nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-11 13:43:47 +01:00
Code Issues Packages Projects Releases Wiki Activity
858 Commits 53 Branches 630 Tags 125 MiB
00de055f43
Commit Graph

606 Commits

Author SHA1 Message Date
Roger Dingledine
ec96419109 let tls tolerate reallocing the buf 
and also remember the params for ssl_write if it returns wantread.


svn:r626
 2003-10-19 00:39:48 +00:00
Roger Dingledine
c627ba2632 first steps toward a WANTWRITE SSL_write tls bug fix 
how exactly the same do the arguments need to be? :(


svn:r625
 2003-10-18 08:00:19 +00:00
Roger Dingledine
9d3f2b232b another minor memory leak 
make dnsconn->address reflect what it's currently resolving


svn:r624
 2003-10-18 07:09:09 +00:00
Roger Dingledine
61e180ceb1 start to track down the 'peer has invalid cert' bug 
svn:r623
 2003-10-18 06:48:46 +00:00
Roger Dingledine
a73a3a21f7 no more memory leaks 
when you run it under normal operation
for as many as three minutes


svn:r622
 2003-10-18 04:18:26 +00:00
Roger Dingledine
a3962bf6fc fix two more memory problems 
one remains :)


svn:r621
 2003-10-18 03:23:26 +00:00
Roger Dingledine
af3fc006a5 clean up memory leaks, confusions 
still one memory leak remaining here.


svn:r620
 2003-10-18 02:18:22 +00:00
Roger Dingledine
2093f60760 we've been stomping on memory while reading config 
doesn't seem to have bitten us yet, but let's fix that :)


svn:r619
 2003-10-18 01:28:39 +00:00
Roger Dingledine
193383b70a log to stdout while parsing config, 
otherwise we log to nothing and give no feedback!


svn:r617
 2003-10-18 00:13:08 +00:00
Roger Dingledine
82aa621b47 rewrite close_logs so it could possibly work 
remove deadbeef memory-clobber testing (for now)


svn:r616
 2003-10-18 00:07:58 +00:00
Roger Dingledine
35dcfcb145 put a blank line in the directory, before the first router 
this makes it easier to read (at least for me)


svn:r613
 2003-10-17 10:24:58 +00:00
Roger Dingledine
f96f964a19 try to make cvs more stable for now. need to test this more in a bit. 
svn:r612
 2003-10-17 10:00:01 +00:00
Roger Dingledine
0b1afa951e reload the fingerprints file on HUP 
svn:r611
 2003-10-17 05:23:48 +00:00
Roger Dingledine
5c563939ef catch misconfigured machines that return hostname as fqdn 
svn:r610
 2003-10-17 04:48:20 +00:00
Nick Mathewson
f32c1c3127 Log TLS errors even harder 
svn:r604
 2003-10-15 23:50:25 +00:00
Nick Mathewson
f81178a312 Add more logging on some ssl errors. 
svn:r603
 2003-10-15 23:42:44 +00:00
Roger Dingledine
b3471bbc55 closing stdout *should* be safe (we'll see) 
svn:r601
 2003-10-15 19:27:51 +00:00
Nick Mathewson
ba9b542e93 Report delivery cell fullness correctly 
svn:r600
 2003-10-15 19:25:28 +00:00
Roger Dingledine
afd8fa5a97 change buf->buf to buf->mem 
maybe this will mean fewer dumb errors


svn:r599
 2003-10-15 19:17:21 +00:00
Nick Mathewson
75170f052b fix bug with overzealous shrinking; add more comments. 
svn:r597
 2003-10-15 19:07:07 +00:00
Roger Dingledine
11a23fc280 clean up logging, allow user to specify log files 
If DebugLogFile is specified, log to it at -l debug
If LogFile is specified, log to it at the -l from the commandline
  (default info)
If no LogFile *and* not a Daemon, then log to stdout.
Make conn->s = -1 by default (this might break things)
When kill -USR1, prefer to log at INFO, but make sure they always see it.


svn:r596
 2003-10-15 18:50:16 +00:00
Nick Mathewson
695920d09f Build without warnings on OS X. 
svn:r595
 2003-10-15 18:48:48 +00:00
Nick Mathewson
22ef733058 Make add_file_log return 0 on success. 
svn:r594
 2003-10-15 18:38:38 +00:00
Nick Mathewson
7432d97336 Make last commit build 
svn:r593
 2003-10-15 18:37:19 +00:00
Nick Mathewson
959b5585a5 Stop using stdout for non-debugging cases 
svn:r592
 2003-10-15 18:28:32 +00:00
Roger Dingledine
4f1a84b772 and in OP config files 
svn:r589
 2003-10-15 07:27:29 +00:00
Roger Dingledine
b24b846069 less confusing comments in config files 
svn:r588
 2003-10-15 07:26:39 +00:00
Steven Hazel
a54a65dfb6 - cause configure to create a tor.sh which will have directories set 
correctly based on how configure was run

- cause tor to guess the location of torrc more intelligently

- cause cause src/config/torrc and src/conf/sample-server-torrc to be
  generated with contents that are correct for the way configure was
  run

- cause "make install" to put torrc, sample-server-torrc, and
  dirservers somewhere intelligent


svn:r587
 2003-10-15 07:19:38 +00:00
Roger Dingledine
f5cb7887d9 clean up the sample or rc 
svn:r585
 2003-10-14 03:21:39 +00:00
Roger Dingledine
58ec05877a make the buffer resize stuff work 
and make listener connections not have bufs


svn:r584
 2003-10-14 03:06:48 +00:00
Nick Mathewson
ee9e54b434 Make buffers grow and shrink as needed. 
svn:r583
 2003-10-14 01:34:31 +00:00
Nick Mathewson
77be56fbdd Add tor_realloc to mirror tor_malloc 
svn:r582
 2003-10-14 01:11:42 +00:00
Roger Dingledine
6115813de3 i'm a little teapot, short and stout 
cvs compiles again


svn:r581
 2003-10-14 01:10:22 +00:00
Roger Dingledine
737760f071 fix segfault (connecting to dirserver when network is down) 
svn:r580
 2003-10-13 19:58:21 +00:00
Roger Dingledine
411a18e34c put out 0.0.2pre12 
(mainly doc and log changes)


svn:r579
 2003-10-12 07:19:10 +00:00
Roger Dingledine
4d0b8f00b1 clarify the warning for unrecognized socks version 
(generally happens when people use tor as an httpd proxy)


svn:r576
 2003-10-11 23:38:20 +00:00
Roger Dingledine
8df0eee16a oops, bugfix 
svn:r572
 2003-10-10 01:50:20 +00:00
Roger Dingledine
b9628f266f change WARNING to WARN 
and fix a few typos


svn:r571
 2003-10-10 01:48:32 +00:00
Roger Dingledine
36fb8e839d change WARNING to WARN 
svn:r570
 2003-10-10 01:48:03 +00:00
Nick Mathewson
ecfb36823e Refactor, rename, and clarify 
svn:r569
 2003-10-09 18:45:14 +00:00
Roger Dingledine
746d64e631 add in basic support for pidfiles 
(patch courtesy aaron turner)


svn:r565
 2003-10-08 08:54:52 +00:00
Roger Dingledine
8b80362c76 0.0.2pre11, new license 
svn:r564
 2003-10-08 04:10:59 +00:00
Nick Mathewson
36939303c9 Update LICENSE and copyright dates. 
svn:r560
 2003-10-08 02:04:08 +00:00
Roger Dingledine
543e4e8fd5 more details to track a warning in tls handshakes 
plus make exit policy comparisons not always reject


svn:r559
 2003-10-07 23:54:02 +00:00
Roger Dingledine
aca4bc5126 successfully parse exit policies on future attempts too 
svn:r558
 2003-10-07 23:25:10 +00:00
Roger Dingledine
c42d928b30 pull exit policies from config into desc_routerinfo 
svn:r557
 2003-10-07 23:04:31 +00:00
Nick Mathewson
3b2943d845 lowercase exit policies. 
svn:r556
 2003-10-07 23:02:37 +00:00
Roger Dingledine
9e30ac2870 obey exit policies for addresses too 
svn:r555
 2003-10-07 22:18:14 +00:00
Nick Mathewson
686fce453b Stop requiring newline at end of exit policy. 
svn:r554
 2003-10-07 22:15:47 +00:00
Nick Mathewson
499bbe72d4 Add a "router_add_exit_policy_from_string" function. 
svn:r553
 2003-10-07 22:09:09 +00:00
Roger Dingledine
e6847c4420 add ExitPolicy line to config file 
svn:r552
 2003-10-07 22:04:17 +00:00
Roger Dingledine
16778795f3 minor fixes; bump to 0.0.2pre10 
svn:r551
 2003-10-07 21:27:33 +00:00
Nick Mathewson
3d7463d2b3 Clear revents even when no events are received. Also, since everyone gets in exceptions, everyone gets to increment maxfd. 
svn:r550
 2003-10-07 21:16:04 +00:00
Nick Mathewson
74e6c03cab Hoping to find an fd larger than ((unsigned)-1) is probably a lost cause. 
svn:r549
 2003-10-07 20:45:16 +00:00
Roger Dingledine
f9f091eb0e do not ask for whom there's an error, it polls for thee 
svn:r548
 2003-10-07 20:02:45 +00:00
Roger Dingledine
0b8a0c3720 give correct warning message when you're running an old version 
svn:r546
 2003-10-07 16:56:27 +00:00
Roger Dingledine
4039eccd6f and a Makefile.am for src/config/ 
svn:r545
 2003-10-07 16:30:38 +00:00
Roger Dingledine
de6cbe53c0 some early bugfixes 
our log() conflicts with log(3)
distribute only the correct files from doc/ and src/config/
sometimes laptops go back in time. i guess that's ok for now.
and bump the version number because we're live.


svn:r544
 2003-10-07 16:30:05 +00:00
Roger Dingledine
b51d2c05a0 no need to trigger an assert if socks handshake is malformed 
svn:r542
 2003-10-06 21:22:12 +00:00
Roger Dingledine
756619bfd2 refactor around connection_edge_send_command() 
svn:r539
 2003-10-04 08:19:23 +00:00
Roger Dingledine
be874358a4 wrap strdup; prefer time() to gettimeofday() 
svn:r538
 2003-10-04 03:29:09 +00:00
Roger Dingledine
f563bbd2f9 refactor so connection_write_to_buf() never fails 
svn:r537
 2003-10-04 02:38:18 +00:00
Roger Dingledine
a6bab569ab socks5 now works 
(or at least, we can talk to mozilla.)


svn:r536
 2003-10-04 01:37:01 +00:00
Roger Dingledine
750b238aea clean some includes 
svn:r535
 2003-10-04 01:36:11 +00:00
Nick Mathewson
985a3e1492 Add new cell fullness and bandwidth stats. 
svn:r533
 2003-10-02 20:00:38 +00:00
Nick Mathewson
6ac42f5ec0 Make testcases run again; more sanity checking to descriptor generation. 
svn:r532
 2003-10-01 22:31:13 +00:00
Roger Dingledine
efa8e288ef my_routerinfo, router_is_me, and learn_my_address are obsolete 
ACIs are decided now by strcmp'ing nicknames, rather than comparing addr:port


svn:r529
 2003-10-01 01:49:53 +00:00
Nick Mathewson
91cf86d8da rebuild directory before uploading 
svn:r528
 2003-10-01 01:08:20 +00:00
Nick Mathewson
df5c7534b1 Move dirserv/routers code out of main.c 
svn:r527
 2003-10-01 00:43:34 +00:00
Nick Mathewson
f694ab23f5 Flush after fputs 
svn:r526
 2003-10-01 00:42:24 +00:00
Roger Dingledine
01884951bc updated dirservers file, new config files. 
svn:r524
 2003-09-30 23:25:30 +00:00
Roger Dingledine
2cfc6f0379 ORs post descriptors periodically too 
svn:r523
 2003-09-30 23:06:23 +00:00
Nick Mathewson
bd7db5bd87 Add "platform" to router descriptors. 
svn:r522
 2003-09-30 22:44:33 +00:00
Roger Dingledine
5c8fc2f705 mark all dirservers up at boot; mark a dirserver down if dir fetch fails 
svn:r519
 2003-09-30 21:27:16 +00:00
Roger Dingledine
dc8f40e4cb fix the SSL_read() bug again. this time for sure! 
svn:r518
 2003-09-30 20:36:20 +00:00
Nick Mathewson
9f0c608b7e Check router signatures again; debug signature checking 
svn:r517
 2003-09-30 20:05:45 +00:00
Nick Mathewson
1cd57b8466 make sure router descriptor doesnt eat the directory-signature 
svn:r516
 2003-09-30 20:04:40 +00:00
Roger Dingledine
f0e94dab86 make log use a larger buffer, for easier debugging 
svn:r515
 2003-09-30 19:53:25 +00:00
Nick Mathewson
01786266ca Bugfixes in directory code: 
Improve debugging output on fingerprint checking.

Make sure to add our own fingerprint to the fingerprint list _before_
adding our own descriptor, or else we'll reject ourself.

Don't call a directory invalid just because we have a newer descriptor
for some router.

Use router_get_dir_hash to generate hashes for signed directories.

Make sure we add our own descriptor successfully.

Don't fall-through on failed base64-endode.


svn:r514
 2003-09-30 19:27:54 +00:00
Nick Mathewson
d0273ee135 We need to call get_connection_array before using its outputs 
svn:r513
 2003-09-30 19:25:16 +00:00
Roger Dingledine
2da3e4da0d move connection_array accessors from main.c to connection.c 
(leave poll_array accessors in main.c)


svn:r512
 2003-09-30 19:06:22 +00:00
Roger Dingledine
e7e858d0d1 patch strptime warning -- reduce portability! 
svn:r511
 2003-09-30 18:47:29 +00:00
Roger Dingledine
013c4e1467 move the tls handshake stuff to connection_or 
svn:r510
 2003-09-30 18:45:55 +00:00
Roger Dingledine
4533da06c9 getting closer to having dirserv working 
we now add our own descriptor to the descriptor list
and we rebuild the directory (and dump to disk) after receiving a POST


svn:r509
 2003-09-30 08:18:10 +00:00
Roger Dingledine
3ed7aedc11 bugfixes and features: closer to making dirserv work 
fix a variety of seg faults
don't try to list OPs in running-routers
write cached-directory to disk when rebuilding the dir
on boot, dirservers load approved-routers file
on boot, dirservers load cached directory file


svn:r508
 2003-09-29 23:14:49 +00:00
Roger Dingledine
467d278b8b more cleanup and rearranging 
still not finished integrating new dirserv stuff


svn:r507
 2003-09-29 07:50:08 +00:00
Roger Dingledine
5d31f71557 fix two new segfaults 
svn:r506
 2003-09-28 08:06:18 +00:00
Roger Dingledine
c4c66e2c7f expand the scheduler to address SSL_read()'s pending bytes 
svn:r505
 2003-09-28 06:48:20 +00:00
Roger Dingledine
677707433e shift read_file_to_str() into util.c 
svn:r504
 2003-09-28 06:47:29 +00:00
Nick Mathewson
0e0169d6fa Write necessary backends for online directory generation. I think. 
svn:r503
 2003-09-27 21:30:10 +00:00
Roger Dingledine
cb8212bfcb clean up receiver buckets; prepare for payloads in relay_end; note a few bugs 
svn:r502
 2003-09-27 21:09:56 +00:00
Nick Mathewson
798bb6ab3b Add function to wrap SSL_pending 
svn:r501
 2003-09-27 20:07:40 +00:00
Roger Dingledine
e835122cc0 remove more pieces of orkeygen 
svn:r499
 2003-09-27 08:40:47 +00:00
Roger Dingledine
0f25887048 clean up connection_assert_ok compiler warnings 
svn:r498
 2003-09-27 07:33:07 +00:00
Roger Dingledine
deac704399 connection_new() can't ever fail 
svn:r497
 2003-09-27 07:28:44 +00:00
Roger Dingledine
9899e09b3b add Address config element, use it in descriptor 
svn:r496
 2003-09-27 07:21:36 +00:00
Roger Dingledine
d27514b70a orkeygen is obsolete 
svn:r495
 2003-09-27 05:35:18 +00:00
Roger Dingledine
bf10a3c0f1 finish enforcing the log convention 
svn:r494
 2003-09-26 22:27:24 +00:00
Roger Dingledine
ab8bceb27a dirservers upload their descs now too 
svn:r493
 2003-09-26 22:02:02 +00:00
Roger Dingledine
d8f646c44f make writing descs work 
svn:r492
 2003-09-26 21:26:25 +00:00
Roger Dingledine
a970cd7cfa update the cvsignore 
svn:r491
 2003-09-26 21:16:57 +00:00
Nick Mathewson
febb2251ca Add code to parse fingerprint files and compare routers against fingerprint files. 
svn:r490
 2003-09-26 20:41:23 +00:00
Nick Mathewson
a3e08a0119 Bugfixes in crypto_pk_write_private_key_to_filename 
svn:r489
 2003-09-26 18:44:20 +00:00
Nick Mathewson
92acbe12bc Refactor common file code into util.c; add published to descriptors 
svn:r487
 2003-09-26 18:27:35 +00:00
Roger Dingledine
9e5cafc395 first pass: obey log convention 
ERR is if something fatal just happened

WARNING is something bad happened, but we're still running. The bad thing
is either a bug in the code, an attack or buggy protocol/implementation
of the remote peer, etc. The operator should examine the bad thing and
try to correct it.
(No error or warning messages should be expected. I expect most people
to run on -l warning eventually.)

NOTICE is never ever used.

INFO means something happened (maybe bad, maybe ok), but there's nothing
you need to (or can) do about it.

DEBUG is for everything louder than INFO.


svn:r486
 2003-09-26 10:03:50 +00:00
Roger Dingledine
3b5191d36d various bugfixes and updates 
redo all the config files for the new format (we'll redo them again soon)

fix (another! yuck) segfault in log_fn when input is too large
tor_tls_context_new() returns -1 for error, not NULL
fix segfault in check_conn_marked() on conn's that die during tls handshake

make ORs also initialize conn from router when we're the receiving node

make non-dirserver ORs upload descriptor to every dirserver on startup
add our local address to the descriptor
add Content-Length field to POST command
revert the Content-Length search in fetch_from_buf_http() to previous code
fix segfault in memmove in fetch_from_buf_http()
raise maximum allowed headers/body size in directory.c


svn:r484
 2003-09-25 10:42:07 +00:00
Nick Mathewson
3d4ccb781a Refactor buffers; implement descriptors. 
'buf_t' is now an opaque type defined in buffers.c .

Router descriptors now include all keys; routers generate keys as
needed on startup (in a newly defined "data directory"), and generate
their own descriptors.  Descriptors are now self-signed.

Implementation is not complete: descriptors are never published; and
upon receiving a descriptor, the directory doesn't do anything with
it.

At least "routers.or" and orkeygen are now obsolete, BTW.


svn:r483
 2003-09-25 05:17:11 +00:00
Roger Dingledine
40d0fca63a cleanups, bugfixes, more verbose logs 
Fixed up the assert_*_ok funcs some (more work remains)

Changed config so it reads either /etc/torrc or the -f arg, never both

Finally tracked down a nasty bug with our use of tls:
  It turns out that if you ask SSL_read() for no more than n bytes, it
  will read the entire record from the network (and maybe part of the next
  record, I'm not sure), give you n bytes of it, and keep the remaining
  bytes internally. This is fine, except our poll-for-read looks at the
  network, and there are no bytes pending on the network, so we never know
  to ask SSL_read() for more bytes. Currently I've hacked it so if we ask
  for n bytes and it returns n bytes, then it reads again right then. This
  will interact poorly with our rate limiting; we need a cleaner solution.


svn:r481
 2003-09-24 21:24:52 +00:00
Roger Dingledine
a93b44eb3b integrate assert_connection_ok() checks 
svn:r479
 2003-09-23 19:47:41 +00:00
Roger Dingledine
9cb746ac2e call it tor, not or 
svn:r478
 2003-09-22 06:22:08 +00:00
Roger Dingledine
39fd5dd405 it's safe to do parallel directory fetches/uploads 
svn:r477
 2003-09-22 06:22:00 +00:00
Roger Dingledine
9fe1ed26ff get network/host order working right again for socks4 
svn:r476
 2003-09-21 06:44:53 +00:00
Roger Dingledine
ed51df7453 bugfixes and note missing features 
deal with content-length headers better when reading http
don't assume struct socks4_info is a packed struct
fail the socks handshake if destip is zero
flesh out conn_state_to_string() for dir conn
fix typo (bug) in connection_handle_read()
directory get is now called fetch, post is now upload
reopen logs on sighup


svn:r475
 2003-09-21 06:15:43 +00:00
Roger Dingledine
e514ac528c fix a segfault on truncated log lines 
svn:r473
 2003-09-19 09:30:34 +00:00
Roger Dingledine
078c5ab617 leave the socks handshake on the inbuf until it's complete 
this paves the way for supporting socks5 and other handshakes
it also removes those pesky AP-only variables from connection_t

also hacked a fix for a bug where some streams weren't ending properly --
maybe because marked connections weren't flushing properly?


svn:r472
 2003-09-18 08:11:31 +00:00
Roger Dingledine
b97945e411 add in directory 'post' support 
svn:r471
 2003-09-17 20:09:06 +00:00
Roger Dingledine
a66669859e phase out non-tls handshake, now that tls is stable. 
svn:r470
 2003-09-16 21:20:09 +00:00
Roger Dingledine
6f46316c31 bugfixes and refactorings 
svn:r468
 2003-09-16 20:57:09 +00:00
Nick Mathewson
5f9ac2bdfd More fine-grained logging messages on ZeroReturn/Syscall error cases 
svn:r467
 2003-09-16 20:53:09 +00:00
Nick Mathewson
3f3f8921f6 Make sequential ACI selection logic handle HIGHER/LOWER 
svn:r466
 2003-09-16 20:13:43 +00:00
Nick Mathewson
4dddac706d Use EXIT properly in assert_connection_ok 
svn:r465
 2003-09-16 19:51:09 +00:00
Nick Mathewson
1b9c2f35eb Add first cut of assert_*_ok functions 
svn:r464
 2003-09-16 19:36:19 +00:00
Nick Mathewson
7711c2e745 Add backend support for multiple logfiles, including console logs. 
Also optimize logging by formatting messages in memory before sending
them through stdio.  (It turns out (according to gprof) that logging
performance matters.)


svn:r463
 2003-09-16 17:58:36 +00:00
Nick Mathewson
c09de55fb8 Add #ifdef'd code (on by default) to allocate ACIs sequentially. 
svn:r462
 2003-09-16 17:17:39 +00:00
Roger Dingledine
8b71b7338f clean up exported api's 
svn:r461
 2003-09-16 05:41:49 +00:00
Roger Dingledine
9c6343fdf8 refactor connects into connection_connect() 
svn:r460
 2003-09-16 01:58:46 +00:00
Nick Mathewson
e4dfc3c8fe Cipher lists need to be colon separated. Also make initialization more bulletproof 
svn:r459
 2003-09-15 19:38:52 +00:00
Nick Mathewson
633a5ffc0b Fix TLS error logging 
svn:r458
 2003-09-15 18:37:49 +00:00
Nick Mathewson
408bff4a23 Log protocol errors 
svn:r457
 2003-09-15 18:18:37 +00:00
Roger Dingledine
ebc23f690c bugfix: onion pending queue now works 
and fixed recent memory leak


svn:r456
 2003-09-14 08:17:14 +00:00
Roger Dingledine
b63013e847 finally tracked down the seg fault 
svn:r455
 2003-09-14 06:43:18 +00:00
Roger Dingledine
e585dad887 fix the cpuworker circ-had-vanished bug (maybe) 
still several (many) tls-related bugs outstanding.


svn:r454
 2003-09-14 02:58:50 +00:00
Roger Dingledine
05612786e4 fix two more bugs 
svn:r452
 2003-09-13 21:53:38 +00:00
Roger Dingledine
31bf3ec420 reshuffle functions for cleaner organization 
svn:r451
 2003-09-12 22:45:31 +00:00
Roger Dingledine
1738af9620 tls works between routers now too 
things are still a bit shaky


svn:r450
 2003-09-12 06:50:21 +00:00
Roger Dingledine
b1078b7a3c tls works with onion proxies now. 
svn:r449
 2003-09-12 06:20:36 +00:00
Roger Dingledine
556bea4b6d serious bug in cpuworker. need to think about redesign or how to handle it. 
svn:r448
 2003-09-12 06:18:38 +00:00
Nick Mathewson
001cd08b2e Fix bugs in certificate generation and SSL context creation. Both seem to work now. 
svn:r447
 2003-09-11 23:26:31 +00:00
Roger Dingledine
ec23ebc4e6 update onion router configs for tls 
svn:r446
 2003-09-11 22:20:16 +00:00
Roger Dingledine
fa1bfaa349 check for funny business from the remote peer 
svn:r445
 2003-09-11 22:19:48 +00:00
Nick Mathewson
5082ee8ae0 Non-debugging messages are nice to log too 
svn:r444
 2003-09-11 22:13:13 +00:00
Nick Mathewson
529d3bc56f Resolve XXXXs in tortls.c 
svn:r443
 2003-09-11 21:38:57 +00:00
Nick Mathewson
f5b4ef1fa2 Simplify some code paths in TLS; cut down on memory leaks; use 
reasonable ciphers if not everyone has OpenSSL 0.9.7.


svn:r442
 2003-09-11 21:12:39 +00:00
Nick Mathewson
36a3086434 Add router_get_by_pk function; use in connection_tls_finish_handshake. 
svn:r441
 2003-09-11 20:32:15 +00:00
Roger Dingledine
0761bc7b83 fix typo that's been bugging me 
svn:r440
 2003-09-11 20:10:39 +00:00
Roger Dingledine
44c3a7c2d7 collect info from peer we just handshaked with 
svn:r439
 2003-09-11 20:06:55 +00:00
Nick Mathewson
e22b271895 Add certificate verification functions 
svn:r438
 2003-09-10 00:47:39 +00:00
Nick Mathewson
9955b265ab Make crypto structures private to crypto.c 
svn:r437
 2003-09-10 00:47:24 +00:00
Nick Mathewson
67697d5ab1 Add prototypes for functions to check whether the peer certificate is 
valid (if it is present); and to get a public key from a peer
certificate (in order to identify the peer).


svn:r436
 2003-09-10 00:10:37 +00:00
Roger Dingledine
c0f5ddcf33 fix confirmed win32 bug 
svn:r435
 2003-09-08 23:10:24 +00:00