1. 15 Oct, 2020 1 commit
  2. 01 Oct, 2020 1 commit
  3. 28 Sep, 2020 1 commit
  4. 23 Sep, 2020 1 commit
    • maurice_pibouin's avatar
      Implement IPv6 sybil protection. · 43672f9f
      maurice_pibouin authored and Nick Mathewson's avatar Nick Mathewson committed
         [This is a squashed patch for ticket 7193, based on taking a "git
         diff" for the original branch, then applying it with "git apply
         -3".  I earlier attempted to squash the branch with "git rebase",
         but there were too many conflicts. --nickm]
  5. 17 Sep, 2020 3 commits
    • Nick Mathewson's avatar
      Use the correct SIGNED_KEY_TYPE value for signing->link certs · 5d1d7afc
      Nick Mathewson authored
      Our code was using [01] as for the key type of signed->link certs,
      which was incorrect.  The value should be [03], to indicate that the
      value as the SHA256 of an x.509 cert.
      Fortunately, nothing cares about this value, so there shouldn't be
      compatibility issues.
      Fixes bug 40124; bugfix on
    • Nick Mathewson's avatar
      Fix wide lines · 22643272
      Nick Mathewson authored
    • Nick Mathewson's avatar
      Rename tor_cert_create to tor_cert_create_ed25519 · c92e1926
      Nick Mathewson authored
      This is an automated commit, generated by this command:
      ./scripts/maint/rename_c_identifier.py \
              tor_cert_create tor_cert_create_ed25519
      It was generated with --no-verify, so it probably breaks some commit hooks.
      The commiter should be sure to fix them up in a subsequent commit.
  6. 19 Aug, 2020 1 commit
  7. 05 Aug, 2020 1 commit
    • Nick Mathewson's avatar
      Replace several C identifiers for ticket 18106. · b417594d
      Nick Mathewson authored
      We used to have a single boolean, "FascistFirewall".  Ages ago, in
      tickets #17840 and #9067, we added an improved "ReachableAddresses"
      mechanism.  It's time to rename related identifiers in the code for
      consistency.  This closes #18106.
      This is an automated commit, generated by this command:
      ./scripts/maint/rename_c_identifier.py \
              fascist_firewall_allows_address reachable_addr_allows \
              fascist_firewall_use_ipv6 reachable_addr_use_ipv6 \
              fascist_firewall_prefer_ipv6_impl reachable_addr_prefer_ipv6_impl \
              fascist_firewall_prefer_ipv6_orport reachable_addr_prefer_ipv6_orport \
              fascist_firewall_prefer_ipv6_dirport reachable_addr_prefer_ipv6_dirport \
              fascist_firewall_allows_address_addr reachable_addr_allows_addr \
              fascist_firewall_allows_address_ap reachable_addr_allows_ap \
              fascist_firewall_allows_base reachable_addr_allows_base \
              fascist_firewall_allows_ri_impl reachable_addr_allows_ri_impl \
              fascist_firewall_allows_rs_impl reachable_addr_allows_rs_impl \
              fascist_firewall_allows_rs reachable_addr_allows_rs \
              fascist_firewall_allows_md_impl reachable_addr_allows_md_impl \
              fascist_firewall_allows_node reachable_addr_allows_node \
              fascist_firewall_allows_dir_server reachable_addr_allows_dir_server \
              fascist_firewall_choose_address_impl reachable_addr_choose_impl \
              fascist_firewall_choose_address reachable_addr_choose \
              fascist_firewall_choose_address_base reachable_addr_choose_base \
              fascist_firewall_choose_address_rs reachable_addr_choose_from_rs \
              fascist_firewall_choose_address_ls reachable_addr_choose_from_ls \
              fascist_firewall_choose_address_node reachable_addr_choose_from_node \
              fascist_firewall_choose_address_dir_server reachable_addr_choose_from_dir_server
  8. 16 Jul, 2020 1 commit
  9. 14 Jul, 2020 3 commits
  10. 07 Jul, 2020 1 commit
    • David Goulet's avatar
      addr: New function relay_address_new_suggestion() · 192d367b
      David Goulet authored
      This behaves like router_new_address_suggestion() but differs in couple of
        1. It takes a tor_addr_t instead of an address string and supports both
           AF_INET and AF_INET6.
        2. It does _not_ use the last_guessed_ip local cache and instead only relies
           on the last resolved address cache in resolve_addr.c
      It is not used at this commit. This function is made to process a suggested
      address found in a NETINFO cell exactly like router_new_address_suggestion()
      does with the address a directory suggests us.
      Related to #40022
      Signed-off-by: David Goulet's avatarDavid Goulet <dgoulet@torproject.org>
  11. 02 Jul, 2020 2 commits
    • Nick Mathewson's avatar
      Allow multiple addresses in extend_info_t. · e93ad428
      Nick Mathewson authored and David Goulet's avatar David Goulet committed
      In practice, there will be at most one ipv4 address and ipv6 address
      for now, but this code is designed to not care which address is
      which until forced to do so.
      This patch does not yet actually create extend_info_t objects with
      multiple addresses.
      Closes #34069.
    • teor's avatar
      router: Authorities add their own IPv6 to trusted dir servers · 1f58b0ca
      teor authored and David Goulet's avatar David Goulet committed
      Authorities currently add themselves to the trusted dir servers list,
      but if they have an IPv6 ORPort, they leave it out.
      This commit makes authorities add their own IPv6 ORPort to the trusted
      dir servers list.
      Closes ticket 32822.
  12. 30 Jun, 2020 2 commits
  13. 24 Jun, 2020 5 commits
  14. 23 Jun, 2020 1 commit
  15. 21 May, 2020 3 commits
  16. 18 May, 2020 10 commits
  17. 11 May, 2020 3 commits