Commit Graph

2404 Commits

Author SHA1 Message Date
Nick Mathewson
de827f89df r14062@tombo: nickm | 2008-02-08 15:17:07 -0500
Change DNs in x509 certificates to be harder to fingerprint.  Raise common code.  Refactor random hostname generation into crypto.c


svn:r13429
2008-02-08 21:13:12 +00:00
Nick Mathewson
46b1a21dc4 r17955@catbus: nickm | 2008-02-06 16:53:07 -0500
The SSL portion of the revised handshake now seems to work: I just finally got a client and a server to negotiate versions.  Now to make sure certificate verification is really happening, connections are getting opened, etc.


svn:r13409
2008-02-06 21:53:13 +00:00
Nick Mathewson
a869574c56 r17947@catbus: nickm | 2008-02-06 11:57:53 -0500
Fix a bunch of DOCDOC items; document the --quiet flag; refactor a couple of XXXX020 items.


svn:r13405
2008-02-06 16:58:05 +00:00
Nick Mathewson
ff9bd0fd3a r17929@catbus: nickm | 2008-02-05 17:10:26 -0500
Fix or downgrade a few XXX020 items.


svn:r13393
2008-02-05 23:20:44 +00:00
Nick Mathewson
fac2cd3b03 r17916@catbus: nickm | 2008-02-05 16:29:35 -0500
Fix some XXX020 items in control.c: add a maximum line length and note that the number of versioning authorities is no longer apparent to clients.


svn:r13390
2008-02-05 21:39:49 +00:00
Nick Mathewson
bd5bcbdc09 r17912@catbus: nickm | 2008-02-05 15:57:51 -0500
Document truncation of version lines


svn:r13386
2008-02-05 21:39:38 +00:00
Roger Dingledine
12fbf01abe down to 24 pages
svn:r13290
2008-01-26 02:48:43 +00:00
Roger Dingledine
0ddd28b75e spec tweaks
svn:r13264
2008-01-24 22:47:39 +00:00
Roger Dingledine
d2a04d7e06 a new style file. and blow away a section that turned out to be dumb.
svn:r13223
2008-01-22 05:50:58 +00:00
Nick Mathewson
8505ee8310 r17723@catbus: nickm | 2008-01-22 00:14:57 -0500
Make idea proposal into proposal 130; answer question by sjmurdoch; mark 124 superseded; reindex


svn:r13222
2008-01-22 05:15:05 +00:00
Roger Dingledine
b79850d574 Make "ClientOnly 1" config option disable directory ports too.
svn:r13213
2008-01-21 21:00:50 +00:00
Roger Dingledine
e42a6794dc condense the rest of the discussion into proposal 129
svn:r13211
2008-01-21 17:36:47 +00:00
Roger Dingledine
10ed49643e proposal from Kevin Bauer & Damon McCoy to reject vulnerable-plaintext
ports (reformatted by me)


svn:r13210
2008-01-21 16:57:12 +00:00
Roger Dingledine
ff62154ba3 New config options WarnPlaintextPorts and RejectPlaintextPorts so
Tor can warn and/or refuse connections to ports commonly used with
vulnerable-plaintext protocols.

We still need to figure out some good defaults for them.


svn:r13198
2008-01-20 05:54:15 +00:00
Roger Dingledine
43dce232ad If we've gone 12 hours since our last bandwidth check, and we
estimate we have less than 50KB bandwidth capacity but we could
handle more, do another bandwidth test.


svn:r13176
2008-01-18 04:58:40 +00:00
Roger Dingledine
b4b3472b9f Make the tor-gencert man page get included correctly in the tarball.
svn:r13163
2008-01-17 20:32:37 +00:00
Roger Dingledine
8e601e0ae5 explain a bit about router descriptor purposes
svn:r13154
2008-01-17 05:47:44 +00:00
Roger Dingledine
a03d0e16e4 minor tweaks of the v2-conn-protocol text
svn:r13117
2008-01-12 19:50:52 +00:00
Nick Mathewson
01df4856f7 r17581@catbus: nickm | 2008-01-12 00:52:35 -0500
Actually write up what I'm implementing for the v2 connection protocol


svn:r13113
2008-01-12 05:53:03 +00:00
Roger Dingledine
23a891bf4d add in a pdf so it'll be in our svn
svn:r13103
2008-01-11 03:18:56 +00:00
Roger Dingledine
4cf1b35a23 start to flesh out the issues; and add some more
svn:r13101
2008-01-11 02:23:33 +00:00
Roger Dingledine
8435de3c78 add an outline for a new roadmap
svn:r13099
2008-01-10 19:08:07 +00:00
Nick Mathewson
10d86f7615 r17558@catbus: nickm | 2008-01-10 13:07:41 -0500
If we do not serve v2 directory info, and our cached v2 networkstatus files are very old, remove them.  If the directory is old, remove that too.  (We already did this for obsolete routers files.)


svn:r13096
2008-01-10 18:08:42 +00:00
Nick Mathewson
04263648c4 r17554@catbus: nickm | 2008-01-10 12:48:29 -0500
Do not send bridge descriptors over unencrypted connections.


svn:r13094
2008-01-10 17:48:40 +00:00
Nick Mathewson
29b0f51a73 r17553@catbus: nickm | 2008-01-10 12:18:27 -0500
Add connection_dir_is_encrypted() so that we can refrain from sending bridge descriptors over an unencrypted link.


svn:r13093
2008-01-10 17:48:36 +00:00
Nick Mathewson
59fdab43cd r17552@catbus: nickm | 2008-01-10 12:13:43 -0500
Make bridge geoip data get rounded up, not down.


svn:r13092
2008-01-10 17:48:32 +00:00
Nick Mathewson
c508fa5aec r17550@catbus: nickm | 2008-01-10 12:08:01 -0500
Add a manual page for tor-gencert.  Also implement the missing -s option in tor-gencert, and fix the info message for when no cert file is specified.


svn:r13091
2008-01-10 17:08:05 +00:00
Nick Mathewson
ca5f670fab r17548@catbus: nickm | 2008-01-10 11:08:12 -0500
Make proposal-109 behavior optional.


svn:r13090
2008-01-10 16:08:47 +00:00
Roger Dingledine
e3d4997960 work down todo list for more 0.2.0.x issues
svn:r13087
2008-01-09 22:38:04 +00:00
Roger Dingledine
f033bd062f remove some of the done items, in preparation for overhaul
svn:r13085
2008-01-09 15:11:49 +00:00
Roger Dingledine
c7df6b4908 remove some done things. move a lot more into the 0.2.1.x section.
there remain a bunch of things in the 0.2.0.x section that we should
either do or move into 0.2.1.x.


svn:r13084
2008-01-09 14:45:43 +00:00
Roger Dingledine
958c524a2b start a roadmap for 2008 and beyond. based on 2007 roadmap as
a starting point.


svn:r13083
2008-01-09 14:21:00 +00:00
Roger Dingledine
3618b7eac3 a few items done, another item we should do
svn:r13082
2008-01-09 13:59:20 +00:00
Roger Dingledine
c7d3c7acd2 another blog todo
svn:r13075
2008-01-08 17:33:09 +00:00
Roger Dingledine
80196fb9ab three blog-related todo items
svn:r13074
2008-01-08 13:21:49 +00:00
Nick Mathewson
dd35fe59c4 r17499@catbus: nickm | 2008-01-07 13:39:46 -0500
Bugfix on fix for 557: Make values containing special characters work right with getconf, setconf, and saveconf.  Document this in control-spec.txt


svn:r13056
2008-01-07 18:54:55 +00:00
Roger Dingledine
a516973275 first thoughts on rate limiting stream creations at exits
svn:r13048
2008-01-07 10:41:49 +00:00
Nick Mathewson
58de695f90 r15787@tombo: nickm | 2008-01-02 01:59:07 -0500
Allow config values in quotes to contain special characters, with full C escape syntax.  With tests.  Addresses bug 557.


svn:r13021
2008-01-02 06:59:15 +00:00
Andrew Lewman
99be6dae1e update the license for 2008, complete a todo.
svn:r13014
2008-01-01 04:27:13 +00:00
Andrew Lewman
0421e53c66 Fix a typo. Thanks sjmurdoch.
svn:r12978
2007-12-25 19:02:12 +00:00
Karsten Loesing
506a02d485 proposal 121: replaced misleading term "authentication" by "authorization", added some clarifications (comments by Sven Kaffille)
svn:r12967
2007-12-25 11:34:29 +00:00
Roger Dingledine
c6788cc0de The bridge GeoIP stats were counting other relays, for example
self-reachability and authority-reachability tests.


svn:r12960
2007-12-25 00:07:13 +00:00
Roger Dingledine
24d46eccb9 minor patches from Christian Brueffer
svn:r12958
2007-12-24 22:05:05 +00:00
Roger Dingledine
44ca13ceaa some geoip related todo items
svn:r12951
2007-12-24 11:18:05 +00:00
Nick Mathewson
da06bfb80f r15653@tombo: nickm | 2007-12-23 14:15:12 -0500
Refactor circuit_launch* functions to take a bitfield of flags rather than 4 separate nonconsecutive flags arguments.  Also, note a possible but in circuit_find_to_cannibalize, which seems to be ignoring its purpose argument.


svn:r12948
2007-12-23 19:15:22 +00:00
Roger Dingledine
9dcde682f5 minor other things in my sandbox
svn:r12934
2007-12-23 01:28:25 +00:00
Roger Dingledine
33f9c2c157 todo:
if we notice a cached-status directory and we're not serving v2 dir
info and it's old enough, delete it. same with cached-routers*.


svn:r12924
2007-12-22 09:09:43 +00:00
Roger Dingledine
a03aa2ef6e a todo item that nick might like sometime
svn:r12920
2007-12-22 06:11:29 +00:00
Roger Dingledine
8f779aee5a trivial whitespace fix
svn:r12912
2007-12-21 23:23:53 +00:00
Roger Dingledine
b70deb50e5 todo: write a tor-gencert man page
svn:r12908
2007-12-21 10:52:47 +00:00
Roger Dingledine
e710710e87 clean up changelog and todo file
svn:r12899
2007-12-21 07:29:55 +00:00
Roger Dingledine
9ebf86bb66 new config option FetchDirInfoEarly for tup/ioerror and the tordnsel
svn:r12896
2007-12-21 06:08:00 +00:00
Roger Dingledine
f405f9b614 Make getinfo ns/purpose/bridge actually work
Also, dump our bridge router status entries to disk every 30 minutes.


svn:r12871
2007-12-19 04:58:58 +00:00
Nick Mathewson
95fecd6fbc r15560@tombo: nickm | 2007-12-18 23:18:21 -0500
Add a bit of missing documentation.


svn:r12869
2007-12-19 04:18:28 +00:00
Nick Mathewson
95d500f33f r15558@tombo: nickm | 2007-12-18 22:55:23 -0500
Re-parse annotations in another place.  Good catch, arma.


svn:r12868
2007-12-19 03:55:40 +00:00
Roger Dingledine
74d05f4b2c answer getinfo ns/purpose/bridge queries
svn:r12860
2007-12-18 22:39:15 +00:00
Nick Mathewson
bbbf25db4d r17233@catbus: nickm | 2007-12-18 16:26:55 -0500
Changelog entry for geoip.


svn:r12858
2007-12-18 21:27:12 +00:00
Nick Mathewson
b8ac050e85 r15532@tombo: nickm | 2007-12-17 17:41:05 -0500
clean up whitesapce and debug a little on geoip stuff.


svn:r12847
2007-12-17 22:44:18 +00:00
Nick Mathewson
25f78498f9 r15531@tombo: nickm | 2007-12-17 17:19:24 -0500
Support raw IP-to-country as well as postprocessed format.  Include GEOIP summary in extrainfo of bridges.


svn:r12846
2007-12-17 22:44:16 +00:00
Nick Mathewson
820159cac5 r15530@tombo: nickm | 2007-12-17 16:54:03 -0500
First wodge of geoip code so bridges can figure out which countries are blocking them.


svn:r12845
2007-12-17 22:44:11 +00:00
Roger Dingledine
71c84abdff cleanups on r12825
svn:r12826
2007-12-15 20:50:56 +00:00
Roger Dingledine
31324f3e7f apply karsten's "patch 12"
svn:r12825
2007-12-15 20:28:09 +00:00
Karsten Loesing
5864b43e02 proposal 121: rewrote complete proposal for better readability, modified authentication protocol, merged in personal notes
svn:r12824
2007-12-15 20:09:43 +00:00
Andrew Lewman
f50cd72848 some documentation from pnx for building universal binary privoxy
svn:r12807
2007-12-14 05:30:18 +00:00
Roger Dingledine
408a4fa9b4 a todo entry extracted from a poor bug report
svn:r12802
2007-12-14 04:13:19 +00:00
Roger Dingledine
2cdaa93d96 change the specs to match the code
svn:r12799
2007-12-13 05:47:08 +00:00
Roger Dingledine
5ba5bf43d8 new v3 authorities will want the one that includes lefkada
svn:r12792
2007-12-13 00:01:49 +00:00
Roger Dingledine
6e799a6e9c minor cleanups and a todo item
svn:r12785
2007-12-12 21:08:30 +00:00
Roger Dingledine
1572de49bc write down my some reliable / some not idea, before we lose it
svn:r12781
2007-12-12 17:02:47 +00:00
Roger Dingledine
3b2dd8d763 Three new config options (AlternateDirAuthority,
AlternateBridgeAuthority, and AlternateHSAuthority) that let the
user selectively replace the default directory authorities, rather
than the all-or-nothing replacement that DirServer offers.


svn:r12777
2007-12-12 04:38:54 +00:00
Nick Mathewson
b865587265 r15268@tombo: nickm | 2007-12-11 18:22:52 -0500
tweaks to bridge-disbursement document


svn:r12774
2007-12-11 23:23:25 +00:00
Roger Dingledine
78f532678c Relays were publishing their server descriptor to v1 and v2
directory authorities, but they didn't try publishing to v3-only
authorities. Fix this; and also stop publishing to v1 authorities.


svn:r12759
2007-12-11 20:18:12 +00:00
Roger Dingledine
ee6ae92670 New config options AuthDirBadDir and AuthDirListBadDirs for
authorities to mark certain relays as "bad directories" in the
networkstatus documents. Also supports the "!baddir" directive in
the approved-routers file.


svn:r12754
2007-12-10 16:49:54 +00:00
Roger Dingledine
5928203e9f some more docs that are missing
svn:r12753
2007-12-10 16:49:35 +00:00
Roger Dingledine
6dfd47467e Allow multiple HashedControlPassword config lines, to support
multiple controller passwords.


svn:r12732
2007-12-09 04:59:27 +00:00
Karsten Loesing
6bf8e8aec3 proposal 121: incorporated comments by Nick posted to or-dev on 10-Oct-2007
svn:r12725
2007-12-09 00:18:51 +00:00
Roger Dingledine
88fa4417e3 attacks and cleanups on the bridge disbursement plans
svn:r12720
2007-12-08 04:13:07 +00:00
Roger Dingledine
9250653471 cleanups on r12715
svn:r12718
2007-12-08 00:55:18 +00:00
Nick Mathewson
2dd9d87d07 r15220@tombo: nickm | 2007-12-07 19:53:27 -0500
add draft sketch of bridge disbursement designs.


svn:r12717
2007-12-08 00:53:43 +00:00
Roger Dingledine
2b8ca7b4a4 patch from karsten to clean up documentation and to integrate
more fixes into rend-spec.txt.


svn:r12715
2007-12-07 21:27:58 +00:00
Roger Dingledine
4152a4e835 back out half of r12709
sptor is published, it's gone, out the door, can't change it.


svn:r12710
2007-12-07 02:47:58 +00:00
Nick Mathewson
21aa295bec r16999@catbus: nickm | 2007-12-06 19:24:26 -0500
Make a couple of http instances into https.  Again, from steve.


svn:r12709
2007-12-07 00:24:28 +00:00
Nick Mathewson
2e378295d6 r16997@catbus: nickm | 2007-12-06 18:56:33 -0500
Make http://torproject urls into https://torproject urls.  Patch from steve.


svn:r12708
2007-12-06 23:56:36 +00:00
Nick Mathewson
92372b156a r16995@catbus: nickm | 2007-12-06 18:42:53 -0500
patch from steve: replace more tor.eff.org instances with torproject.org


svn:r12707
2007-12-06 23:42:59 +00:00
Roger Dingledine
75c38a2c88 Bridges now behave like clients with respect to time intervals for
downloading new consensus documents. Bridge users now wait until
the end of the interval, so their bridge will be sure to have a
new consensus document.


svn:r12696
2007-12-06 17:01:16 +00:00
Roger Dingledine
8b2585854a more work on the dirport-mirrors-downloads proposal. still not
really solved well yet.


svn:r12690
2007-12-06 10:54:57 +00:00
Roger Dingledine
94f7f4be6c three more man page entries for bridges
svn:r12689
2007-12-06 08:41:52 +00:00
Roger Dingledine
8de470cf69 Add "GETINFO/desc-annotations/id/<OR digest>" so controllers can
ask about source, timestamp of arrival, purpose, etc. We need
something like this to help Vidalia not do GeoIP lookups on bridge 
addresses.


svn:r12687
2007-12-06 07:15:06 +00:00
Roger Dingledine
3ff63b6f4e When the DANGEROUS_VERSION controller status event told us we're
running an obsolete version, it used the string "OLD" to describe
it. Yet the "getinfo" interface used the string "OBSOLETE". Now use
"OBSOLETE" in both cases.


svn:r12686
2007-12-05 19:32:58 +00:00
Roger Dingledine
a8d36c8243 some more man page entries. still missing some.
svn:r12685
2007-12-05 19:24:12 +00:00
Roger Dingledine
bf30043c88 a hint about how to be more secure
svn:r12683
2007-12-05 19:22:37 +00:00
Roger Dingledine
2d52336b60 make a new 'ideas' subdir for half-baked proposals.
make a new 'draft' status for nearly-baked proposals.


svn:r12677
2007-12-05 06:00:03 +00:00
Roger Dingledine
a1af56bce2 expand on a few items, and remove some done items
svn:r12676
2007-12-05 05:57:52 +00:00
Roger Dingledine
9cb8a4940c move the december feature list up into the 0.2.0 section of
the todo list. the feature freeze is off. better luck in 2008!


svn:r12675
2007-12-05 05:46:52 +00:00
Nick Mathewson
569ade5143 r15151@tombo: nickm | 2007-12-04 17:29:17 -0500
Remove some finished items from the TODO


svn:r12674
2007-12-04 22:29:26 +00:00
Nick Mathewson
b6a194f896 svn:r12671 2007-12-04 19:38:42 +00:00
Roger Dingledine
4a03959b10 a few more thoughts on mirroring dist/ on bridges
svn:r12667
2007-12-04 18:34:30 +00:00
Roger Dingledine
9f25d3b0a6 notes on an auto updater. not enough of a proposal to give
it a number yet though.


svn:r12662
2007-12-04 13:18:32 +00:00
Roger Dingledine
52e0bc69c0 some very early notes on bridge families
svn:r12645
2007-12-03 11:40:27 +00:00
Roger Dingledine
9db8ee8427 propsets
svn:r12644
2007-12-03 11:18:44 +00:00