- tor-commits - lists.torproject.org

[flashproxy/master] Use uniform patch naming.
by dcf＠torproject.org 17 Jun '11

17 Jun '11

commit 98d58fdd87e5485de522810ffe98642c9b011441 Author: David Fifield <david(a)bamsoftware.com> Date: Fri Jun 17 10:10:32 2011 -0700 Use uniform patch naming. Use extension .patch rather than .diff. Use a lower-case "cumulus". --- Cumulus-no-manage-log.patch | 39 --------------------------------------- README | 2 +- cumulus-no-manage-log.patch | 39 +++++++++++++++++++++++++++++++++++++++ tor-ignore-bridge-failure.diff | 19 ------------------- tor-ignore-bridge-failure.patch | 19 +++++++++++++++++++ 5 files changed, 59 insertions(+), 59 deletions(-) diff --git a/Cumulus-no-manage-log.patch b/Cumulus-no-manage-log.patch deleted file mode 100644 index 810b52d..0000000 --- a/Cumulus-no-manage-log.patch +++ /dev/null @@ -1,39 +0,0 @@ -Don't try to re-open log files. This avoids a failure after --daemon -causes a chdir to /. - -diff --git a/CumulusService/sources/main.cpp b/CumulusService/sources/main.cpp -index 891621f..39ea4eb 100644 ---- a/CumulusService/sources/main.cpp -+++ b/CumulusService/sources/main.cpp -@@ -132,7 +132,6 @@ protected: - void dumpHandler(const char* data,int size) { - cout.write(data,size); - _logStream.write(data,size); -- manageLogFile(); - } - - void logHandler(Thread::TID threadId,const std::string& threadName,Priority priority,const char *filePath,long line, const char *text) { -@@ -140,23 +139,6 @@ protected: - _logStream << DateTimeFormatter::format(LocalDateTime(),"%d/%m %H:%M:%S.%c ") - << g_logPriorities[priority-1] << '\t' << threadName << '(' << threadId << ")\t" - << Path(filePath).getFileName() << '[' << line << "] " << text << std::endl; -- manageLogFile(); -- } -- -- void manageLogFile() { -- if(_logFile.getSize()>LOG_SIZE) { -- _logStream.close(); -- int num = 10; -- File file(LOG_FILE(10)); -- if(file.exists()) -- file.remove(); -- while(--num>=0) { -- file = LOG_FILE_VAR(num); -- if(file.exists()) -- file.renameTo(LOG_FILE_VAR(num+1)); -- } -- _logStream.open(LOG_FILE(0),ios::in | ios::ate); -- } - } - - bool onConnection(Client& client) { diff --git a/README b/README index 773d3cb..ef7e826 100644 --- a/README +++ b/README @@ -108,7 +108,7 @@ Follow these steps to install the Cumulus server. You need to open port 1935/udp in the firewall. $ git clone git://github.com/OpenRTMFP/Cumulus.git $ cd Cumulus - $ patch -p0 < Cumulus-no-manage-log.patch + $ patch -p0 < cumulus-no-manage-log.patch $ cd CumulusLib $ make LIBS=./ # cp libCumulus.so /usr/local/lib diff --git a/cumulus-no-manage-log.patch b/cumulus-no-manage-log.patch new file mode 100644 index 0000000..810b52d --- /dev/null +++ b/cumulus-no-manage-log.patch @@ -0,0 +1,39 @@ +Don't try to re-open log files. This avoids a failure after --daemon +causes a chdir to /. + +diff --git a/CumulusService/sources/main.cpp b/CumulusService/sources/main.cpp +index 891621f..39ea4eb 100644 +--- a/CumulusService/sources/main.cpp ++++ b/CumulusService/sources/main.cpp +@@ -132,7 +132,6 @@ protected: + void dumpHandler(const char* data,int size) { + cout.write(data,size); + _logStream.write(data,size); +- manageLogFile(); + } + + void logHandler(Thread::TID threadId,const std::string& threadName,Priority priority,const char *filePath,long line, const char *text) { +@@ -140,23 +139,6 @@ protected: + _logStream << DateTimeFormatter::format(LocalDateTime(),"%d/%m %H:%M:%S.%c ") + << g_logPriorities[priority-1] << '\t' << threadName << '(' << threadId << ")\t" + << Path(filePath).getFileName() << '[' << line << "] " << text << std::endl; +- manageLogFile(); +- } +- +- void manageLogFile() { +- if(_logFile.getSize()>LOG_SIZE) { +- _logStream.close(); +- int num = 10; +- File file(LOG_FILE(10)); +- if(file.exists()) +- file.remove(); +- while(--num>=0) { +- file = LOG_FILE_VAR(num); +- if(file.exists()) +- file.renameTo(LOG_FILE_VAR(num+1)); +- } +- _logStream.open(LOG_FILE(0),ios::in | ios::ate); +- } + } + + bool onConnection(Client& client) { diff --git a/tor-ignore-bridge-failure.diff b/tor-ignore-bridge-failure.diff deleted file mode 100644 index fa50366..0000000 --- a/tor-ignore-bridge-failure.diff +++ /dev/null @@ -1,19 +0,0 @@ -This patch causes Tor to ignore bridge reachability failures. This is -helpful when the bridge is only intermittently available, as when -connecting through a flash proxy. - -diff --git src/or/circuitbuild.c src/or/circuitbuild.c -index ac0df91..1794634 100644 ---- src/or/circuitbuild.c -+++ src/or/circuitbuild.c -@@ -3855,6 +3855,10 @@ entry_guard_register_connect_status(const char *digest, int succeeded, - int idx = -1; - char buf[HEX_DIGEST_LEN+1]; - -+ /* Ignore bridge reachability problems. */ -+ if (! succeeded) -+ return 0; -+ - if (! entry_guards) - return 0; - diff --git a/tor-ignore-bridge-failure.patch b/tor-ignore-bridge-failure.patch new file mode 100644 index 0000000..fa50366 --- /dev/null +++ b/tor-ignore-bridge-failure.patch @@ -0,0 +1,19 @@ +This patch causes Tor to ignore bridge reachability failures. This is +helpful when the bridge is only intermittently available, as when +connecting through a flash proxy. + +diff --git src/or/circuitbuild.c src/or/circuitbuild.c +index ac0df91..1794634 100644 +--- src/or/circuitbuild.c ++++ src/or/circuitbuild.c +@@ -3855,6 +3855,10 @@ entry_guard_register_connect_status(const char *digest, int succeeded, + int idx = -1; + char buf[HEX_DIGEST_LEN+1]; + ++ /* Ignore bridge reachability problems. */ ++ if (! succeeded) ++ return 0; ++ + if (! entry_guards) + return 0; +

1 0

[arm/master] Tor shutdown indicator when in client mode
by atagar＠torproject.org 17 Jun '11

17 Jun '11

commit 8fd556d502e42c33eaff038b6a6b0d2b99523da3 Author: Damian Johnson <atagar(a)torproject.org> Date: Fri Jun 17 09:46:49 2011 -0700 Tor shutdown indicator when in client mode When we're running as a client the ports line is replaced with the shutdown message when tor is no longer running. Also changing the "Relaying Disabled" indicator to be cyan rather than bold red since this isn't really a problem. --- src/cli/headerPanel.py | 40 ++++++++++++++++++++++++---------------- 1 files changed, 24 insertions(+), 16 deletions(-) diff --git a/src/cli/headerPanel.py b/src/cli/headerPanel.py index b5b3826..145e75b 100644 --- a/src/cli/headerPanel.py +++ b/src/cli/headerPanel.py @@ -183,7 +183,7 @@ class HeaderPanel(panel.Panel, threading.Thread): self.addstr(0, 43, uiTools.cropStr("Tor %s" % self.vals["tor/version"], contentSpace, 4)) # Line 2 / Line 2 Left (tor ip/port information) - x = 0 + x, includeControlPort = 0, True if self.vals["tor/orPort"]: myAddress = "Unknown" if self.vals["tor/orListenAddr"]: myAddress = self.vals["tor/orListenAddr"] @@ -198,21 +198,29 @@ class HeaderPanel(panel.Panel, threading.Thread): else: break else: # non-relay (client only) - # TODO: not sure what sort of stats to provide... - self.addstr(1, x, "Relaying Disabled", curses.A_BOLD | uiTools.getColor("red")) - x += 17 - - if self.vals["tor/isAuthPassword"]: authType = "password" - elif self.vals["tor/isAuthCookie"]: authType = "cookie" - else: authType = "open" - - if x + 19 + len(self.vals["tor/controlPort"]) + len(authType) <= leftWidth: - authColor = "red" if authType == "open" else "green" - self.addstr(1, x, ", Control Port (") - self.addstr(1, x + 16, authType, uiTools.getColor(authColor)) - self.addstr(1, x + 16 + len(authType), "): %s" % self.vals["tor/controlPort"]) - elif x + 16 + len(self.vals["tor/controlPort"]) <= leftWidth: - self.addstr(1, 0, ", Control Port: %s" % self.vals["tor/controlPort"]) + if self._isTorConnected: + self.addstr(1, x, "Relaying Disabled", uiTools.getColor("cyan")) + x += 17 + else: + statusTime = torTools.getConn().getStatus()[1] + statusTimeLabel = time.strftime("%H:%M %m/%d/%Y", time.localtime(statusTime)) + self.addstr(1, x, "Tor Disconnected", curses.A_BOLD | uiTools.getColor("red")) + self.addstr(1, x + 16, " (%s, press r to reconnect)" % statusTimeLabel) + x += 41 + len(statusTimeLabel) + includeControlPort = False + + if includeControlPort: + if self.vals["tor/isAuthPassword"]: authType = "password" + elif self.vals["tor/isAuthCookie"]: authType = "cookie" + else: authType = "open" + + if x + 19 + len(self.vals["tor/controlPort"]) + len(authType) <= leftWidth: + authColor = "red" if authType == "open" else "green" + self.addstr(1, x, ", Control Port (") + self.addstr(1, x + 16, authType, uiTools.getColor(authColor)) + self.addstr(1, x + 16 + len(authType), "): %s" % self.vals["tor/controlPort"]) + elif x + 16 + len(self.vals["tor/controlPort"]) <= leftWidth: + self.addstr(1, 0, ", Control Port: %s" % self.vals["tor/controlPort"]) # Line 3 / Line 1 Right (system usage info) y, x = (0, leftWidth) if isWide else (2, 0)

1 0

[flashproxy/master] Add a note to try tor-fw-helper.
by dcf＠torproject.org 17 Jun '11

17 Jun '11

commit 31509358601dac911189423dba2bc57bbf26ea75 Author: David Fifield <david(a)bamsoftware.com> Date: Fri Jun 17 02:04:58 2011 -0700 Add a note to try tor-fw-helper. --- notes.txt | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/notes.txt b/notes.txt index 86a38a3..928b921 100644 --- a/notes.txt +++ b/notes.txt @@ -1,5 +1,7 @@ == Things to do +Try tor-fw-helper for NAT traversal. + Limit rate of registration in facilitator, maybe just one reg per IP. We need to solve the problem of potential changing fingerprints when

1 0

[flashproxy/master] Add instructions for building the Cumulus server.
by dcf＠torproject.org 17 Jun '11

17 Jun '11

commit 67d49a45b114ac93b9fe36592509bf9fd1c2804b Author: David Fifield <david(a)bamsoftware.com> Date: Fri Jun 17 01:19:34 2011 -0700 Add instructions for building the Cumulus server. --- Cumulus-no-manage-log.patch | 39 ++++++++++++++++++++++++++++++ README | 32 +++++++++++++++++++++++++ cumulus | 55 +++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 126 insertions(+), 0 deletions(-) diff --git a/Cumulus-no-manage-log.patch b/Cumulus-no-manage-log.patch new file mode 100644 index 0000000..810b52d --- /dev/null +++ b/Cumulus-no-manage-log.patch @@ -0,0 +1,39 @@ +Don't try to re-open log files. This avoids a failure after --daemon +causes a chdir to /. + +diff --git a/CumulusService/sources/main.cpp b/CumulusService/sources/main.cpp +index 891621f..39ea4eb 100644 +--- a/CumulusService/sources/main.cpp ++++ b/CumulusService/sources/main.cpp +@@ -132,7 +132,6 @@ protected: + void dumpHandler(const char* data,int size) { + cout.write(data,size); + _logStream.write(data,size); +- manageLogFile(); + } + + void logHandler(Thread::TID threadId,const std::string& threadName,Priority priority,const char *filePath,long line, const char *text) { +@@ -140,23 +139,6 @@ protected: + _logStream << DateTimeFormatter::format(LocalDateTime(),"%d/%m %H:%M:%S.%c ") + << g_logPriorities[priority-1] << '\t' << threadName << '(' << threadId << ")\t" + << Path(filePath).getFileName() << '[' << line << "] " << text << std::endl; +- manageLogFile(); +- } +- +- void manageLogFile() { +- if(_logFile.getSize()>LOG_SIZE) { +- _logStream.close(); +- int num = 10; +- File file(LOG_FILE(10)); +- if(file.exists()) +- file.remove(); +- while(--num>=0) { +- file = LOG_FILE_VAR(num); +- if(file.exists()) +- file.renameTo(LOG_FILE_VAR(num+1)); +- } +- _logStream.open(LOG_FILE(0),ios::in | ios::ate); +- } + } + + bool onConnection(Client& client) { diff --git a/README b/README index 4b6a2dc..ccde8b9 100644 --- a/README +++ b/README @@ -94,6 +94,38 @@ try deleting the files in ~/.tor or /var/lib/tor. You will be able to see byte counts flowing in the browser window, and eventually be able to build a circuit. +== Building the Cumulus RTMFP server + +There is a free RTMFP rendezvous server called Cumulus. It is a +replacement for the Adobe Cirrus service at rtmfp://p2p.rtmfp.net/. +These are instructions to build and install it. + +First install the prerequisite libpoco, http://poco.sourceforge.net/. +You only need the "Basic Edition." + # apt-get install libpoco-dev +or + $ cd poco-VERSION + $ ./configure && make + # make install + +Follow these steps to install the Cumulus server. You need to open port +1935/udp in the firewall. + $ git clone git://github.com/OpenRTMFP/Cumulus.git + $ cd Cumulus + $ patch -p0 < Cumulus-no-manage-log.patch + $ cd CumulusLib + $ make LIBS=./ + # cp libCumulus.so /usr/local/lib + $ cd ../../CumulusService + $ make + # cp CumulusService /usr/local/bin + # useradd -d /dev/null -s /bin/false cumulus + # mkdir /var/cumulus + # chown -R cumulus.cumulus /var/cumulus + # cp flashproxy/cumulus /etc/init.d/cumulus + # chkconfig --add cumulus + # service cumulus start + == Rationale The purpose of this project is to create many, generally ephemeral diff --git a/cumulus b/cumulus new file mode 100755 index 0000000..7fdac3e --- /dev/null +++ b/cumulus @@ -0,0 +1,55 @@ +#!/bin/sh +# +# cumulus This shell script takes care of starting and stopping +# the Cumulus server. +# +# chkconfig: 2345 90 10 +# description: Cumulus RTMFP server. +# processname: CumulusService +# pidfile: /var/cumulus/cumulus.pid + +# Source function library. +. /etc/rc.d/init.d/functions + +BINDIR=/usr/local/bin +VARDIR=/var/cumulus +CUMULUS=$BINDIR/CumulusService +PIDFILE=$VARDIR/cumulus.pid +USER=cumulus + +# See how we were called. +case "$1" in + start) + [ -x $CUMULUS ] || exit 1 + echo -n $"Starting Cumulus server: " + cd $VARDIR && daemon --user cumulus --pidfile $PIDFILE $CUMULUS --daemon --pidfile=$PIDFILE + RETVAL=$? + echo + [ $RETVAL -eq 0 ] && touch /var/lock/subsys/cumulus + ;; + stop) + # Stop daemon. + echo -n $"Shutting down Cumulus server: " + killproc CumulusService + RETVAL=$? + echo + [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/cumulus + ;; + status) + status cumulus + RETVAL=$? + ;; + restart|reload) + $0 stop + $0 start + ;; + condrestart) + [ -f /var/lock/subsys/cumulus ] && restart || : + ;; + *) + echo $"Usage: $0 {start|stop|status|restart}" + RETVAL=3 + ;; +esac + +exit $RETVAL

1 0

[flashproxy/master] Use our own RTMFP server instead of Adobe's.
by dcf＠torproject.org 17 Jun '11

17 Jun '11

commit 750a8faf9db4e19c45fb2a9962789114279ea322 Author: David Fifield <david(a)bamsoftware.com> Date: Fri Jun 17 01:20:30 2011 -0700 Use our own RTMFP server instead of Adobe's. The free Cumulus server works as a replacement for the Adobe RTMFP rendezvous server at rtmfp://p2p.rtmfp.net. By running this on the facilitator we cut out Adobe and reduce the number of trusted parties by one. The facilitator gains some information it didn't have before: though RTMFP data goes directly between endpoints, the RTMFP server seems to get periodic heartbeat messages while the connection is ongoing. --- README | 6 +++--- swfcat.as | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/README b/README index ccde8b9..a086aa6 100644 --- a/README +++ b/README @@ -17,7 +17,7 @@ There are five main parts. Our terminology for each part is in quotes. must also serve a Flash crossdomain policy. A proxy is capable of connecting to a client in two ways: Using a normal -TCP connection, or over Adobe RTMFP, which involves a third party but is +TCP connection; or over RTMFP, which requires Flash on the client but is capable of traversing NAT. == Demonstration page @@ -58,8 +58,8 @@ which facilitator to use, for example There are two ways in which the client can receive connections: over TCP or RTMFP. TCP doesn't send traffic to anyone other than the facilitator and the proxy, but it only works if you have a public IP address. RTMFP -coordinates connections using a server controlled by Adobe, but works -when the client is behind a NAT. +coordinates connections using another server (which may be the same as +the facilitator) and works when the client is behind a NAT. To connect with TCP, run ./connector.py -f <facilitator-ip> diff --git a/swfcat.as b/swfcat.as index 67d60a0..dda7a1a 100644 --- a/swfcat.as +++ b/swfcat.as @@ -21,7 +21,7 @@ package /* Adobe's Cirrus server for RTMFP connections. The Cirrus key is defined at compile time by reading from the CIRRUS_KEY environment var. */ - private const CIRRUS_URL:String = "rtmfp://p2p.rtmfp.net"; + private const CIRRUS_URL:String = "rtmfp://tor-facilitator.bamsoftware.com"; private const CIRRUS_KEY:String = RTMFP::CIRRUS_KEY; private const DEFAULT_FACILITATOR_ADDR:Object = {

1 0

[flashproxy/master] Rename CIRRUS_URL to RTMFP_URL.
by dcf＠torproject.org 17 Jun '11

17 Jun '11

commit d43f6e332c184b12d90afef9d737f696e1b26244 Author: David Fifield <david(a)bamsoftware.com> Date: Fri Jun 17 01:29:10 2011 -0700 Rename CIRRUS_URL to RTMFP_URL. --- swfcat.as | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git a/swfcat.as b/swfcat.as index 4d69449..38ed1ab 100644 --- a/swfcat.as +++ b/swfcat.as @@ -18,7 +18,7 @@ package public class swfcat extends Sprite { - private const CIRRUS_URL:String = "rtmfp://tor-facilitator.bamsoftware.com"; + private const RTMFP_URL:String = "rtmfp://tor-facilitator.bamsoftware.com"; private const DEFAULT_FACILITATOR_ADDR:Object = { host: "tor-facilitator.bamsoftware.com", @@ -197,7 +197,7 @@ package { var rs:RTMFPSocket; - rs = new RTMFPSocket(CIRRUS_URL); + rs = new RTMFPSocket(RTMFP_URL); rs.addEventListener(Event.COMPLETE, function (e:Event):void { puts("Got RTMFP id " + rs.id); register(rs); @@ -282,7 +282,7 @@ package } if (client_spec.match(/^[0-9A-Fa-f]{64}$/)) { - s_c = new RTMFPSocket(CIRRUS_URL); + s_c = new RTMFPSocket(RTMFP_URL); s_r = new Socket(); proxy_pair = new ProxyPair(this, s_c, function ():void { s_c.connect(client_spec);

1 0

[flashproxy/master] Remove CIRRUS_KEY.
by dcf＠torproject.org 17 Jun '11

17 Jun '11

commit a9bec460af27f75182b63770997df4f68ad84c57 Author: David Fifield <david(a)bamsoftware.com> Date: Fri Jun 17 01:25:55 2011 -0700 Remove CIRRUS_KEY. The Cumulus server doesn't need a development key. --- Makefile | 2 +- README | 4 ---- RTMFPSocket.as | 2 +- swfcat.as | 8 ++------ 4 files changed, 4 insertions(+), 12 deletions(-) diff --git a/Makefile b/Makefile index 6c11397..ed799c6 100644 --- a/Makefile +++ b/Makefile @@ -7,7 +7,7 @@ all: $(TARGETS) swfcat.swf: *.as badge.png %.swf: %.as - $(MXMLC) -output $@ -static-link-runtime-shared-libraries -define=RTMFP::CIRRUS_KEY,\"$(CIRRUS_KEY)\" $< + $(MXMLC) -output $@ -static-link-runtime-shared-libraries $< clean: rm -f $(TARGETS) diff --git a/README b/README index a086aa6..773d3cb 100644 --- a/README +++ b/README @@ -32,10 +32,6 @@ Download the (free software) Flex SDK. http://opensource.adobe.com/wiki/display/flexsdk/Flex+SDK Put its bin directory in your PATH. The important executable is mxmlc. -For RTMFP support, you need a Cirrus developer key from Adobe. Put it in -the environment variable CIRRUS_KEY so it can be found by Makefile. - $ export CIRRUS_KEY=XXXXXXXXXXXXXXXXXXXXXXXX-YYYYYYYYYYYY - To build, run $ make Copy the resulting swfcat.swf file to a web server. diff --git a/RTMFPSocket.as b/RTMFPSocket.as index e23c4fd..49c297b 100644 --- a/RTMFPSocket.as +++ b/RTMFPSocket.as @@ -50,7 +50,7 @@ package private var cirrus_url:String; private var cirrus_key:String; - public function RTMFPSocket(cirrus_url:String, cirrus_key:String) + public function RTMFPSocket(cirrus_url:String, cirrus_key:String = "") { connected = false; diff --git a/swfcat.as b/swfcat.as index dda7a1a..4d69449 100644 --- a/swfcat.as +++ b/swfcat.as @@ -18,11 +18,7 @@ package public class swfcat extends Sprite { - /* Adobe's Cirrus server for RTMFP connections. - The Cirrus key is defined at compile time by - reading from the CIRRUS_KEY environment var. */ private const CIRRUS_URL:String = "rtmfp://tor-facilitator.bamsoftware.com"; - private const CIRRUS_KEY:String = RTMFP::CIRRUS_KEY; private const DEFAULT_FACILITATOR_ADDR:Object = { host: "tor-facilitator.bamsoftware.com", @@ -201,7 +197,7 @@ package { var rs:RTMFPSocket; - rs = new RTMFPSocket(CIRRUS_URL, CIRRUS_KEY); + rs = new RTMFPSocket(CIRRUS_URL); rs.addEventListener(Event.COMPLETE, function (e:Event):void { puts("Got RTMFP id " + rs.id); register(rs); @@ -286,7 +282,7 @@ package } if (client_spec.match(/^[0-9A-Fa-f]{64}$/)) { - s_c = new RTMFPSocket(CIRRUS_URL, CIRRUS_KEY); + s_c = new RTMFPSocket(CIRRUS_URL); s_r = new Socket(); proxy_pair = new ProxyPair(this, s_c, function ():void { s_c.connect(client_spec);

1 0

[tor/maint-0.2.2] log when we finish ssl handshake and move to renegotiation
by arma＠torproject.org 17 Jun '11

17 Jun '11

commit 64bfbcb918a59edf8e7167954171f311d032fc4b Author: Roger Dingledine <arma(a)torproject.org> Date: Fri Jun 17 03:31:59 2011 -0400 log when we finish ssl handshake and move to renegotiation debug-level since it will be quite common. logged at both client and server side. this step should help us track what's going on with people filtering tor connections by our ssl habits. --- src/or/connection_or.c | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) diff --git a/src/or/connection_or.c b/src/or/connection_or.c index ed174c9..c019f65 100644 --- a/src/or/connection_or.c +++ b/src/or/connection_or.c @@ -929,13 +929,16 @@ connection_tls_continue_handshake(or_connection_t *conn) if (! tor_tls_used_v1_handshake(conn->tls)) { if (!tor_tls_is_server(conn->tls)) { if (conn->_base.state == OR_CONN_STATE_TLS_HANDSHAKING) { - // log_notice(LD_OR,"Done. state was TLS_HANDSHAKING."); + log_debug(LD_OR, "Done with initial SSL handshake (client-side). " + "Requesting renegotiation."); conn->_base.state = OR_CONN_STATE_TLS_CLIENT_RENEGOTIATING; goto again; } // log_notice(LD_OR,"Done. state was %d.", conn->_base.state); } else { /* improved handshake, but not a client. */ + log_debug(LD_OR, "Done with initial SSL handshake (server-side). " + "Expecting renegotiation."); tor_tls_set_renegotiate_callback(conn->tls, connection_or_tls_renegotiated_cb, conn);

1 0

[arm/master] Dropping remaining addfstr usage
by atagar＠torproject.org 17 Jun '11

17 Jun '11

commit 6144d50da64fe94bf8ab30c30f5044453cefde01 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Jun 16 10:11:50 2011 -0700 Dropping remaining addfstr usage Long ago, in the dawn of arm, I added a helper function "addfstr" that allowed for adding strings with formatting tags similar to html. All usage of it with arbitrary input was dropped due to the possability of tag injection screwing up the display, and this change drops its last remaining usage. This hurts the code's readability a bit and at I'd like to figure out a nicer, general purpose pattern for multi-format line rendering but tags aren't the solution. Back to the drawing board... This leaves the panel utility for now. --- src/cli/graphing/bandwidthStats.py | 8 +++- src/cli/headerPanel.py | 79 +++++++++++++++++++++++------------- 2 files changed, 57 insertions(+), 30 deletions(-) diff --git a/src/cli/graphing/bandwidthStats.py b/src/cli/graphing/bandwidthStats.py index 4e033f6..b92a58c 100644 --- a/src/cli/graphing/bandwidthStats.py +++ b/src/cli/graphing/bandwidthStats.py @@ -4,6 +4,7 @@ stats if they're set. """ import time +import curses from cli.graphing import graphPanel from util import log, sysTools, torTools, uiTools @@ -254,7 +255,9 @@ class BandwidthStats(graphPanel.GraphStats): # failed to be queried status, hibernateColor = "unknown", "red" - panel.addfstr(labelingLine + 2, 0, "Accounting (<%s>%s</%s>)" % (hibernateColor, status, hibernateColor)) + panel.addstr(labelingLine + 2, 0, "Accounting (", curses.A_BOLD) + panel.addstr(labelingLine + 2, 12, status, curses.A_BOLD | uiTools.getColor(hibernateColor)) + panel.addstr(labelingLine + 2, 12 + len(status), ")", curses.A_BOLD) resetTime = self.accountingInfo["resetTime"] if not resetTime: resetTime = "unknown" @@ -268,7 +271,8 @@ class BandwidthStats(graphPanel.GraphStats): if used and total: panel.addstr(labelingLine + 3, 37, "%s / %s" % (used, total), uiTools.getColor(self.getColor(False))) else: - panel.addfstr(labelingLine + 2, 0, "Accounting: Connection Closed...") + panel.addstr(labelingLine + 2, 0, "Accounting:", curses.A_BOLD) + panel.addstr(labelingLine + 2, 12, "Connection Closed...") def getTitle(self, width): stats = list(self._titleStats) diff --git a/src/cli/headerPanel.py b/src/cli/headerPanel.py index 93930b1..d367b98 100644 --- a/src/cli/headerPanel.py +++ b/src/cli/headerPanel.py @@ -161,39 +161,44 @@ class HeaderPanel(panel.Panel, threading.Thread): if 7 + len(self.vals["tor/version"]) + len(self.vals["tor/versionStatus"]) <= contentSpace: versionColor = VERSION_STATUS_COLORS[self.vals["tor/versionStatus"]] if \ self.vals["tor/versionStatus"] in VERSION_STATUS_COLORS else "white" - versionStatusMsg = "<%s>%s</%s>" % (versionColor, self.vals["tor/versionStatus"], versionColor) - self.addfstr(0, 43, "Tor %s (%s)" % (self.vals["tor/version"], versionStatusMsg)) + labelPrefix = "Tor %s (" % self.vals["tor/version"] + self.addstr(0, 43, labelPrefix) + self.addstr(0, 43 + len(labelPrefix), self.vals["tor/versionStatus"], uiTools.getColor(versionColor)) + self.addstr(0, 43 + len(labelPrefix) + len(self.vals["tor/versionStatus"]), ")") elif 11 <= contentSpace: self.addstr(0, 43, uiTools.cropStr("Tor %s" % self.vals["tor/version"], contentSpace, 4)) # Line 2 / Line 2 Left (tor ip/port information) + x = 0 if self.vals["tor/orPort"]: myAddress = "Unknown" if self.vals["tor/orListenAddr"]: myAddress = self.vals["tor/orListenAddr"] elif self.vals["tor/address"]: myAddress = self.vals["tor/address"] # acting as a relay (we can assume certain parameters are set - entry = "" dirPortLabel = ", Dir Port: %s" % self.vals["tor/dirPort"] if self.vals["tor/dirPort"] != "0" else "" for label in (self.vals["tor/nickname"], " - " + myAddress, ":" + self.vals["tor/orPort"], dirPortLabel): - if len(entry) + len(label) <= leftWidth: entry += label + if x + len(label) <= leftWidth: + self.addstr(1, x, label) + x += len(label) else: break else: # non-relay (client only) # TODO: not sure what sort of stats to provide... - entry = "<red>Relaying Disabled</red>" + self.addstr(1, x, "Relaying Disabled", curses.A_BOLD | uiTools.getColor("red")) + x += 17 if self.vals["tor/isAuthPassword"]: authType = "password" elif self.vals["tor/isAuthCookie"]: authType = "cookie" else: authType = "open" - if len(entry) + 19 + len(self.vals["tor/controlPort"]) + len(authType) <= leftWidth: + if x + 19 + len(self.vals["tor/controlPort"]) + len(authType) <= leftWidth: authColor = "red" if authType == "open" else "green" - authLabel = "<%s>%s</%s>" % (authColor, authType, authColor) - self.addfstr(1, 0, "%s, Control Port (%s): %s" % (entry, authLabel, self.vals["tor/controlPort"])) - elif len(entry) + 16 + len(self.vals["tor/controlPort"]) <= leftWidth: - self.addstr(1, 0, "%s, Control Port: %s" % (entry, self.vals["tor/controlPort"])) - else: self.addstr(1, 0, entry) + self.addstr(1, x, ", Control Port (") + self.addstr(1, x + 16, authType, uiTools.getColor(authColor)) + self.addstr(1, x + 16 + len(authType), "): %s" % self.vals["tor/controlPort"]) + elif x + 16 + len(self.vals["tor/controlPort"]) <= leftWidth: + self.addstr(1, 0, ", Control Port: %s" % self.vals["tor/controlPort"]) # Line 3 / Line 1 Right (system usage info) y, x = (0, leftWidth) if isWide else (2, 0) @@ -250,20 +255,29 @@ class HeaderPanel(panel.Panel, threading.Thread): # Line 5 / Line 3 Left (flags) if self._isTorConnected: - flagLine = "flags: " - for flag in self.vals["tor/flags"]: - flagColor = FLAG_COLORS[flag] if flag in FLAG_COLORS.keys() else "white" - flagLine += "<%s>%s</%s>, " % (flagColor, flag, flagColor) + y, x = (2 if isWide else 4, 0) + self.addstr(y, x, "flags: ") + x += 7 - if len(self.vals["tor/flags"]) > 0: flagLine = flagLine[:-2] - else: flagLine += "<cyan>none</cyan>" - - self.addfstr(2 if isWide else 4, 0, flagLine) + if len(self.vals["tor/flags"]) > 0: + for i in range(len(self.vals["tor/flags"])): + flag = self.vals["tor/flags"][i] + flagColor = FLAG_COLORS[flag] if flag in FLAG_COLORS.keys() else "white" + + self.addstr(y, x, flag, curses.A_BOLD | uiTools.getColor(flagColor)) + x += len(flag) + + if i < len(self.vals["tor/flags"]) - 1: + self.addstr(y, x, ", ") + x += 2 + else: + self.addstr(y, x, "none", curses.A_BOLD | uiTools.getColor("cyan")) else: + y = 2 if isWide else 4 statusTime = torTools.getConn().getStatus()[1] statusTimeLabel = time.strftime("%H:%M %m/%d/%Y", time.localtime(statusTime)) - msg = "<red>Tor Disconnected</red> (%s) - press r to reconnect" % statusTimeLabel - self.addfstr(2 if isWide else 4, 0, msg) + self.addstr(y, 0, "Tor Disconnected", curses.A_BOLD | uiTools.getColor("red")) + self.addstr(y, 16, " (%s) - press r to reconnect" % statusTimeLabel) # Undisplayed / Line 3 Right (exit policy) if isWide: @@ -273,18 +287,27 @@ class HeaderPanel(panel.Panel, threading.Thread): if exitPolicy == "": exitPolicy = "<default>" elif not exitPolicy.endswith((" *:*", " *")): exitPolicy += ", <default>" + self.addstr(2, leftWidth, "exit policy: ") + x = leftWidth + 13 + # color codes accepts to be green, rejects to be red, and default marker to be cyan isSimple = len(exitPolicy) > rightWidth - 13 policies = exitPolicy.split(", ") for i in range(len(policies)): policy = policies[i].strip() - displayedPolicy = policy.replace("accept", "").replace("reject", "").strip() if isSimple else policy - if policy.startswith("accept"): policy = "<green>%s</green>" % displayedPolicy - elif policy.startswith("reject"): policy = "<red>%s</red>" % displayedPolicy - elif policy.startswith("<default>"): policy = "<cyan>%s</cyan>" % displayedPolicy - policies[i] = policy - - self.addfstr(2, leftWidth, "exit policy: %s" % ", ".join(policies)) + policyLabel = policy.replace("accept", "").replace("reject", "").strip() if isSimple else policy + + policyColor = "white" + if policy.startswith("accept"): policyColor = "green" + elif policy.startswith("reject"): policyColor = "red" + elif policy.startswith("<default>"): policyColor = "cyan" + + self.addstr(2, x, policyLabel, curses.A_BOLD | uiTools.getColor(policyColor)) + x += len(policyLabel) + + if i < len(policies) - 1: + self.addstr(2, x, ", ") + x += 2 else: # Client only # TODO: not sure what information to provide here...

1 0

[arm/master] Adding a "New Identity" option
by atagar＠torproject.org 17 Jun '11

17 Jun '11

commit 1a31910080c81f01bf07aeccbaed8ff3d861ec49 Author: Damian Johnson <atagar(a)torproject.org> Date: Thu Jun 16 20:53:45 2011 -0700 Adding a "New Identity" option Providing an option for sending newnym signals to tor. This is both provided via a menu option and a 'n' hotkey. There's also an indicator in the header panel if we're both on a wide screen and running as a non-relay. This was requested on 'https://trac.torproject.org/projects/tor/ticket/3394'. --- src/cli/headerPanel.py | 30 ++++++++++++++++++++++++++---- src/cli/menu/actions.py | 3 +++ src/util/torTools.py | 34 ++++++++++++++++++++++++++++++++++ 3 files changed, 63 insertions(+), 4 deletions(-) diff --git a/src/cli/headerPanel.py b/src/cli/headerPanel.py index d367b98..b5b3826 100644 --- a/src/cli/headerPanel.py +++ b/src/cli/headerPanel.py @@ -113,10 +113,24 @@ class HeaderPanel(panel.Panel, threading.Thread): if self.vals["tor/orPort"]: return 4 if isWide else 6 else: return 3 if isWide else 4 + def sendNewnym(self): + """ + Requests a new identity and provides a visual queue. + """ + + torTools.getConn().sendNewnym() + + # If we're wide then the newnym label in this panel will give an + # indication that the signal was sent. Otherwise use a msg. + isWide = self.getParent().getmaxyx()[1] >= MIN_DUAL_COL_WIDTH + if not isWide: cli.popups.showMsg("Requesting a new identity", 1) + def handleKey(self, key): isKeystrokeConsumed = True - if key in (ord('r'), ord('R')) and not self._isTorConnected: + if key in (ord('n'), ord('N')) and torTools.getConn().isNewnymAvailable(): + self.sendNewnym() + elif key in (ord('r'), ord('R')) and not self._isTorConnected: try: ctlAddr, ctlPort = self._config["startup.interface.ipAddress"], self._config["startup.interface.port"] tmpConn, authType, authValue = TorCtl.TorCtl.connectionComp(ctlAddr, ctlPort) @@ -309,9 +323,17 @@ class HeaderPanel(panel.Panel, threading.Thread): self.addstr(2, x, ", ") x += 2 else: - # Client only - # TODO: not sure what information to provide here... - pass + # (Client only) Undisplayed / Line 2 Right (new identity option) + if isWide: + conn = torTools.getConn() + newnymWait = conn.getNewnymWait() + + msg = "press 'n' for a new identity" + if newnymWait > 0: + pluralLabel = "s" if newnymWait > 1 else "" + msg = "building circuits, available again in %i second%s" % (newnymWait, pluralLabel) + + self.addstr(1, leftWidth, msg) self.valsLock.release() diff --git a/src/cli/menu/actions.py b/src/cli/menu/actions.py index b8b59e1..c571bd8 100644 --- a/src/cli/menu/actions.py +++ b/src/cli/menu/actions.py @@ -42,14 +42,17 @@ def makeActionsMenu(): """ Submenu consisting of... Close Menu + New Identity Pause / Unpause Reset Tor Exit """ control = cli.controller.getController() + headerPanel = control.getPanel("header") actionsMenu = cli.menu.item.Submenu("Actions") actionsMenu.add(cli.menu.item.MenuItem("Close Menu", None)) + actionsMenu.add(cli.menu.item.MenuItem("New Identity", headerPanel.sendNewnym)) if control.isPaused(): label, arg = "Unpause", False else: label, arg = "Pause", True diff --git a/src/util/torTools.py b/src/util/torTools.py index d0d658a..17c54f0 100644 --- a/src/util/torTools.py +++ b/src/util/torTools.py @@ -6,6 +6,7 @@ accessing TorCtl and notifications of state changes to subscribers. import os import pwd import time +import math import socket import thread import threading @@ -411,6 +412,9 @@ class Controller(TorCtl.PostEventListener): self._status = State.INIT self._statusTime = time.time() + # time that we sent our last newnym signal + self._lastNewnym = 0 + # notifies listeners that a new controller is available if not NO_SPAWN: self._notificationQueue.put(State.INIT) @@ -714,6 +718,36 @@ class Controller(TorCtl.PostEventListener): if raisedExc: raise raisedExc + def sendNewnym(self): + """ + Sends a newnym request to Tor. These are rate limited so if it occures + more than once within a ten second window then the second is delayed. + """ + + self.connLock.acquire() + + if self.isAlive(): + self._lastNewnym = time.time() + self.conn.send_signal("NEWNYM") + + self.connLock.release() + + def isNewnymAvailable(self): + """ + True if Tor will immediately respect a newnym request, false otherwise. + """ + + return self.getNewnymWait() == 0 + + def getNewnymWait(self): + """ + Provides the number of seconds until a newnym signal would be respected. + """ + + # newnym signals can occure at the rate of one every ten seconds + # TODO: this can't take other controllers into account :( + return max(0, math.ceil(self._lastNewnym + 10 - time.time())) + def getCircuits(self, default = []): """ This provides a list with tuples of the form:

1 0