Nick Mathewson
4a6d969139
r15094@tombo: nickm | 2007-12-01 03:46:07 -0500
...
server-side code (for when v2 negotiation occurred) to check for renegotiation and adjust client ID info accordingly. server-side of new TLS code is now implemented, but needs testing and debugging.
svn:r12624
2007-12-01 08:47:13 +00:00
Nick Mathewson
d8ad247dfd
r15088@tombo: nickm | 2007-11-30 23:47:29 -0500
...
Add support to get a callback invoked when the client renegotiate a connection. Also, make clients renegotiate. (not enabled yet, until they detect that the server acted like a v2 server)
svn:r12623
2007-12-01 08:09:48 +00:00
Nick Mathewson
1789f94668
r15087@tombo: nickm | 2007-11-30 22:32:26 -0500
...
Start getting freaky with openssl callbacks in tortls.c: detect client ciphers, and if the list doesn't look like the list current Tors use, present only a single cert do not ask for a client cert. Also, support for client-side renegotiation. None of this is enabled unless you define V2_HANDSHAKE_SERVER.
svn:r12622
2007-12-01 08:09:46 +00:00
Roger Dingledine
e9b999ff22
and one last fix
...
svn:r12610
2007-11-29 16:16:50 +00:00
Roger Dingledine
996b8719e5
fix some typos (i think) in the dir spec. also, note that you'd
...
better *not* publish a cosmetically similar descriptor within 12
hours of the last one.
svn:r12605
2007-11-29 13:19:11 +00:00
Roger Dingledine
b258d3ec5a
is this a good idea, karsten/nick?
...
svn:r12604
2007-11-29 13:05:52 +00:00
Roger Dingledine
ff981c8805
doc fixes from karsten
...
svn:r12603
2007-11-29 12:51:50 +00:00
Roger Dingledine
4a08380ad7
controllers need a way to learn router annotations
...
svn:r12602
2007-11-29 11:35:08 +00:00
Roger Dingledine
30cbcaecc5
more progress on the geoip proposal
...
svn:r12599
2007-11-29 06:14:41 +00:00
Roger Dingledine
d2d65666c4
our december todo list
...
svn:r12598
2007-11-28 20:21:28 +00:00
Roger Dingledine
86551d411d
more items for the todo list
...
svn:r12572
2007-11-26 06:26:47 +00:00
Roger Dingledine
17393b8359
draft of a proposal: Fetching GeoIP databases for clients, relays, and bridges
...
svn:r12566
2007-11-24 15:28:08 +00:00
Roger Dingledine
5b3cc6cd7e
move the bridges proposal into a real proposal number.
...
svn:r12562
2007-11-23 23:40:21 +00:00
Andrew Lewman
402f46a0dd
Change up phobos' todos.
...
svn:r12555
2007-11-22 17:59:42 +00:00
Roger Dingledine
6514843026
cleanups, bump to 0.2.0.12-alpha
...
svn:r12516
2007-11-17 02:22:56 +00:00
Nick Mathewson
e843e05563
r16670@catbus: nickm | 2007-11-14 14:56:30 -0500
...
Initial phase of proposal 110: accept RELAY_EARLY cells, and turn them into RELAY cells when sending them on over a v1 OR connection.
svn:r12496
2007-11-14 20:01:15 +00:00
Nick Mathewson
d483d3144a
r16669@catbus: nickm | 2007-11-14 14:50:03 -0500
...
When we complete an OR handshake, set up all the internal fields and mark the connection as open.
svn:r12495
2007-11-14 20:01:12 +00:00
Roger Dingledine
3c0013b47a
explain how to become a bridge authority too
...
svn:r12482
2007-11-11 20:33:17 +00:00
Roger Dingledine
b3618cccf5
finish writing my overview of bridge design and deployment
...
svn:r12481
2007-11-11 20:12:32 +00:00
Roger Dingledine
a3edc3b154
make it clearer for nick that bug 548 needs solving
...
svn:r12474
2007-11-11 06:43:04 +00:00
Roger Dingledine
42b8fb5a15
Exit policies now reject connections that are addressed to a
...
relay's public (external) IP address too, unless
ExitPolicyRejectPrivate is turned off. We do this because too
many relays are running nearby to services that trust them based
on network address.
svn:r12459
2007-11-10 21:17:51 +00:00
Nick Mathewson
e0b9c893bc
r16573@catbus: nickm | 2007-11-08 11:57:16 -0500
...
Mess with the formula for the Guard flag again. Now it requires that you be in the most familiar 7/8 of nodes, and have above median wfu for that 7/8th. See spec for details. Also, log thresholds better.
svn:r12440
2007-11-08 16:58:59 +00:00
Roger Dingledine
46273c9080
remove some done items; mark some other items as done
...
svn:r12438
2007-11-08 16:36:49 +00:00
Nick Mathewson
c3a745951b
r16570@catbus: nickm | 2007-11-08 11:04:20 -0500
...
Keep track, for each OR connection, of the last time we added a non-padding cell to its outbuf. Use this timestamp, not "lastwritten" to tell if it is time to close a circuitless connection. (We can'tuse lastwritten, since lastwritten is updated when ever the connection flushes anything, and by that point we can no longer tell what is a padding cell and what is not.)
svn:r12437
2007-11-08 16:19:07 +00:00
Roger Dingledine
fa215a8f77
decide that messing with fallback-concensus for 0.2.0.10-alpha
...
isn't worth it. also mention bug 546 again.
svn:r12432
2007-11-08 04:43:43 +00:00
Roger Dingledine
997c1e5e0d
the other half of the made-up 'guard' heuristic
...
svn:r12429
2007-11-08 04:14:02 +00:00
Roger Dingledine
21ae1b6109
one possible heuristic for being a guard
...
svn:r12427
2007-11-07 23:07:39 +00:00
Nick Mathewson
d2bdb4ad25
r16552@catbus: nickm | 2007-11-07 17:12:11 -0500
...
some notes on 0.2.0.10-alpha blockers.
svn:r12426
2007-11-07 22:13:30 +00:00
Nick Mathewson
d279fb82e2
r16550@catbus: nickm | 2007-11-07 16:50:02 -0500
...
"And $499 for knowing where to hit it." Fix bug 546.
svn:r12425
2007-11-07 21:51:21 +00:00
Roger Dingledine
dbdb50fa87
four items blocking 0.2.0.10-alpha
...
svn:r12422
2007-11-07 19:58:52 +00:00
Nick Mathewson
0fa00d8ec6
r16479@catbus: nickm | 2007-11-06 18:10:02 -0500
...
Add "Blocking resistant TLS certificate usage" as proposal 124.
svn:r12405
2007-11-06 23:11:12 +00:00
Nick Mathewson
bc4cefcd7e
r16471@catbus: nickm | 2007-11-06 15:50:42 -0500
...
Detect whether any of the descriptors we want are in old_routers. Possibly useful in tracking down bug 543.
svn:r12404
2007-11-06 20:51:45 +00:00
Nick Mathewson
e047f7f865
r16455@catbus: nickm | 2007-11-06 12:48:00 -0500
...
Parse CERT cells and act correctly when we get them.
svn:r12396
2007-11-06 18:00:07 +00:00
Nick Mathewson
95c7b8cc64
r14729@31-33-67: nickm | 2007-11-05 18:54:50 -0500
...
Send and Parse CERT cells correctly. Still need to understand the certs inside.
svn:r12392
2007-11-05 23:55:43 +00:00
Nick Mathewson
6fcda5299f
r14727@31-33-67: nickm | 2007-11-05 18:34:35 -0500
...
Make VERSIONS variable-length.
svn:r12391
2007-11-05 23:34:39 +00:00
Nick Mathewson
9a20a64b62
r16438@catbus: nickm | 2007-11-05 16:45:45 -0500
...
Initial code for variable-length cells. CERT and VERSIONS need to use them.
svn:r12390
2007-11-05 21:46:35 +00:00
Nick Mathewson
85654f4ab9
r16432@catbus: nickm | 2007-11-05 14:18:57 -0500
...
Send and parse link_auth cells properly.
svn:r12386
2007-11-05 19:19:46 +00:00
Nick Mathewson
44eab517fc
r16414@catbus: nickm | 2007-11-05 13:14:46 -0500
...
Function to process link auth cells; stub function for cert cell processing
svn:r12385
2007-11-05 18:15:56 +00:00
Nick Mathewson
323490303e
r16412@catbus: nickm | 2007-11-05 11:45:17 -0500
...
Make TLS contexts reference-counted, and add a reference from TLS objects to their corresponding context. This lets us reliably get the certificates for a given TLS connection, even if we have rotated TLS contexts.
svn:r12383
2007-11-05 18:15:52 +00:00
Nick Mathewson
ea1bea5830
r16411@catbus: nickm | 2007-11-05 11:27:37 -0500
...
Remember X509 certificates in the context. Store peer/self certificate digests in handshake state.
svn:r12382
2007-11-05 18:15:50 +00:00
Nick Mathewson
e94fad36ac
r16409@catbus: nickm | 2007-11-05 10:38:25 -0500
...
Split handshake state into its own structure. Revise versions and netinfo code to use this structure.
svn:r12380
2007-11-05 18:15:44 +00:00
Nick Mathewson
a7993ea2b6
r16408@catbus: nickm | 2007-11-05 10:02:39 -0500
...
Edit TODO: remove some completed items, add breakdown for 105+TLS task.
svn:r12379
2007-11-05 18:15:42 +00:00
Roger Dingledine
8cc70addd7
minor fix
...
svn:r12367
2007-11-04 00:15:17 +00:00
Roger Dingledine
a2289c6fc6
more of r12364
...
svn:r12366
2007-11-04 00:14:58 +00:00
Roger Dingledine
4780f488c0
<mikeperry> the lesson probably should be automatic client upgrades :)
...
svn:r12348
2007-11-02 20:21:26 +00:00
Roger Dingledine
42e4acc41a
get my in-progress bridge proposal draft into svn so i don't
...
lose it
svn:r12347
2007-11-02 19:21:42 +00:00
Nick Mathewson
dddff3acf9
r14625@tombo: nickm | 2007-11-01 23:21:25 -0400
...
Merge revised behavior on proposal 105
svn:r12323
2007-11-02 03:21:54 +00:00
Andrew Lewman
2136c82ae0
As nick commented, tor's configure doesn't know what --enable-static and
...
--disable-shared actually are, so remove it from docs and spec file.
svn:r12321
2007-11-02 02:40:03 +00:00
Andrew Lewman
14be21f31e
Add a comment to the relaybandwidth bug.
...
svn:r12320
2007-11-02 02:32:47 +00:00
Nick Mathewson
832ef9562f
r14623@tombo: nickm | 2007-11-01 22:25:18 -0400
...
More tweaks from karsten, with some cleanup and commentary.
svn:r12319
2007-11-02 02:25:28 +00:00