fix a potential confusion in fetch_from_buf_http()
make all our int config options non-negative
better bounds checking on options that are ports


svn:r2456

svn:r2449

Add an implementation of trusted_dir_server logic to switch towards simply remembering an addr/port/keyid for each trusted dir server


svn:r2443

plus complain more loudly when we fail to parse a dir we just fetched


svn:r2401

svn:r2373

than once per minute


svn:r2369

(just a skeleton for now)


svn:r2349

svn:r2344

 - make clients cache directories and use them to seed their router lists
   at startup.  This means clients have a datadir again.
 - Introduce a global_write_bucket.  We need to respond better to exhausting
   it.
 - Remove the last vestiges of LinkPadding and TrafficShaping.
 - Configuration infrastructure support for warning on obsolete options.
 - Refactor directory header parsing to use smartlist_split_string.
 - Respond to content-encoding headers by trying to uncompress as appropriate.
 - Reply with a deflated directory when a client asks for "dir.z".
   (We could use allow-encodings instead, but allow-encodings isn't
   specified in HTTP 1.0.)


svn:r2335

svn:r2329

svn:r2327

svn:r2310

As far as I can tell, CONFIG_LEGAL_FILENAME_CHARACTERS is both pointless and broken.  #if it out, pending agreement from arma.  This fixes a bug on win32 that rejected paths with a : in them.


svn:r2309

svn:r2295

svn:r2294

svn:r2279

svn:r2269

svn:r2267

svn:r2266

On windows, default datadir is APPDATA/tor, and default config file is APPDATA/tor/torrc.  (APPDATA is usually somedrive:/Documents and Settings/.../Application Data/)


svn:r2265

svn:r2263

svn:r2261

svn:r2260

svn:r2259

svn:r2256

svn:r2249

svn:r2246

svn:r2245

Add a generic Comma-separated-value config type, and a FirewallPorts option to tell FascistFirewall which ports are open.  (Defaults to 80,443)


svn:r2244

  options->Address with the resolved one at startup.
  o detect our address right before we make a routerinfo each time.
o external IP vs bind-IP. Already done, just use options->Address.
o OutboundBindAddress config option, to bind to a specific
  IP address for outgoing connect()s.


svn:r2241

svn:r2236

o and/or while avoiding unreliable nodes, depending on goals
o 'fascistfirewall' option to pick dirservers on port 80 and ORs on
  port 443.
o if a begin failed due to exit policy, but we believe the IP should                       have been allowed, switch that router to exitpolicy reject *:* until                     we get our next directory.


svn:r2231

svn:r2229

svn:r2134

svn:r2092

introduce an authdir_mode() macro to match the others.
don't initialize uptime to the number of seconds since 1970.
non-authoritative dirservers don't cache their directory on disk.
make only authdirservers use clique_mode.
only read approved-routers file if you're an authdirserver.
even authdirservers fetch a new directory in do_hup.
retry_all_connections() is now called retry_all_listeners().
router_parse_list_from_string() correctly reports the router number
  it's working on.
only call dirserv_add_own_fingerprint() and
   dirserv_add_descriptor() on startup if we're an authdirserver.
if AuthDir and !ORPort then fail.
if AuthDir and ClientOnly then fail.


svn:r2061

abstract ORPort/SocksPort checks into server_mode(), proxy_mode(), clique_mode(), etc.  Dont change underlying comments.


svn:r2054

svn:r2048

Finish most pre2 items: make running-routers list work right; rename secret key files; make even more lookup-by-nickname use lookup-by-id; default nicknames to hostname.


svn:r2043

letting clients evaluate whether they're suitable servers


svn:r2037