mirror repository of the tor core protocol in case of issues
Go to file
Nick Mathewson 34a6755b94 Fix ed25519 link certificate race on tls context rotation
Whenever we rotate our TLS context, we change our Ed25519
Signing->Link certificate.  But if we've already started a TLS
connection, then we've already sent the old X509 link certificate,
so the new Ed25519 Signing->Link certificate won't match it.

To fix this, we now store a copy of the Signing->Link certificate
when we initialize the handshake state, and send that certificate
as part of our CERTS cell.

Fixes one case of bug22460; bugfix on 0.3.0.1-alpha.
2017-06-01 09:26:24 -04:00
changes Fix ed25519 link certificate race on tls context rotation 2017-06-01 09:26:24 -04:00
contrib bump to 0.3.0.7-dev 2017-05-18 12:28:28 -04:00
doc #21720: Update "directory server options" preamble in manpage 2017-03-14 11:25:54 -04:00
m4 Replace obsolete macros with modern equivalents 2016-12-23 10:34:11 -05:00
scripts Merge branches 'server_ciphers' and 'ciphers.inc' 2017-01-27 16:45:18 -05:00
src Fix ed25519 link certificate race on tls context rotation 2017-06-01 09:26:24 -04:00
.gitignore Merge branch 'combined-fuzzing-v4' 2017-01-30 08:40:46 -05:00
acinclude.m4 Add a cross-compile action to AC_RUN_IFELSE 2016-12-23 10:34:15 -05:00
autogen.sh Report errors when updating configuration files 2016-12-23 10:35:26 -05:00
ChangeLog Bump to 0.3.0.3-alpha-dev 2017-02-03 13:58:50 -05:00
configure.ac bump to 0.3.0.7-dev 2017-05-18 12:28:28 -04:00
Doxyfile.in doxygen says these options are obsolete 2016-10-24 10:31:05 -04:00
INSTALL Small fixes for the 2702 implementation 2011-04-02 12:15:08 +02:00
LICENSE Add __mulodi4 source to src/ext 2016-05-18 09:44:01 -04:00
Makefile.am Remove a spurious test-network-all warning that triggers when sh is not bash 2017-03-01 11:54:31 +11:00
Makefile.nmake Clean up the MVSC nmake files so they work again. 2014-09-09 10:27:05 -04:00
README Move hacking documentation into a new subdirectory. 2015-10-09 10:40:53 -04:00
ReleaseNotes forward-port the 0.2.9.9 changelog stanza 2017-01-23 09:42:02 -05:00

Tor protects your privacy on the internet by hiding the connection
between your Internet address and the services you use. We believe Tor
is reasonably secure, but please ensure you read the instructions and
configure it properly.

To build Tor from source:
        ./configure && make && make install

To build Tor from a just-cloned git repository:
        sh autogen.sh && ./configure && make && make install

Home page:
        https://www.torproject.org/

Download new versions:
        https://www.torproject.org/download/download.html

Documentation, including links to installation and setup instructions:
        https://www.torproject.org/docs/documentation.html

Making applications work with Tor:
        https://wiki.torproject.org/projects/tor/wiki/doc/TorifyHOWTO

Frequently Asked Questions:
        https://www.torproject.org/docs/faq.html


To get started working on Tor development:
        See the doc/HACKING directory.