Roger Dingledine
|
5ef2927870
|
correct nick's comment
svn:r5360
|
2005-11-11 21:44:38 +00:00 |
|
Nick Mathewson
|
f14743a975
|
Note that much of check_dh_key is voodoo; make x in DH be only 320 bits for DH speed improvement: this wants auditing. [We have blessing from Ian on this.] (Note that DH in SSL is not yet affected.)
svn:r5359
|
2005-11-11 20:18:00 +00:00 |
|
Nick Mathewson
|
3c36a14ba6
|
Call ERR_remove_state() on the main thread on shutdown,too
svn:r5322
|
2005-10-26 02:20:48 +00:00 |
|
Nick Mathewson
|
9492424d3f
|
Per comments at the bottom of openssl/FAQ, call even more functions to
clean up OpenSSL's toys when it's done playing. (Why isn't there an
OpenSSL_free_everything() function?)
svn:r5321
|
2005-10-25 19:01:48 +00:00 |
|
Nick Mathewson
|
edf5698474
|
Start dividing log messages into logging domains. No, LD_ is not the best of identifiers. src/or has not been converted yet. Domains dont do anything yet.
svn:r5284
|
2005-10-18 21:58:19 +00:00 |
|
Peter Palfrader
|
0d9aedfcea
|
Downgrade a few INFO level logs to DEBUG again. Also add two or three new
logs in cases where a calling function's log was downgraded and we wouldn't
get any log message otherwise.
svn:r5263
|
2005-10-17 16:21:42 +00:00 |
|
Nick Mathewson
|
9bc2467626
|
Okay, try to use RAND_poll() from OpenSSL where available.
svn:r5229
|
2005-10-08 05:47:15 +00:00 |
|
Roger Dingledine
|
c4757e0705
|
LOG_ERR is for when we know we're going to exit. use LOG_WARN in other
cases.
svn:r5220
|
2005-10-07 19:53:57 +00:00 |
|
Nick Mathewson
|
150e5ac098
|
disable RAND_poll() for the alpha of the day; at least 24 hours of testing is in order for something like that.
svn:r5216
|
2005-10-07 19:17:20 +00:00 |
|
Nick Mathewson
|
a53ecc94f9
|
Add half our entropy from RAND_poll in OpenSSL. These know how to use egd (if present) openbsd weirdness (if present), vms/os2 weirdness (if we ever port there), and more in the future.
svn:r5215
|
2005-10-07 19:03:09 +00:00 |
|
Nick Mathewson
|
a89daaeca9
|
Once an hour (not just on startup) give OpenSSL some more entropy.
Add entropy in 512-bit chunks, not 160-bit chunks. (This latter
change is voodoo.)
svn:r5211
|
2005-10-06 22:22:22 +00:00 |
|
Nick Mathewson
|
cc35e1720f
|
Using RAND_pseudo_bytes instead of RAND_bytes is an accident waiting to happen, and does not really speed us up much when we do it. So stop doing it.
svn:r5210
|
2005-10-06 22:18:01 +00:00 |
|
Nick Mathewson
|
ba24193ab5
|
Make doxygen marginally happier
svn:r5208
|
2005-10-06 04:33:40 +00:00 |
|
Nick Mathewson
|
f8c07e1f33
|
free EVP cipher information on shutdown to remove some spurious dmalloc complaints.
svn:r5180
|
2005-10-03 21:10:35 +00:00 |
|
Nick Mathewson
|
de198d800b
|
Never call free() on tor_malloc()d memory. This is unlikely to be our current leak, but it may help dmalloc work.
svn:r5168
|
2005-09-30 20:47:58 +00:00 |
|
Nick Mathewson
|
26e7a05725
|
even better function start checks; give dmalloc a chance of working.
svn:r5162
|
2005-09-30 01:39:24 +00:00 |
|
Nick Mathewson
|
92451f74a8
|
Reformat inconsistent function declarations.
svn:r5160
|
2005-09-30 01:09:52 +00:00 |
|
Nick Mathewson
|
5c53545d81
|
Add a bunch more warnings to out warning suite; resolve them; pack structs a little better.
svn:r5150
|
2005-09-29 22:59:17 +00:00 |
|
Nick Mathewson
|
f8a80e8d59
|
Helper functions to perform our truncated base64 encoding on hexdigests.
svn:r5087
|
2005-09-18 02:18:59 +00:00 |
|
Nick Mathewson
|
6b479b3cfa
|
Only do openssl accel stuff if version is at least 0.9.7
svn:r4973
|
2005-09-09 22:07:15 +00:00 |
|
Roger Dingledine
|
fa507c63e8
|
put quotes around user-supplied strings so they are more likely to
realize if they add bad characters (like quotes) to the torrc
svn:r4844
|
2005-08-26 18:40:44 +00:00 |
|
Roger Dingledine
|
121ea4dd93
|
a url for better reference
svn:r4778
|
2005-08-15 01:03:50 +00:00 |
|
Nick Mathewson
|
943ef5256b
|
fix whitespace issues
svn:r4752
|
2005-08-08 21:59:48 +00:00 |
|
Nick Mathewson
|
9345323b18
|
far far cleaner implementation of handshake checking logic. Backport candidate.
svn:r4736
|
2005-08-07 20:36:14 +00:00 |
|
Roger Dingledine
|
bfe65db284
|
ok, so now it was just redundant. nick, do you recall what rfc
you were trying to point to?
svn:r4727
|
2005-08-07 17:11:33 +00:00 |
|
Roger Dingledine
|
b9a7482c02
|
note another potential security problem with generating key material
from our DH handshake.
svn:r4724
|
2005-08-06 16:50:51 +00:00 |
|
Roger Dingledine
|
261bf4c4d4
|
rfc 3536 "provides a glossary of terms used in the IETF when discussing
internationalization."
svn:r4723
|
2005-08-05 22:08:57 +00:00 |
|
Nick Mathewson
|
224fecb281
|
Appease insane windows compiler. (Oh no, an extra semi, the sky is falling!)
svn:r4722
|
2005-08-05 19:25:23 +00:00 |
|
Nick Mathewson
|
197eb2b2cb
|
fix harmless copy-and-paste error
svn:r4718
|
2005-08-05 14:59:14 +00:00 |
|
Nick Mathewson
|
ea2aa107a7
|
cover a few more cases; needs testing and once-over
svn:r4717
|
2005-08-05 14:20:38 +00:00 |
|
Nick Mathewson
|
3fa821d911
|
oops, that array got bigger
svn:r4708
|
2005-08-04 23:18:51 +00:00 |
|
Nick Mathewson
|
7a9eb49f5f
|
Discard special bignum values.
svn:r4706
|
2005-08-04 23:14:42 +00:00 |
|
Nick Mathewson
|
2aff87caae
|
Load hardware acceleration options when/where available. Can anybody test this?
svn:r4467
|
2005-06-20 18:56:35 +00:00 |
|
Nick Mathewson
|
d4972bd2e1
|
Remove code that has been #if-0ed for a long time.
svn:r4435
|
2005-06-15 18:34:46 +00:00 |
|
Roger Dingledine
|
fcd0fc3364
|
flesh out the source file descriptions for doxygen
svn:r4404
|
2005-06-11 05:31:17 +00:00 |
|
Nick Mathewson
|
0831823763
|
Change end-of-file NLNL convention. It turns out arma I and I agree.
svn:r4382
|
2005-06-09 19:03:31 +00:00 |
|
Nick Mathewson
|
5420aed38e
|
Possible bugfix for 151: backport candidate.
svn:r4318
|
2005-06-06 20:02:09 +00:00 |
|
Nick Mathewson
|
10b2208d93
|
Make Tor compile with no warnings with gcc4.0 on OSX
svn:r4184
|
2005-05-07 05:55:06 +00:00 |
|
Nick Mathewson
|
0e81265359
|
update copyright notices.
svn:r3982
|
2005-04-01 20:15:56 +00:00 |
|
Nick Mathewson
|
837d7dff69
|
Try to make crash-on-shutdown bug harder to trigger.
svn:r3939
|
2005-04-01 02:37:10 +00:00 |
|
Nick Mathewson
|
905c16846a
|
Fix a few more instances of memory not freed on exit (found by weasel).
svn:r3830
|
2005-03-23 06:20:50 +00:00 |
|
Nick Mathewson
|
aac97a3c6a
|
Tell openssl how to use locks and how to find thread ids -- this may prevent race conditions surrounding the error queue.
svn:r3622
|
2005-02-13 22:32:25 +00:00 |
|
Nick Mathewson
|
f6221b695f
|
Apply windows patch from Dmitri Bely
svn:r3617
|
2005-02-12 21:03:37 +00:00 |
|
Roger Dingledine
|
9e6d6c6096
|
Bugfix: we've been using openssl's BIO_get_mem_data incorrectly.
We assumed the pem-encoded data written by PEM_write_bio_RSAPrivateKey
is nul-terminated, and at least sometimes, it's not.
svn:r3263
|
2005-01-03 22:35:40 +00:00 |
|
Nick Mathewson
|
8c85c0bef8
|
Note that length checking on base64_decode is kinda conservative
svn:r3144
|
2004-12-13 18:38:19 +00:00 |
|
Nick Mathewson
|
fd4c624677
|
Belt *or* suspenders will be sufficient when casting things to unsigned char.
svn:r3122
|
2004-12-08 07:20:21 +00:00 |
|
Nick Mathewson
|
fe6eb34a10
|
Solaris CC freaks out if isspace and friends get anything other than an int. We learned that, so we casted. But it is also a bad idea to cast a signed char to an int and expect things to work on win32. Now we cast to unsigned char, then to int, then pass to isspace. Ug
svn:r3120
|
2004-12-08 00:42:50 +00:00 |
|
Nick Mathewson
|
a980446d0c
|
Be more proactive about noticing underflows: size_t values greater than 0x800...00 are likely to be trouble.
svn:r3064
|
2004-12-02 04:33:01 +00:00 |
|
Nick Mathewson
|
b457cfb5eb
|
Spell-check strings and comments
svn:r3052
|
2004-12-01 03:48:14 +00:00 |
|
Nick Mathewson
|
7fbd297532
|
Suggestion from weasel: Make tor --version --version dump the cvs Id of every file.
svn:r3019
|
2004-11-29 22:25:31 +00:00 |
|