commit 38ee959ea9f7b9a213487e37433a000b7e0df54d Author: Nick Mathewson nickm@torproject.org Date: Wed Aug 31 01:02:38 2011 -0400
First draft of an 0.2.3.3-alpha changelog --- ChangeLog | 135 +++++++++++++++++++++++++++++++++++++++++++++ changes/bug1692 | 5 -- changes/bug2930 | 5 -- changes/bug3550 | 5 -- changes/bug3607 | 15 ----- changes/bug3615 | 3 - changes/bug3643 | 4 - changes/bug3700 | 6 -- changes/bug3732 | 7 -- changes/bug3747 | 6 -- changes/bug3752 | 5 -- changes/bug3803 | 4 - changes/bug3804 | 9 --- changes/bug3805 | 5 -- changes/bug3814 | 4 - changes/fmt_addr | 4 - changes/geoip-august2011 | 3 - changes/le-win-threads | 3 - changes/microdescs_on | 5 -- changes/msvc_lround | 4 - changes/nmake | 3 - changes/optimistic-client | 9 --- changes/prop171 | 22 ------- changes/require-le-2.0.13 | 12 ---- 24 files changed, 135 insertions(+), 148 deletions(-)
diff --git a/ChangeLog b/ChangeLog index 848f963..bbefe24 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,138 @@ +Changes in version 0.2.3.3-alpha - 2011-0?-?? + Tor 0.2.3.3-alpha adds a new major "stream isolation" feature to + improve Tor's security, and provides client-side support for several + the microdescriptor and optimistic data features introduced earlier in + the 0.2.3.x series. Also, it has numerous critical bugfixes in the + (optional) bufferevent-based networking backend. + + o Major features: + - You can now configure Tor so that streams from different + applications are isolated on different circuits, to prevent an + attacker who sees your streams leaving an exit node from linking + your sessions to one another. To do this, choose some way to + distinguish the applications: have them connect to different + SocksPorts, or have one of them use SOCKS4 while the other uses + SOCKS5, or have them pass different authentication strings to the + SOCKS proxy. Then, use the new SocksPort syntax to configure the + degree of isolation you need. This implements Proposal 171. + - The microdescriptor system is now on by default for clients. This + allows clients to download a much smaller amount of directory + information. To disable it, set "UseMicrodescriptors 0" in your + torrc file. + - Tor's firewall-helper feature, introduced in 0.2.3.1-alpha, now + supports Windows. + - When using an exit nodes running 0.2.3.x, clients can now + "optimistically" send data before the exit node reports that the + stream has opened. This saves a round trip when starting + connections where the client speaks first. This behavior is + controlled by a (currently disabled) consensus parameter. To turn + it on or off manually, use the "OptimisticData" torrc + option. Implements proposal 181; code by Ian Goldberg. + + o Major bugfixes (bufferevents): + - When using IOCP on windows, we need to enable Libevent windows + threading support. Bugfix on 0.2.3.1-alpha. + - The IOCP backend now works even when the user has not specified + the (internal, debbuging-only) _UseFilteringSSLBufferevents option. + Fixes part of bug 3752; bugfix on 0.2.3.1-alpha. + - Correctly record the bytes we've read and written when using + bufferevents, so that we can include them in our bandwidth history + and advertised bandwidth. Fixes bug 3803; bugfix on 0.2.3.1-alpha. + - Apply rate-limiting only at the bottom of a chain of filtering + bufferevents. This prevents us from filling up internal read + buffers and violating rate-limits when filtering bufferevents + are enabled. Bugfix on 0.2.3.1-alpha; fixes part of bug 3804. + - Add high-watermarks to the output buffers for filtered + bufferevents. This prevents us from filling up internal write + buffers and wasting CPU cycles when filtering bufferevents are + enabled. Bugfix on 0.2.3.1-alpha; fixes part of bug 3804. + - Correctly notice when data has been written from a bufferevent + without flushing it completely. Bugfix on 0.2.3.1-alpha; fixes + bug 3805. + - Fix a bug where server-side tunneled bufferevent-based directory + streams would get closed prematurely. Fixes 3814, bugfix on + 0.2.3.1-alpha. + + o Major bugfixes (on 0.2.2.x and earlier): [stet] + - If we're configured to write our ControlPorts to disk, only write + them after switching UID and creating the data directory. This way, + we don't fail when starting up with a nonexistent DataDirectory + and a ControlPortWriteToFile setting based on that directory. Fixes + bug 3747; bugfix on Tor 0.2.2.26-beta. + + o Minor features: + - There's a new syntax for specifying multiple client ports (such as + SOCKSPort, TransPort, DNSPort, NATDPort): you can now just declare + multiple *Port entries with full addr:port syntax on each. + The old *ListenAddress format is still supported, but you can't + mix it with the new *Port syntax. + - Added a new CONF_CHANGED event so that controllers can be notified + of any configuration changes made by other controllers, or by the + user. Implements #1692. + - Use evbuffer_copyout() in inspect_evbuffer(). This fixes a memory + leak when using bufferevents, and lets Libevent worry about how to + best copy data out of a buffer. + - Replace files in stats/ rather than appending to them. Now that we + include statistics in extra-info descriptors, it makes no sense to + keep old statistics forever. Implements #2930. + + o Minor features (build compatibility): + - Limited, experimental support for building with nmake and MSVC. + - Provide a substitute implementation of lround() for MSVC, which + apparently lacks it. Patch from Gisle Vanem. + + o Minor features: [stet] + - Update to the August 2 2011 Maxmind GeoLite Country database. + + o Minor bugfixes (on 0.2.3.x-alpha): + - Fix a spurious warning when parsing SOCKS requests with + bufferevents enabled. Fixes bug 3615; bugfix on 0.2.3.2-alpha. + - Get rid of a harmless warning that could happen on relays running + with bufferevents. The warning was caused by someone doing an http + request to a relay's orport. Also don't warn for a few related + non-errors. Fixes bug 3700; bugfix on 0.2.3.1-alpha. + + o Minor bugfixes (on 2.2.x and earlier): + - The "--quiet" and "--hush" options now apply not only to Tor's + behavior before logs are configured, but also to Tor's behavior in + the absense of configured logs. Fixes bug 3550; bugfix on + 0.2.0.10-alpha. + + o Minor bugfixes (on 2.2.x and earlier): [stet] + - Write several files in text mode, on OSes that distinguish text + mode from binary mode (namely, Windows). These files are: + 'buffer-stats', 'dirreq-stats', and 'entry-stats' on relays + that collect those statistics; 'client_keys' and 'hostname' for + hidden services that use authentication; and (in the tor-gencert + utility) newly generated identity and signing keys. Previously, + we wouldn't specify text mode or binary mode, leading to an + assertion failure. Fixes bug 3607. Bugfix on 0.2.1.1-alpha (when + the DirRecordUsageByCountry option which would have triggered + the assertion failure was added), although this assertion failure + would have occurred in tor-gencert on Windows in 0.2.0.1-alpha. + - Selectively disable deprecation warnings on OS X because Lion + started deprecating the shipped copy of openssl. Fixes bug 3643. + - Remove an extra pair of quotation marks around the error + message in control-port STATUS_GENERAL BUG events. Bugfix on + 0.1.2.6-alpha; fixes bug 3732. + - When unable to format an address as a string, report its value + as "???" rather than reusing the last formatted address. Bugfix + on 0.2.1.5-alpha. + + o Code simplifications and refactoring: + - Rewrote the listener-selection logic so that parsing which ports + we want to listen on is now separate form binding to the ports + we want. + + o Build changes: + - Building Tor with bufferevent support now requires Libevent + 2.0.13-stable or later. Previous versions of Libevent had bugs in + SSL-related bufferevents and related issues that would make Tor + work badly with bufferevents. Requiring 2.0.13-stable also allows + Tor with bufferevents to take advantage of Libevent APIs + introduced after 2.0.8-rc. + + Changes in version 0.2.2.32 - 2011-08-27 The Tor 0.2.2 release series is dedicated to the memory of Andreas Pfitzmann (1958-2010), a pioneer in anonymity and privacy research, diff --git a/changes/bug1692 b/changes/bug1692 deleted file mode 100644 index c2a71cc..0000000 --- a/changes/bug1692 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features: - - CONF_CHANGED event is provided so that controllers can be notified - of any configuration changes made by other controllers/SETCONF/HUP. - Implements #1692. - diff --git a/changes/bug2930 b/changes/bug2930 deleted file mode 100644 index 8d28664..0000000 --- a/changes/bug2930 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor features: - - Replace files in stats/ rather than appending to them. Now that we - include statistics in extra-info descriptors, it makes no sense to - keep old statistics forever. Implements #2930. - diff --git a/changes/bug3550 b/changes/bug3550 deleted file mode 100644 index 658179f..0000000 --- a/changes/bug3550 +++ /dev/null @@ -1,5 +0,0 @@ - o Minor bugfixes: - - The "--quiet" and "--hush" options now apply not only to Tor's - behavior before user-configured logs are added, but also to - Tor's behavior in the absense of configured logs. Fixes bug - 3550; bugfix on 0.2.0.10-alpha. diff --git a/changes/bug3607 b/changes/bug3607 deleted file mode 100644 index 5ece219..0000000 --- a/changes/bug3607 +++ /dev/null @@ -1,15 +0,0 @@ - o Minor bugfixes: - - - Write several files in text mode, on OSes that distinguish text - mode from binary mode (namely, Windows). These files are: - buffer-stats, dirreq-stats, and entry-stats on relays that collect - those statistics; client_keys and hostname files for hidden - services that use authentication; and (in the tor-gencert utility) - newly generated identity and signing keys. Previously, we - wouldn't specify text mode or binary mode, leading to an assertion - failure. Fixes bug 3607. Bugfix on 0.2.1.1-alpha (when the - DirRecordUsageByCountry option which would have triggered the - assertion failure was added), although this assertion failure - would have occurred in tor-gencert on Windows in 0.2.0.1-alpha. - - diff --git a/changes/bug3615 b/changes/bug3615 deleted file mode 100644 index 704b3fa..0000000 --- a/changes/bug3615 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor bugfixes: - - Fix a spurious warning when parsing SOCKS requests with - bufferevents enabled. Fixes bug 3615; bugfix on 0.2.3.2-alpha. diff --git a/changes/bug3643 b/changes/bug3643 deleted file mode 100644 index 86bd920..0000000 --- a/changes/bug3643 +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes: - - Selectively disable deprecation warnings on OS X because Lion started - deprecating the shipped copy of openssl. Fixes bug 3643. - diff --git a/changes/bug3700 b/changes/bug3700 deleted file mode 100644 index cef7296..0000000 --- a/changes/bug3700 +++ /dev/null @@ -1,6 +0,0 @@ - o Minor bugfixes: - - Get rid of a harmless warning that could happen on relays running - with bufferevents. The warning was caused by someone doing an http - request to a relay's orport. Also don't warn for a few related - non-errors. Fixes bug 3700; bugfix on 0.2.3.1-alpha. - diff --git a/changes/bug3732 b/changes/bug3732 deleted file mode 100644 index 7a71d1a..0000000 --- a/changes/bug3732 +++ /dev/null @@ -1,7 +0,0 @@ - o Major bugfixes: - - - Remove an extra pair of quotation marks around the error - message in control-port STATUS_GENERAL BUG events. Bugfix on - 0.1.2.6-alpha; fixes bug 3732. - - diff --git a/changes/bug3747 b/changes/bug3747 deleted file mode 100644 index 052dab1..0000000 --- a/changes/bug3747 +++ /dev/null @@ -1,6 +0,0 @@ - o Major bugfixes: - - Write control ports to disk only after switching UID and - creating the data directory. This way, we don't fail when - starting up with a nonexistant DataDirectory and a - ControlPortWriteToFile setting based on that directory. Fixes - bug 3747; bugfix on Tor 0.2.2.26-beta. \ No newline at end of file diff --git a/changes/bug3752 b/changes/bug3752 deleted file mode 100644 index 270f155..0000000 --- a/changes/bug3752 +++ /dev/null @@ -1,5 +0,0 @@ - o Major bugfixes: - - The IOCP backend now works even when the user has not specified - the (internal, debbuging-only) _UseFilteringSSLBufferevents option. - Fixes part of bug 3752; bugfix on 0.2.3.1-alpha. - diff --git a/changes/bug3803 b/changes/bug3803 deleted file mode 100644 index 2d50f0c..0000000 --- a/changes/bug3803 +++ /dev/null @@ -1,4 +0,0 @@ - o Major bugfixes (bufferevents): - - Correctly record the bytes we've read and written when using - bufferevents, so that we can include them in our bandwidth history - and advertised bandwidth. Fixes bug 3803; bugfix on 0.2.3.1-alpha. diff --git a/changes/bug3804 b/changes/bug3804 deleted file mode 100644 index 7ad091c..0000000 --- a/changes/bug3804 +++ /dev/null @@ -1,9 +0,0 @@ - o Major bugfixes (bufferevents): - - Apply rate-limiting only at the bottom of a chain of filtering - bufferevents. This prevents us from filling up internal read - buffers and violating rate-limits when filtering bufferevents - are enabled. Bugfix on 0.2.3.1-alpha; fixes part of bug 3804. - - Add high-watermarks to the output buffers for filtered - bufferevents. This prevents us from filling up internal write - buffers and wasting CPU cycles when filtering bufferevents are - enabled. Bugfix on 0.2.3.1-alpha; fixes part of bug 3804. diff --git a/changes/bug3805 b/changes/bug3805 deleted file mode 100644 index 9d12b81..0000000 --- a/changes/bug3805 +++ /dev/null @@ -1,5 +0,0 @@ - o Major bugfixes (bufferevents): - - Correctly notice when data has been written from a bufferevent - without flushing it completely. Bugfix on 0.2.3.1-alpha; fixes - bug 3805. - diff --git a/changes/bug3814 b/changes/bug3814 deleted file mode 100644 index 3db0e3e..0000000 --- a/changes/bug3814 +++ /dev/null @@ -1,4 +0,0 @@ - o Major bugfixes (bufferevents): - - Fix a bug where server-side tunneled bufferevent-based directory - streams would get closed prematurely. Fixes 3814, bugfix on - 0.2.3.1-alpha. diff --git a/changes/fmt_addr b/changes/fmt_addr deleted file mode 100644 index b88c9e1..0000000 --- a/changes/fmt_addr +++ /dev/null @@ -1,4 +0,0 @@ - o Minor bugfixes: - - When unable to format an address as a string, report its value - as "???" rather than reusing the last formatted address. Bugfix - on 0.2.1.5-alpha. diff --git a/changes/geoip-august2011 b/changes/geoip-august2011 deleted file mode 100644 index 6de8b0f..0000000 --- a/changes/geoip-august2011 +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features: - - Update to the August 2 2011 Maxmind GeoLite Country database. - diff --git a/changes/le-win-threads b/changes/le-win-threads deleted file mode 100644 index 5be44a2..0000000 --- a/changes/le-win-threads +++ /dev/null @@ -1,3 +0,0 @@ - o Major bugfixes (IOCP): - - When using IOCP on windows, we need to enable Libevent windows threading - support. Bugfix on 0.2.3.1-alpha. diff --git a/changes/microdescs_on b/changes/microdescs_on deleted file mode 100644 index 8299c1d..0000000 --- a/changes/microdescs_on +++ /dev/null @@ -1,5 +0,0 @@ - o Major features: - - The microdescriptor system is now on by default for clients. This - allows clients to use Tor while downloading a much smaller amount - of directory information. To disable it, set "UseMicrodescriptors 0" - in your torrc file. diff --git a/changes/msvc_lround b/changes/msvc_lround deleted file mode 100644 index e4aea95..0000000 --- a/changes/msvc_lround +++ /dev/null @@ -1,4 +0,0 @@ - o Build fixes: - - Provide a substitute implementation of lround() for MSVC, which - apparently lacks it. Patch from Gisle Vanem. - diff --git a/changes/nmake b/changes/nmake deleted file mode 100644 index 47f4f8f..0000000 --- a/changes/nmake +++ /dev/null @@ -1,3 +0,0 @@ - o Minor features (build compatibility): - - Limited, experimental support for building with nmake and MSVC. - diff --git a/changes/optimistic-client b/changes/optimistic-client deleted file mode 100644 index 9a21a41..0000000 --- a/changes/optimistic-client +++ /dev/null @@ -1,9 +0,0 @@ - o Major features: - - When using an exit nodes running 0.2.3.1-alpha and later, - clients can now "optimistically" send data on a stream before - the exit node reports that the stream has opened. This can save - a round trip when starting connections with protocols where the - client speaks first. This behavior is controlled by a (currently - disabled) networkstatus consensus parameter. To turn it on or - off manually, use the "OptimisticData" torrc option. Implements - proposal 181; code by Ian Goldberg. diff --git a/changes/prop171 b/changes/prop171 deleted file mode 100644 index 91c463f..0000000 --- a/changes/prop171 +++ /dev/null @@ -1,22 +0,0 @@ - o Major features: - - You can now configure Tor so that streams from different - applications are isolated on different circuits, to prevent an - attacker who sees your streams leaving an exit node from linking - your sessions to one another. To do this, choose some way to - distinguish the applications -- have them connect to different - SocksPorts, or have one of them use SOCKS4 while the other uses - SOCKS5, or have them pass different authentication strings to - the SOCKS proxy. Then use the new SocksPort syntax to configure - the degree of isolation you need. This implements Proposal 171. - - o Minor features: - - There's a new syntax for specifying multiple client ports (such as - SOCKSPort, TransPort, DNSPort, NATDPort): you can now just declare - multiple ...Port entries with full addr:port syntax on each. - The old ...ListenAddress format is still supported, but you can't - mix it with the new SOCKSPort syntax. - - o Code simplifications and refactoring: - - Rewrote the listener-selection logic so that parsing which ports - we want to listen on is now separate form binding to the ports - we want. diff --git a/changes/require-le-2.0.13 b/changes/require-le-2.0.13 deleted file mode 100644 index 56e7b31..0000000 --- a/changes/require-le-2.0.13 +++ /dev/null @@ -1,12 +0,0 @@ - o Build changes: - - Building Tor with bufferevent support now requires Libevent - 2.0.13-stable or later. Previous versions of Libevent had bugs - in SSL-related bufferevents and related issues that would make - Tor work badly with bufferevents. Requiring 2.0.13-stable also - means that Tor with bufferevents can take advantage of Libevent - APIs introduced after 2.0.8-rc. - - o Minor bugfixes: - - Use evbuffer_copyout() in inspect_evbuffer(). This fixes a memory - leak, and lets Libevent worry about how to best copy data out - of a buffer.