Apparently sparc64 is way more strict about uint16_t access alignment than I had thought: it gave bus errors when messing with var-cell headers.  Maybe this patch will fix bug 862.

svn:r17262

Fix from rovv: when adding a detached signature, do not automatically assume it is good just because we are adding it.  We might also be adding it because it was the first signature we saw for a given voter.

svn:r17248

be less aggressive about deleting expired certs. based on patch from rovv.  partial fix for bug 854.

svn:r17246

Add PURPOSE= field to getinfo circuit-status.  With luck, controllers are ignoring extra fields (like they are supposed to) and this will not break any controllers.

svn:r17245

apply sebastian's fix for bug 859. Apparently on win32 one must lock at least one byte when locking, but locking a nonexistant byte is okay. ) 

svn:r17244

svn:r17217

When we get a duplicated certificate, treat it as a failure and increment the download count. Do not claim to be downloading certificates that we merely want.

svn:r17209

svn:r17208

svn:r17207

Patch from Jacob Appelbaum and me to make User option more robust, properly set supplementary groups, deprecated the Group option, and log more information on credential switching

svn:r17200

svn:r17195

svn:r17188

svn:r17185

svn:r17180

svn:r17179

Work better with tools that resist DNS poisoning by using the 0x20 hack: make DNSPort replies perserve case.

svn:r17170

svn:r17169

Verify cpath_layer match on rendezvous cells too.  Fixes another case of bug 446. Based on patch from rovv.

svn:r17162

Fix another case of refusing to use a chosen exit node because we think it will reject _mostly_ everything.  Based on patch from rovv.  See bug 752.

svn:r17139

Fix the rest of bug 619: reject *:* servers should not do DNS lookups, even if broken clients send them RELAY_BEGIN cells. Patch from rovv.

svn:r17138

Patch from rovv: send back END cell in response to connect attempts to nonexistent hidden service port.

svn:r17137

The "ClientDNSRejectInternalAddresses" config option wasn't being
consistently obeyed: if an exit relay refuses a stream because its
exit policy doesn't allow it, we would remember what IP address
the relay said the destination address resolves to, even if it's
an internal IP address. Bugfix on 0.2.0.7-alpha; patch by rovv.


svn:r17135

svn:r17113

Hidden services start out building five intro circuits rather
than three, and when the first three finish they publish a service
descriptor using those. Now we publish our service descriptor much
faster after restart.


svn:r17110

Launch a second client-side introduction circuit in parallel
after a delay of 15 seconds (based on work by Christian Wilms).


svn:r17108

svn:r17106

Patch from rovv: when we have no pending streams, choose exits with choose_good_exit_server_general() rather than with circuit_get_unhandled_ports() and friends.  Bugfix on 0.1.1.x, at least.

svn:r17091

bootstrapping; also, be more forgiving of bootstrap problems when
we're still making incremental progress on a given bootstrap phase.


svn:r17066

svn:r17059

identity fingerprints, so it's easier to paste them in.
Suggested by Lucky Green.


svn:r17021

discussion hasn't finished.


svn:r17011

Include circuit purposes in circuit events.  Now all circuit events are extended; this makes the code simpler.

svn:r17007

list. It has been gone for many months.


svn:r17005

Patch from mwenge: update TrackHostExits mapping expiry times when the mappings are used, so that they expire a while after their last use, not a while after their creation.

svn:r17004

svn:r17002

and fail to start. But dangerous permissions on
$datadir/cached-status/ would cause us to open a log and complain
there. Now complain to stdout and fail to start in both cases. Fixes
bug 820, reported by seeess.


svn:r16998

reachability testing circuits to do a bandwidth test -- if
we already have a connection to the middle hop of the testing
circuit, then it could establish the last hop by using the existing
connection. Bugfix on 0.1.2.2-alpha, exposed when we made testing
circuits no longer use entry guards in 0.2.1.3-alpha.


svn:r16997

svn:r16996

svn:r16995

svn:r16994