- tor-commits - lists.torproject.org

[torspec] branch main updated (0d91005 -> 9c55db4)
by gitolite role 24 May '23

24 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository torspec. from 0d91005 Add info that onion v3 URLs use SHA3-256 new a3c88e1 proposal 327: Editing pass to align the spec with our implementation new 97c0c12 Describe identity-binding defense for intro-point POW new 9c55db4 Merge branch 'tor-gitlab/mr/134' The 3 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: control-spec.txt | 5 + proposals/327-pow-over-intro.txt | 408 +++++++++++++++++++++++++-------------- 2 files changed, 272 insertions(+), 141 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 3

[torspec] branch main updated: Add info that onion v3 URLs use SHA3-256
by gitolite role 24 May '23

24 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository torspec. The following commit(s) were added to refs/heads/main by this push: new 0d91005 Add info that onion v3 URLs use SHA3-256 0d91005 is described below commit 0d91005ea655edaeda08cd9188066cf182c63868 Author: zocker1999net <me+tor-gitlab(a)banananet.work> AuthorDate: Tue May 23 21:31:51 2023 +0000 Add info that onion v3 URLs use SHA3-256 --- address-spec.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/address-spec.txt b/address-spec.txt index 98e7068..1e90e6e 100644 --- a/address-spec.txt +++ b/address-spec.txt @@ -1,4 +1,3 @@ - Special Hostnames in Tor Nick Mathewson @@ -71,6 +70,7 @@ Table of Contents - PUBKEY is the 32 bytes ed25519 master pubkey of the onion service. - VERSION is a one byte version field (default value '\x03') - ".onion checksum" is a constant string + - H is SHA3-256 - CHECKSUM is truncated to two bytes before inserting it in onion_address When Tor sees an address in this format, it tries to look up and connect to -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch main updated (9976da9367 -> a2ec9a1199)
by gitolite role 24 May '23

24 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository tor. from 9976da9367 Merge branch 'tor-gitlab/mr/709' new c71b6a14a3 equix: avoid a coverity warning in hashx_alloc() new a3ff3155c2 test_crypto: avoid memory leak in some hashx test failures new 23f4a28f97 token_bucket_ctr: replace 32-bit wallclock time with monotime new a2ec9a1199 Merge branch 'tor-gitlab/mr/711' The 4 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: src/core/or/dos.c | 6 ++- src/ext/equix/hashx/src/context.c | 1 + src/feature/hs/hs_circuit.c | 3 +- src/feature/hs/hs_dos.c | 5 +- src/feature/hs/hs_intropoint.c | 3 +- src/feature/hs/hs_service.c | 3 +- src/lib/evloop/token_bucket.c | 111 +++++++++++++++++++------------------- src/lib/evloop/token_bucket.h | 12 ++--- src/lib/time/compat_time.c | 17 ++++++ src/lib/time/compat_time.h | 16 +++++- src/test/test_bwmgt.c | 24 ++++++++- src/test/test_crypto.c | 9 ++-- src/test/test_dos.c | 15 ++++-- src/test/test_hs_dos.c | 18 ++++--- src/test/test_hs_intropoint.c | 3 +- 15 files changed, 160 insertions(+), 86 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 4

[tor] branch main updated (0781c2968d -> 9976da9367)
by gitolite role 24 May '23

24 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository tor. from 0781c2968d Merge branch 'tor-gitlab/mr/710' new a98b1d3ab6 Remove two conflux algs: maxrate and cwndrate. new c8341abf82 Clean up and disable switch rate limiting. new a340acb492 Clean up UX decision logic; hardcode for browser UX case. new 0c11577987 Fix unit tests. new 79dab29a05 Add torrc option for conflux client UX. new 032d850a2c Add changes file for conflux. new 9976da9367 Merge branch 'tor-gitlab/mr/709' The 7 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: changes/ticket40593 | 16 +++ doc/man/tor.1.txt | 7 ++ src/app/config/config.c | 18 ++++ src/app/config/or_options_st.h | 4 + src/core/or/conflux.c | 216 ++++++++--------------------------------- src/core/or/conflux_cell.c | 15 +-- src/core/or/conflux_cell.h | 2 +- src/core/or/conflux_pool.c | 41 ++++++-- src/core/or/conflux_pool.h | 2 + src/core/or/conflux_st.h | 2 - src/test/test_conflux_pool.c | 2 + 11 files changed, 126 insertions(+), 199 deletions(-) create mode 100644 changes/ticket40593 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 7

[tor] branch main updated (6afe03aa51 -> 0781c2968d)
by gitolite role 24 May '23

24 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository tor. from 6afe03aa51 Merge branch 'tor-gitlab/mr/708' new 459b775a7e hs_pow: fix insufficient length check in pow-params new 71b2958a62 test_hs_descriptor: Add a test case that fails without the fix for 40793 new 0781c2968d Merge branch 'tor-gitlab/mr/710' The 3 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: src/feature/hs/hs_descriptor.c | 21 ++++++++++--- src/feature/hs/hs_descriptor.h | 7 +++++ src/test/hs_test_helpers.c | 12 ++++++++ src/test/test_hs_descriptor.c | 69 ++++++++++++++++++++++++++++++++++++++++++ 4 files changed, 105 insertions(+), 4 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 3

[tor] branch main updated: ipv6: Flip ClientUseIPv6 to 1
by gitolite role 24 May '23

24 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a commit to branch main in repository tor. The following commit(s) were added to refs/heads/main by this push: new ffb764949e ipv6: Flip ClientUseIPv6 to 1 new 6afe03aa51 Merge branch 'tor-gitlab/mr/708' ffb764949e is described below commit ffb764949e7c1699af715298ce65279a2ee5df6e Author: agowa338 <gitlab.torproject.org(a)agowa338.de> AuthorDate: Sat Apr 29 17:28:30 2023 +0000 ipv6: Flip ClientUseIPv6 to 1 Fixes #40785 Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- changes/ticket40785 | 4 ++++ doc/man/tor.1.txt | 2 +- src/app/config/config.c | 2 +- 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/changes/ticket40785 b/changes/ticket40785 new file mode 100644 index 0000000000..998120011d --- /dev/null +++ b/changes/ticket40785 @@ -0,0 +1,4 @@ + o Minor feature (client, IPv6): + - Make client able to pick IPv6 relays by default now meaning ClientUseIPv6 + option now defaults to 1. Closes ticket 40785. + diff --git a/doc/man/tor.1.txt b/doc/man/tor.1.txt index 57992cd8d2..755cdfee5c 100644 --- a/doc/man/tor.1.txt +++ b/doc/man/tor.1.txt @@ -1180,7 +1180,7 @@ The following options are useful only for clients (that is, if entry nodes over IPv6. For IPv6 only hosts, you need to also set **ClientUseIPv4** to 0 to disable IPv4. Note that clients configured with an IPv6 address in a **Bridge**, proxy, or pluggable transportline will - try connecting over IPv6 even if **ClientUseIPv6** is set to 0. (Default: 0) + try connecting over IPv6 even if **ClientUseIPv6** is set to 0. (Default: 1) [[ConnectionPadding]] **ConnectionPadding** **0**|**1**|**auto**:: This option governs Tor's use of padding to defend against some forms of diff --git a/src/app/config/config.c b/src/app/config/config.c index 66a8fe5853..c680946c49 100644 --- a/src/app/config/config.c +++ b/src/app/config/config.c @@ -375,7 +375,7 @@ static const config_var_t option_vars_[] = { OBSOLETE("ClientAutoIPv6ORPort"), V(ClientRejectInternalAddresses, BOOL, "1"), V(ClientTransportPlugin, LINELIST, NULL), - V(ClientUseIPv6, BOOL, "0"), + V(ClientUseIPv6, BOOL, "1"), V(ClientUseIPv4, BOOL, "1"), V(ConfluxEnabled, AUTOBOOL, "auto"), V(ConnLimit, POSINT, "1000"), -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor] branch main updated (6bf56ac301 -> 8eae9f17ae)
by gitolite role 24 May '23

24 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository tor. from 6bf56ac301 Merge branch 'tor-gitlab/mr/703' new 0222fc4d71 add new metrics entry for cert expiration new 0c634999c1 don't emit key expiration metric instead of setting it to zero new 21ec9017f6 Merge branch 'tor-gitlab/mr/698' new 8eae9f17ae metrics: Add ticket 40546 changes file and code fix The 4 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: changes/ticket40546 | 3 +++ src/feature/relay/relay_metrics.c | 29 +++++++++++++++++++++++++++++ src/feature/relay/relay_metrics.h | 2 ++ 3 files changed, 34 insertions(+) create mode 100644 changes/ticket40546 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 4

[tor] branch main updated (34da50718a -> 6bf56ac301)
by gitolite role 24 May '23

24 May '23

This is an automated email from the git hooks/post-receive script. dgoulet pushed a change to branch main in repository tor. from 34da50718a fix minor typos in conflux and pow areas new bbb3396d79 Add test for \r in directory parsing new c5889d3f15 Test \r more effectively using 2 lines new 738785ead8 Test both \r and \r\n with the expected failure conditions added new 6bf56ac301 Merge branch 'tor-gitlab/mr/703' The 4 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: src/test/test_parsecommon.c | 45 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 45 insertions(+) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 4

[Git][tpo/applications/tor-browser-build][main] Bug 40866: Remove ansible from README
by Pier Angelo Vendrame (＠pierov) 24 May '23

24 May '23

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: d94b4545 by Nicolas Vigier at 2023-05-24T13:24:07+02:00 Bug 40866: Remove ansible from README - - - - - 1 changed file: - README Changes: ===================================== README ===================================== @@ -156,18 +156,9 @@ Automated builds using tbb-testsuite ------------------------------------ The Tor Browser testsuite scripts can also be used to do nightly builds -and publish the build logs. The recommended way to do that is to use -the ansible roles from the tools/ansible directory. See next section -for details. - - -Using ansible to set up a nightly build machine ------------------------------------------------ - -The directory tools/ansible contains some ansible roles to set up a -nightly build machine. You can look at the playbook defined in -boklm-tbb-nightly-build.yml and variables in group_vars/boklm-tbb-nightly/ -for an example of how it can be used. +and publish the build logs. This page has some information about the +setup we use for nightly builds: +https://gitlab.torproject.org/tpo/applications/tor-browser/-/wikis/Nightly_Builds_Setup Signing builds View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.11.0esr-12.5-1] fixup! Bug 23247: Communicating security expectations for .onion
by Pier Angelo Vendrame (＠pierov) 24 May '23

24 May '23

Pier Angelo Vendrame pushed to branch tor-browser-102.11.0esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 4c0986cb by cypherpunks1 at 2023-05-23T14:06:01-08:00 fixup! Bug 23247: Communicating security expectations for .onion Bug 33298: Warn when submitting form data from http onion sites over an insecure connection - - - - - 1 changed file: - dom/html/HTMLFormElement.cpp Changes: ===================================== dom/html/HTMLFormElement.cpp ===================================== @@ -893,7 +893,10 @@ nsresult HTMLFormElement::DoSecureToInsecureSubmitCheck(nsIURI* aActionURL, formIsHTTPS = OwnerDoc()->GetDocumentURI()->SchemeIs("https"); } if (!formIsHTTPS) { - return NS_OK; + bool formIsOnion = nsMixedContentBlocker::IsPotentiallyTrustworthyOnion(OwnerDoc()->GetDocumentURI()); + if (!formIsOnion) { + return NS_OK; + } } if (nsMixedContentBlocker::IsPotentiallyTrustworthyLoopbackURL(aActionURL)) { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/4c0986c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/4c0986c… You're receiving this email because of your account on gitlab.torproject.org.

1 0