[tor-commits] [tor/master] reformat 0.2.7.1-alpha changelog
nickm at torproject.org
nickm at torproject.org
Thu Apr 30 19:30:26 UTC 2015
commit 411049d0d44963b8d9ec6f96c8dc62a106d6cc30
Author: Nick Mathewson <nickm at torproject.org>
Date: Thu Apr 30 15:30:20 2015 -0400
reformat 0.2.7.1-alpha changelog
---
ChangeLog | 247 ++++++++++++++++++++++++++++++-------------------------------
1 file changed, 121 insertions(+), 126 deletions(-)
diff --git a/ChangeLog b/ChangeLog
index 6a86744..250fb2e 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,67 +1,94 @@
Changes in version 0.2.7.1-alpha - 2015-05-??
Tor 0.2.7.1-alpha is the first alpha release in its series.
+ o New system requirements:
+ - Tor no longer includes workarounds for Libevent versions before
+ 1.3e. Libevent 2.0 or later is recommended. Closes ticket 15248.
+
o Major features (controller):
- Add the ADD_ONION and DEL_ONION commands that allows the creation
and management of hidden services via the controller. Closes
ticket 6411.
- New "GETINFO onions/current" and "GETINFO onions/detached" to get
- information about hidden services created via the controller.
- Part of ticket 6411.
- - New HSFETCH command to launch a request for a hidden service descriptor.
- Closes ticket 14847.
+ information about hidden services created via the controller. Part
+ of ticket 6411.
+ - New HSFETCH command to launch a request for a hidden service
+ descriptor. Closes ticket 14847.
o Major bugfixes (hidden services):
- - Revert commit that made directory authority assign the HSDir flag to
- relay without a DirPort which is bad because relay can't handle
+ - Revert commit that made directory authority assign the HSDir flag
+ to relay without a DirPort which is bad because relay can't handle
BEGIN_DIR cells. Fixes bug 15850; bugfix on tor-0.2.6.3-alpha.
- o Minor features (HS popularity countermeasure):
- - To avoid leaking HS popularity, don't cycle the introduction point
- when we've handled a fixed number of INTRODUCE2 cells but instead
- cycle it when a random value of introductions is reached thus making
- it more difficult for an attacker to find out the amount of clients
- that has passed through the introduction point for a specific HS.
- Closes ticket 15745.
+ o Minor features (clock-jump tolerance):
+ - Recover better when our clock jumps back many hours, like might
+ happen for Tails or Whonix users who start with a very wrong
+ hardware clock, use Tor to discover a more accurate time, and then
+ fix their clock. Resolves part of ticket 8766. [I'd call this a
+ major feature if it actually fixed all of the issues.]
o Minor features (command-line interface):
- - Make --hash-password imply --hush to prevent unnecessary noise. Closes
- ticket 15542.
+ - Make --hash-password imply --hush to prevent unnecessary noise.
+ Closes ticket 15542.
+ - Print a warning whenever we find a relative file path being used
+ as torrc option. Resolves issue 14018.
+ - The "--hash-password" option now implies "--hush" to avoid
+ needless noise. Closes ticket 15542. Patch from "cypherpunks".
+
+ o Minor features (controller):
+ - Controllers can now use GETINFO hs/client/desc/id/... to retrieve
+ items from the client's hidden service descriptor cache. Closes
+ ticket 14845.
- o Minor features (controller)
- - Controllers can now use GETINFO hs/client/desc/id/... to
- retrieve items from the client's hidden service descriptor
- cache. Closes ticket 14845.
+ o Minor features (controller):
+ - Add DirAuthority lines for default directory authorities to output
+ of the GETINFO config/defaults controller command if not already
+ present. Implements ticket 14840.
+ - Implement a new controller command "status/fresh-relay-descs" to
+ fetch a descriptor/extrainfo pair that was generated on demand
+ just for the controller's use. Implements ticket 14784.
o Minor features (DoS-resistance):
- Make it harder for attackers to overwhelm hidden services with
introductions, by blocking multiple introduction requests on the
same circuit. Resolves ticket 15515.
+ o Minor features (geoip):
+ - Update geoip to the April 8 2015 Maxmind GeoLite2 Country database.
+ - Update geoip6 to the April 8 2015 Maxmind GeoLite2
+ Country database.
+
+ o Minor features (HS popularity countermeasure):
+ - To avoid leaking HS popularity, don't cycle the introduction point
+ when we've handled a fixed number of INTRODUCE2 cells but instead
+ cycle it when a random value of introductions is reached thus
+ making it more difficult for an attacker to find out the amount of
+ clients that has passed through the introduction point for a
+ specific HS. Closes ticket 15745.
+
o Minor features (logging):
- Include the Tor version in all LD_BUG log messages, since people
tend to cut and paste those into the bugtracker. Implements
ticket 15026.
o Minor features (pluggable transports):
- - When launching managed pluggable transports, setup a valid open stdin
- in the child process that can be used to detect if tor has terminated.
- The "TOR_PT_EXIT_ON_STDIN_CLOSE" enviornment variable can be used by
- implementations to detect this new behavior. Resolves ticket 15435.
+ - When launching managed pluggable transports, setup a valid open
+ stdin in the child process that can be used to detect if tor has
+ terminated. The "TOR_PT_EXIT_ON_STDIN_CLOSE" enviornment variable
+ can be used by implementations to detect this new behavior.
+ Resolves ticket 15435.
- When launching managed pluggable transports on linux systems,
- attempt to have the kernel deliver a SIGTERM on tor exit if
- the pluggable transport process is still running. Resolves
+ attempt to have the kernel deliver a SIGTERM on tor exit if the
+ pluggable transport process is still running. Resolves
ticket 15471.
-
o Minor features (testing):
- - Add make rule `check-changes` to verify the format of changes files.
- Closes ticket 15180.
- - Add unit tests for control_event_is_interesting().
- Add a compile-time check that the number of events doesn't exceed
- the capacity of control_event_t.event_mask.
- Closes ticket 15431, checks for bugs similar to 13085.
- Patch by "teor".
+ - Add make rule `check-changes` to verify the format of changes
+ files. Closes ticket 15180.
+ - Add unit tests for control_event_is_interesting(). Add a compile-
+ time check that the number of events doesn't exceed the capacity
+ of control_event_t.event_mask. Closes ticket 15431, checks for
+ bugs similar to 13085. Patch by "teor".
- Commandline argument tests moved to Stem. Resolves ticket 14806.
- Integrate the ntor, backtrace and zero lengths keys tests into the
automake test suite. Closes ticket 15344.
@@ -73,60 +100,35 @@ Changes in version 0.2.7.1-alpha - 2015-05-??
- Add a test to verify that the compiler does not eliminate our
memwipe() implementation. Closes ticket 15377.
- o Minor features (controller):
- - Add DirAuthority lines for default directory authorities to output
- of the GETINFO config/defaults controller command if not already
- present. Implements ticket 14840.
- - Implement a new controller command "status/fresh-relay-descs" to
- fetch a descriptor/extrainfo pair that was generated on demand
- just for the controller's use. Implements ticket 14784.
-
- o Minor features (command-line interface):
- - Print a warning whenever we find a relative
- file path being used as torrc option. Resolves issue 14018.
- - The "--hash-password" option now implies "--hush" to avoid needless
- noise. Closes ticket 15542. Patch from "cypherpunks".
-
- o Minor features (clock-jump tolerance):
- - Recover better when our clock jumps back many hours, like might
- happen for Tails or Whonix users who start with a very wrong
- hardware clock, use Tor to discover a more accurate time, and then
- fix their clock. Resolves part of ticket 8766.
- [I'd call this a major feature if it actually fixed all of the issues.]
-
- o Minor features (geoip):
- - Update geoip to the April 8 2015 Maxmind GeoLite2 Country database.
- - Update geoip6 to the April 8 2015 Maxmind GeoLite2 Country database.
-
- o Minor bugfixes (statistics):
- - Disregard the ConnDirectionStatistics torrc options when Tor is
- not a relay since in that mode of operation no sensible data is
- being collected and because Tor might run into measurement hiccups
- when running as a client for some time, then becoming a relay. Fixes
- bug 15604; bugfix on 0.2.2.35.
-
o Minor bugfixes (build):
- - Improve out-of-tree builds by making non-standard rules work and clean up
- additional files and directories. Fixes bug 15053; bugfix on
- 0.2.7.0-alpha.
+ - Improve out-of-tree builds by making non-standard rules work and
+ clean up additional files and directories. Fixes bug 15053; bugfix
+ on 0.2.7.0-alpha.
o Minor bugfixes (command-line interface):
- When "--quiet" is provided along with "--validate-config", do not
- write anything to stdout on success. Fixes bug 14994; bugfix on
- 0.2.3.3-alpha.
+ write anything to stdout on success. Fixes bug 14994; bugfix
+ on 0.2.3.3-alpha.
- When complaining about bad arguments to "--dump-config", use
stderr, not stdout.
o Minor bugfixes (configuration, unit tests):
- Only add the default fallback directories when the DirAuthorities,
AlternateDirAuthority, and FallbackDir directory config options
- are set to their defaults.
- The default fallback directory list is currently empty, this fix
- will only change tor's behaviour when it has default fallback
- directories.
- Includes unit tests for consider_adding_dir_servers().
- Fixes bug 15642; bugfix on 90f6071d8dc0 in 0.2.4.7-alpha.
- Patch by "teor".
+ are set to their defaults. The default fallback directory list is
+ currently empty, this fix will only change tor's behaviour when it
+ has default fallback directories. Includes unit tests for
+ consider_adding_dir_servers(). Fixes bug 15642; bugfix on
+ 90f6071d8dc0 in 0.2.4.7-alpha. Patch by "teor".
+
+ o Minor bugfixes (correctness):
+ - Remove side-effects from tor_assert() calls. This was harmless,
+ because we never disable assertions, but it is bad style and
+ unnecessary. Fixes bug 15211; bugfix on 0.2.5.5, 0.2.2.36,
+ and 0.2.0.10.
+ - For correctness, avoid modifying a constant string in
+ handle_control_postdescriptor. Fixes bug 15546; bugfix
+ on 0.1.1.16-rc.
o Minor bugfixes (hidden service):
- Remove an extraneous newline character from the end of hidden
@@ -135,61 +137,55 @@ Changes in version 0.2.7.1-alpha - 2015-05-??
o Minor bugfixes (interface):
- Print usage information for --dump-config when it is used without
an argument. Also, fix the error message to use different wording
- and add newline at the end. Fixes bug 15541; bugfix on 0.2.5.1-alpha.
+ and add newline at the end. Fixes bug 15541; bugfix
+ on 0.2.5.1-alpha.
o Minor bugfixes (logs):
- When building Tor under Clang, do not include an extra set of
- parentheses in log messages that include function names.
- Fixes bug 15269; bugfix on every released version of Tor when
- compiled with recent enough Clang.
-
- o Minor bugfixes (test networks)
- - When self-testing reachability, use ExtendAllowPrivateAddresses
- to determine if local/private addresses imply reachability.
- The previous fix used TestingTorNetwork, which implies
+ parentheses in log messages that include function names. Fixes bug
+ 15269; bugfix on every released version of Tor when compiled with
+ recent enough Clang.
+
+ o Minor bugfixes (network):
+ - When attempting to use fallback technique for network interface
+ lookup, disregard loopback and multicast addresses since they are
+ unsuitable for public communications.
+
+ o Minor bugfixes (statistics):
+ - Disregard the ConnDirectionStatistics torrc options when Tor is
+ not a relay since in that mode of operation no sensible data is
+ being collected and because Tor might run into measurement hiccups
+ when running as a client for some time, then becoming a relay.
+ Fixes bug 15604; bugfix on 0.2.2.35.
+
+ o Minor bugfixes (test networks):
+ - When self-testing reachability, use ExtendAllowPrivateAddresses to
+ determine if local/private addresses imply reachability. The
+ previous fix used TestingTorNetwork, which implies
ExtendAllowPrivateAddresses, but this excluded rare configs where
ExtendAllowPrivateAddresses is set but TestingTorNetwork is not.
- Fixes bug 15771; bugfix on 0.2.6.1-alpha.
- Patch by "teor", issue discovered by CJ Ess.
+ Fixes bug 15771; bugfix on 0.2.6.1-alpha. Patch by "teor", issue
+ discovered by CJ Ess.
o Minor bugfixes (testing):
- - Set the severity correctly when testing get_interface_addresses_ifaddrs()
- and get_interface_addresses_win32(), so that the tests fail gracefully
+ - Set the severity correctly when testing
+ get_interface_addresses_ifaddrs() and
+ get_interface_addresses_win32(), so that the tests fail gracefully
instead of triggering an assertion. Fixes bug 15759; bugfix on
0.2.6.3-alpha. Reported by Nicolas Derive.
- - Check for matching value in server response in ntor_ref.py.
- Fixes bug 15591; bugfix on 0.2.4.8-alpha. Reported and fixed
+ - Check for matching value in server response in ntor_ref.py. Fixes
+ bug 15591; bugfix on 0.2.4.8-alpha. Reported and fixed
by "joelanders".
- o Minor bugfixes (correctness):
- - Remove side-effects from tor_assert() calls. This was harmless,
- because we never disable assertions, but it is bad style and
- unnecessary. Fixes bug 15211; bugfix on 0.2.5.5, 0.2.2.36, and
- 0.2.0.10.
- - For correctness, avoid modifying a constant string in
- handle_control_postdescriptor. Fixes bug 15546; bugfix on
- 0.1.1.16-rc.
-
- o Minor bugfixes (network):
- - When attempting to use fallback technique for network interface
- lookup, disregard loopback and multicast addresses since they are
- unsuitable for public communications.
-
o Code simplification and refactoring:
- - Move the hacky fallback code out of get_interface_address6()
- into separate function and get it covered with unit-tests. Resolves
+ - Move the hacky fallback code out of get_interface_address6() into
+ separate function and get it covered with unit-tests. Resolves
ticket 14710.
- Refactor hidden service client-side cache lookup to intelligently
report its various failure cases, and disentangle failure cases
involving a lack of introduction points. Closes ticket 14391.
- - Use our own Base64 encoder instead of OpenSSL's, to allow more control
- over the output. Part of ticket 15652.
-
- o Removed code:
- - Remove `USE_OPENSSL_BASE64` and the corresponding fallback code and
- always use the internal Base64 decoder. The internal decoder has been
- part of tor since tor-0.2.0.10-alpha, and no one should be using the
- OpenSSL one. Part of ticket 15652.
+ - Use our own Base64 encoder instead of OpenSSL's, to allow more
+ control over the output. Part of ticket 15652.
o Documentation:
- Improve the descriptions of statistics-related torrc options in
@@ -201,22 +197,21 @@ Changes in version 0.2.7.1-alpha - 2015-05-??
Previously, we had used "router descriptor", "server descriptor",
and "relay descriptor" interchangeably. Part of ticket 14987.
- o New system requirements:
- - Tor no longer includes workarounds for Libevent versions before 1.3e.
- Libevent 2.0 or later is recommended. Closes ticket 15248.
-
o Removed code:
+ - Remove `USE_OPENSSL_BASE64` and the corresponding fallback code
+ and always use the internal Base64 decoder. The internal decoder
+ has been part of tor since tor-0.2.0.10-alpha, and no one should
+ be using the OpenSSL one. Part of ticket 15652.
- Remove the 'tor_strclear()' function; use memwipe() instead.
Closes ticket 14922.
o Removed features:
- - Remove the (seldom-used) DynamicDHGroups feature. For
- anti-fingerprinting we now recommend pluggable transports; for
- forward-secrecy in TLS, we now use the P-256 group.
- Closes ticket 13736.
+ - Remove the (seldom-used) DynamicDHGroups feature. For anti-
+ fingerprinting we now recommend pluggable transports; for forward-
+ secrecy in TLS, we now use the P-256 group. Closes ticket 13736.
- Remove the undocumented "--digests" command-line option. It
- complicated our build process, caused subtle build issues
- on multiple platforms, and is now redundant since we started
+ complicated our build process, caused subtle build issues on
+ multiple platforms, and is now redundant since we started
including git version identifiers. Closes ticket 14742.
- Tor no longer contains workarounds for stat files generated by
super-old versions of Tor that didn't choose guards sensibly.
More information about the tor-commits
mailing list