Nick Mathewson 2797fd8f68 Revise code for adding EntryNodes to guards. ... Previously, we'd just take all the nodes in EntryNodes, see which ones were already in the guard list, and add the ones that weren't. There were some problems there, though: * We'd add _every_ entry in EntryNodes, and add them in the order they appeared in the routerlist. This wasn't a problem until we added the ability to give country-code or IP-range entries in the EntryNodes set, but now that we did, it is. (Fix: We now shuffle the entry nodes before adding them; only add up to 10*NumEntryGuards) * We didn't screen EntryNodes for the Guard flag. That's okay if the user has specified two or three entry nodes manually, but if they have listed a whole subcontinent, we should restrict ourselves to the entries that are currently guards. (Fix: separate out the new guard from the new non-guard nodes, and add the Guards first.) * We'd prepend new EntryNodes _before_ the already configured EntryNodes. This could lead to churn. (Fix: don't prepend these.) This patch also pre-screens EntryNodes entries for reachableaddresses/excludenodes, even though we check for that later. This is important now, since we cap the number of entries we'll add.		2011-07-11 10:58:07 -04:00
..
abandon-rend-circs-on-newnym	Abandon rendezvous circuits on SIGNAL NEWNYM	2011-06-17 15:22:23 -04:00
bug1297a	Use the normal four-hop CBT for client intro circuits	2011-05-30 12:24:51 -04:00
bug1345	Handle transitions in Automap*, VirtualAddrNetwork correctly	2011-05-13 16:59:31 -04:00
bug1352	Rate-limit v2 networkstatus download fail warnings	2011-04-28 21:25:24 -04:00
bug1810	Don't recreate descriptor on sighup	2011-05-21 16:08:21 -04:00
bug2355	Changes file for bug2355.	2011-06-02 15:11:21 -04:00
bug2355_revert	Tweak bug2355_revert at suggestion from Roger	2011-06-19 20:58:46 -04:00
bug2503	Add changes file for bug2503	2011-05-12 18:49:28 -04:00
bug2574	Fix typo in changes/bug2574. Thanks, rransom	2011-05-28 02:13:04 -04:00
bug2732-simple	Accept hs descriptors even if we don't see an HSDir for us	2011-05-12 00:53:07 -04:00
bug2748	Log malformed HS descriptor requests at the proper level	2011-03-14 01:15:36 -07:00
bug2752	Add credit to bug2752; correct the issue number in the changes file	2011-05-17 19:50:52 -04:00
bug2792_checkdir	Check permissions on the directory holding a control socket	2011-05-15 20:20:29 -04:00
bug2798	Revise code for adding EntryNodes to guards.	2011-07-11 10:58:07 -04:00
bug2850	Set SO_REUSEADDR on all sockets, not just listeners	2011-05-03 22:22:20 -04:00
bug2972	Clean up the 2972 implementation a little	2011-05-15 20:20:28 -04:00
bug3019	Preserve bridge download status across SETCONF, HUP	2011-05-15 20:13:44 -04:00
bug3022	Only authorities should automatically download v2 networkstatus documents	2011-04-28 21:06:07 -04:00
bug3026	bug 3026: do not upload our vote to ourself	2011-05-12 00:47:00 -04:00
bug3045	changes file for bug3045	2011-05-15 22:02:24 -04:00
bug3113	Look at the right consensus in router_add_to_routerlist()	2011-07-11 10:02:24 -04:00
bug3118	Link to libevent_openssl statically when requested	2011-05-06 15:38:32 +02:00
bug3122_memcmp	Add a data-independent variant of memcmp and a d-i memeq function.	2011-05-11 16:12:33 -04:00
bug3135	Fix crash when read_file_to_string() fails in SAVECONF	2011-05-11 22:05:41 -04:00
bug3153	Track where microdescs are referenced to prevent free errs	2011-05-12 11:10:35 -04:00
bug3175	Increase the length of the buffer in smartlist_string_num_isin().	2011-05-15 22:13:53 -04:00
bug3183	Add a changes file for bug3183.	2011-05-15 11:08:46 -04:00
bug3198	refetch bridge descriptors in a timely fashion	2011-05-17 20:48:46 -04:00
bug3200	discard circuits when we change our bridge configuration	2011-05-17 21:13:59 -04:00
bug3207	Check onion keys in microdescriptors, too	2011-05-17 19:39:00 -04:00
bug3208	Fix GCC 4.6's new -Wunused-but-set-variable warnings.	2011-05-23 17:04:38 -04:00
bug3213	Handle NULL argument to get_configured_bridge_by_addr_port_digest	2011-05-17 19:46:47 -04:00
bug3216	Don't build descriptors if ORPort auto is set and we have no OR listener	2011-05-24 21:12:23 +02:00
bug3228	Reinit keys at the start of options_act().	2011-05-30 12:41:46 -04:00
bug3252	log the reason for publishing a new relay descriptor	2011-05-19 23:59:52 -04:00
bug3263	don't mark our descriptor dirty if our onion key hasn't changed	2011-05-21 19:23:27 -04:00
bug3264	Log SSL state changes at LOG_DEBUG, LD_HANDSHAKE.	2011-06-20 17:45:12 -04:00
bug3270	Use a 64-bit type to hold sockets on win64.	2011-05-23 00:17:48 -04:00
bug3289	Warn when two hs use the same directory	2011-05-30 15:47:06 -04:00
bug3306	Detect insanely large circuit build state; don't give its length to rand_int	2011-06-06 16:18:06 -04:00
bug3309	Add info-level log messages during HS-client-state purge	2011-06-02 03:07:09 -07:00
bug3318	Reject 128-byte keys that are not 1024-bit	2011-06-03 11:31:19 -04:00
bug3321	fix a bridge edge case similar to 2511	2011-05-31 20:43:55 -04:00
bug3332	Assert that HS operations are not performed using single-hop circuits	2011-06-14 21:32:49 -07:00
bug3349	Report SIGNAL event to controllers when acting on delayed NEWNYM	2011-06-05 05:43:27 -07:00
bug3361	Fix crash bug (3361) when setting off-flavor networkstatus	2011-06-07 14:46:28 -04:00
bug3367	Add, use a bufferevent-safe connection_flush()	2011-06-21 10:22:54 -04:00
bug3369	changelog entry for bug3369	2011-06-13 13:42:00 -04:00
bug3389	Ensure the release tarball contains all manpages	2011-06-12 13:58:53 +02:00
bug3393	Add changes file for bug3393	2011-06-14 13:45:12 -04:00
bug3403	oops; wrong bug number.	2011-07-07 11:02:00 -04:00
bug3434	Fix tor-fw-helper-natpmp.c API usage	2011-06-20 20:01:46 -04:00
bug3465-022	Add BUILDTIMEOUT_SET to the result of GETINFO events/names	2011-06-25 15:02:11 -07:00
bug3465-023	Make handle_control_setevents table-driven	2011-06-25 17:45:33 -07:00
bug3536	Correctly send a SUCCEEDED event for rdns requests	2011-07-07 05:38:38 +02:00
check-fetched-rend-desc-service-id	Check fetched rendezvous descriptors' service IDs	2011-05-16 14:07:24 -04:00
check-public-key-exponents	Require that certain public keys have public exponent 65537	2011-05-16 14:28:46 -04:00
cid_428	Use strlcpy in create_unix_sockaddr()	2011-07-01 12:54:24 -04:00
cid_450	Fix insanely large stack_allocation in log_credential_status	2011-07-01 12:38:05 -04:00
cov217_scanf	Replace 4 more sscanf()s with tor_sscanf()	2011-07-01 11:26:30 -04:00
coverity_maint	Fix a rare memleak during stats writing	2011-06-08 21:35:26 +02:00
coverity_master	fix typo in changes/coverity_master spotted by rransom	2011-06-10 16:40:47 -04:00
dirvote_null_deref	Fix potential null pointer deref during dirvote	2011-05-09 13:19:46 -04:00
exit-policy-default-is-not-a-prefix	Fix trailing asterisk in the output of "GETINFO info/names"	2011-05-20 08:25:42 -07:00
feature3049	Add changes file for #3049	2011-05-20 08:25:43 -07:00
feature3076	Add a ControlPortFileGroupWritable option	2011-05-13 10:41:29 -04:00
feature3439	Add port 6523 (Gobby) to LongLivedPorts.	2011-06-20 12:08:46 -04:00
fix-connection_printf_to_buf	Make send_control_event_impl's behaviour sane	2011-06-17 13:57:25 -04:00
geoip-july2011	update to the july 2011 geoip db	2011-07-07 13:28:36 -04:00
geoip-june2011	move to the june 1 2011 maxmind geoip db	2011-06-05 11:12:28 -04:00
geoip-may2011	Update to the May 1 2011 Maxmind GeoLite Country database	2011-05-10 23:04:11 -04:00
md_cache_replace	Unmap microdesc cache before replacing it.	2011-05-12 11:19:52 -04:00
mdesc_null_deref	Fix a potential null deref when rebuilding md cache	2011-05-09 13:19:45 -04:00
memleak_rendcache	Add a changelog entry for cid30 fix.	2011-07-01 12:46:26 -04:00
microdesc_use	Code to make clients fetch and use microdescriptors for circuit building	2011-05-05 20:54:12 -04:00
prefer_tt_assert	Prefer tt_assert in unit tests, not tor_assert	2011-06-08 20:33:53 -04:00