Require that introduction point keys and onion handshake keys have a public exponent of 65537. Starts to fix bug 3207; bugfix on 0.2.0.10-alpha.

1 0

r24766: {website} added fingerprint for my Orbot signing key (website/trunk/docs/en)
by Nathan Freitas 17 May '11

17 May '11

Author: n8fr8 Date: 2011-05-17 15:29:45 +0000 (Tue, 17 May 2011) New Revision: 24766 Modified: website/trunk/docs/en/verifying-signatures.wml Log: added fingerprint for my Orbot signing key Modified: website/trunk/docs/en/verifying-signatures.wml =================================================================== --- website/trunk/docs/en/verifying-signatures.wml 2011-05-17 08:49:04 UTC (rev 24765) +++ website/trunk/docs/en/verifying-signatures.wml 2011-05-17 15:29:45 UTC (rev 24766) @@ -35,6 +35,7 @@ <li>Mike's (0xDDC6C0AD) signs the Torbutton xpi.</li> <li>Karsten's (0xF7C11265) signs the metrics archives and tools.</li> <li>Robert Hogan's (0x22F6856F) signs torsocks release tarballs and tags.</li> + <li>Nathan's (0xB374CBD2) signs the Android APK file for Orbot.</li>. </ul> <h3>Step Zero: Install GnuPG</h3> @@ -169,6 +170,11 @@ uid Robert Hogan <robert(a)roberthogan.net> sub 1024g/FC4A9460 2006-08-19 + pub 3072D/B374CBD2 2010-06-09 [expires: 2011-06-09] + Key fingerprint = B92B CA64 72F7 C6F0 8D47 8503 D2AC D203 B374 CBD2 + uid Nathan of Guardian <nathan(a)guardianproject.info> + sub 4096g/B5878C3B 2010-06-09 [expires: 2011-06-09] + </pre> <h3>Step Three: Verify the downloaded package</h3>

1 0

r24765: {website} new version of orbot available. (website/trunk/include)
by Andrew Lewman 17 May '11

17 May '11

Author: phobos Date: 2011-05-17 08:49:04 +0000 (Tue, 17 May 2011) New Revision: 24765 Modified: website/trunk/include/versions.wmi Log: new version of orbot available. Modified: website/trunk/include/versions.wmi =================================================================== --- website/trunk/include/versions.wmi 2011-05-17 03:09:25 UTC (rev 24764) +++ website/trunk/include/versions.wmi 2011-05-17 08:49:04 UTC (rev 24765) @@ -49,8 +49,8 @@ <define-tag version-vidalia-stable whitespace=delete>0.2.12</define-tag> -<define-tag version-androidbundle-tor whitespace=delete>0.2.2.22-alpha</define-tag> -<define-tag version-androidbundle-orbot whitespace=delete>1.0.4.1</define-tag> +<define-tag version-androidbundle-tor whitespace=delete>0.2.2.25-alpha</define-tag> +<define-tag version-androidbundle-orbot whitespace=delete>1.0.5.2</define-tag> <define-tag version-androidbundle-privoxy whitespace=delete>privoxy-3.0.12-stable</define-tag> <define-tag version-androidbundle-libevent whitespace=delete>libevent-1.4.12-stable</define-tag> <define-tag package-androidbundle-alpha whitespace=delete>dist/android/<version-androidbundle-tor>-orbot-<version-androidbundle-orbot>.apk</define-tag>

1 0

[tor/release-0.2.2] add a trac entry number to bug, er, 3207
by arma＠torproject.org 17 May '11

17 May '11

commit bcd79f7f52b038772e32de08c12c65ab55f412db Author: Roger Dingledine <arma(a)torproject.org> Date: Tue May 17 01:50:53 2011 -0400 add a trac entry number to bug, er, 3207 --- ChangeLog | 5 +++-- 1 files changed, 3 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 09dc93e..b211ac7 100644 --- a/ChangeLog +++ b/ChangeLog @@ -73,7 +73,7 @@ Changes in version 0.2.2.26-beta - 2011-05-17 - As an authority, do not upload our own vote or signature set to ourself. It would tell us nothing new, and as of 0.2.2.24-alpha, it would get flagged as a duplicate. Resolves bug 3026. - - Accept hidden service descriptors if we think we are a hidden + - Accept hidden service descriptors if we think we might be a hidden service directory, regardless of what our consensus says. This helps robustness, since clients and hidden services can sometimes have a more up-to-date view of the network consensus than we do, @@ -117,7 +117,8 @@ Changes in version 0.2.2.26-beta - 2011-05-17 incorrect result. (Fortunately, we only used it for 16-bit values.) Fixes bug 3175; bugfix on 0.1.0.1-rc. - Require that introduction point keys and onion handshake keys - have public exponent 65537. Bugfix on 0.2.0.10-alpha. + have a public exponent of 65537. Starts to fix bug 3207; bugfix + on 0.2.0.10-alpha. o Removed features: - Caches no longer download and serve v2 networkstatus documents

1 0

r24764: {projects} updated manifest files with latest version info (projects/android/trunk/Orbot)
by Nathan Freitas 17 May '11

17 May '11

Author: n8fr8 Date: 2011-05-17 03:09:25 +0000 (Tue, 17 May 2011) New Revision: 24764 Modified: projects/android/trunk/Orbot/AndroidManifest.xml projects/android/trunk/Orbot/AndroidManifest.xml.debug projects/android/trunk/Orbot/AndroidManifest.xml.production Log: updated manifest files with latest version info Modified: projects/android/trunk/Orbot/AndroidManifest.xml =================================================================== --- projects/android/trunk/Orbot/AndroidManifest.xml 2011-05-17 03:09:12 UTC (rev 24763) +++ projects/android/trunk/Orbot/AndroidManifest.xml 2011-05-17 03:09:25 UTC (rev 24764) @@ -1,6 +1,6 @@ <?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android" - package="org.torproject.android" android:versionName="0.2.2.25-orbot-alpha-1.0.5.1" android:versionCode="11"> + package="org.torproject.android" android:versionName="0.2.2.25-orbot-alpha-1.0.5.2" android:versionCode="14"> <uses-permission android:name="android.permission.INTERNET" /> <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED"/> Modified: projects/android/trunk/Orbot/AndroidManifest.xml.debug =================================================================== --- projects/android/trunk/Orbot/AndroidManifest.xml.debug 2011-05-17 03:09:12 UTC (rev 24763) +++ projects/android/trunk/Orbot/AndroidManifest.xml.debug 2011-05-17 03:09:25 UTC (rev 24764) @@ -1,6 +1,7 @@ <?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android" - package="org.torproject.android" android:versionName="0.2.2.25-orbot-alpha-1.0.5.20110503a-dev-debug" android:versionCode="10"> + package="org.torproject.android" android:versionName="0.2.2.25-orbot-alpha-1.0.5.20110503a-dev-debug" + android:versionCode="13"> <uses-permission android:name="android.permission.INTERNET" /> Modified: projects/android/trunk/Orbot/AndroidManifest.xml.production =================================================================== --- projects/android/trunk/Orbot/AndroidManifest.xml.production 2011-05-17 03:09:12 UTC (rev 24763) +++ projects/android/trunk/Orbot/AndroidManifest.xml.production 2011-05-17 03:09:25 UTC (rev 24764) @@ -1,6 +1,6 @@ <?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android" - package="org.torproject.android" android:versionName="0.2.2.25-orbot-alpha-1.0.5.20110503a" android:versionCode="11"> + package="org.torproject.android" android:versionName="0.2.2.25-orbot-alpha-1.0.5.20110503a" android:versionCode="13"> <uses-permission android:name="android.permission.INTERNET" /> <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED"/>

1 0

r24763: {projects} fixed handling of 'EntryNodes' preference (in projects/android/trunk/Orbot/src/org/torproject/android: . service)
by Nathan Freitas 17 May '11

17 May '11

Author: n8fr8 Date: 2011-05-17 03:09:12 +0000 (Tue, 17 May 2011) New Revision: 24763 Modified: projects/android/trunk/Orbot/src/org/torproject/android/SettingsPreferences.java projects/android/trunk/Orbot/src/org/torproject/android/service/TorService.java Log: fixed handling of 'EntryNodes' preference Modified: projects/android/trunk/Orbot/src/org/torproject/android/SettingsPreferences.java =================================================================== --- projects/android/trunk/Orbot/src/org/torproject/android/SettingsPreferences.java 2011-05-17 03:08:30 UTC (rev 24762) +++ projects/android/trunk/Orbot/src/org/torproject/android/SettingsPreferences.java 2011-05-17 03:09:12 UTC (rev 24763) @@ -28,6 +28,9 @@ private boolean hasRoot = false; + + private final static int HIDDEN_SERVICE_PREF_IDX = 6; + protected void onCreate(Bundle savedInstanceState) { super.onCreate(savedInstanceState); @@ -77,12 +80,11 @@ } - int hiddenGroupIdx = 6; - prefHiddenServices = ((CheckBoxPreference)((PreferenceCategory)this.getPreferenceScreen().getPreference(hiddenGroupIdx)).getPreference(0)); + prefHiddenServices = ((CheckBoxPreference)((PreferenceCategory)this.getPreferenceScreen().getPreference(HIDDEN_SERVICE_PREF_IDX)).getPreference(0)); prefHiddenServices.setOnPreferenceClickListener(this); - ((PreferenceCategory)this.getPreferenceScreen().getPreference(hiddenGroupIdx)).getPreference(1).setEnabled(prefHiddenServices.isChecked()); - ((PreferenceCategory)this.getPreferenceScreen().getPreference(hiddenGroupIdx)).getPreference(2).setEnabled(prefHiddenServices.isChecked()); + ((PreferenceCategory)this.getPreferenceScreen().getPreference(HIDDEN_SERVICE_PREF_IDX)).getPreference(1).setEnabled(prefHiddenServices.isChecked()); + ((PreferenceCategory)this.getPreferenceScreen().getPreference(HIDDEN_SERVICE_PREF_IDX)).getPreference(2).setEnabled(prefHiddenServices.isChecked()); }; @@ -113,8 +115,8 @@ else if (preference == prefHiddenServices) { - ((PreferenceCategory)this.getPreferenceScreen().getPreference(5)).getPreference(1).setEnabled(prefHiddenServices.isChecked()); - ((PreferenceCategory)this.getPreferenceScreen().getPreference(5)).getPreference(2).setEnabled(prefHiddenServices.isChecked()); + ((PreferenceCategory)this.getPreferenceScreen().getPreference(HIDDEN_SERVICE_PREF_IDX)).getPreference(1).setEnabled(prefHiddenServices.isChecked()); + ((PreferenceCategory)this.getPreferenceScreen().getPreference(HIDDEN_SERVICE_PREF_IDX)).getPreference(2).setEnabled(prefHiddenServices.isChecked()); } else Modified: projects/android/trunk/Orbot/src/org/torproject/android/service/TorService.java =================================================================== --- projects/android/trunk/Orbot/src/org/torproject/android/service/TorService.java 2011-05-17 03:08:30 UTC (rev 24762) +++ projects/android/trunk/Orbot/src/org/torproject/android/service/TorService.java 2011-05-17 03:09:12 UTC (rev 24763) @@ -1137,18 +1137,12 @@ if (value == null || value.length() == 0) { resetBuffer.add(name); - /* - if (conn != null) - { - try { - conn.resetConf(Arrays.asList(new String[]{name})); - } catch (IOException e) { - Log.w(TAG, "Unable to reset conf",e); - } - }*/ + } else + { configBuffer.add(name + ' ' + value); + } return false; } @@ -1289,13 +1283,10 @@ boolean enableHiddenServices = prefs.getBoolean("pref_hs_enable", false); boolean enableStrictNodes = prefs.getBoolean("pref_strict_nodes", false); - String entranceNodes = prefs.getString("pref_entrance_nodes", ""); - String exitNodes = prefs.getString("pref_exit_nodes", ""); - String excludeNodes = prefs.getString("pref_exclude_nodes", ""); + String entranceNodes = prefs.getString("pref_entrance_nodes", null); + String exitNodes = prefs.getString("pref_exit_nodes", null); + String excludeNodes = prefs.getString("pref_exclude_nodes", null); - - //boolean enableTransparentProxy = prefs.getBoolean(TorConstants.PREF_TRANSPARENT, false); - if (currentStatus == STATUS_ON) { //reset iptables rules in active mode @@ -1310,10 +1301,10 @@ } } - mBinder.updateConfiguration("EntranceNodes", entranceNodes, false); + mBinder.updateConfiguration("EntryNodes", entranceNodes, false); mBinder.updateConfiguration("ExitNodes", exitNodes, false); mBinder.updateConfiguration("ExcludeNodes", excludeNodes, false); - mBinder.updateConfiguration("StrictExitNodes", enableStrictNodes ? "1" : "0", false); + mBinder.updateConfiguration("StrictNodes", enableStrictNodes ? "1" : "0", false); if (useBridges) {

1 0