svn:r8606

  hidden service authorities too.
- Just because your DirPort is open doesn't mean people should be
  able to remotely teach you about hidden service descriptors. Now
  only accept rendezvous posts if you've got HSAuthoritativeDir set.


svn:r8573

svn:r8568

the X-Forwarded-For header.


svn:r8553

 Differentiate more duplicated log entries


svn:r8542

 Make "is a v1 authority", "is a v2 authority", and "is a hidden service authority" into separate flags so we can eventually migrate more trust away from moria.


svn:r8523

 Add a space in a wrapped log message


svn:r8517

 Restore to previous wording that svk merging made me mess up


svn:r8516

 router_set_networkstatus() gets a list of status documents we asked for from
 connection_dir_client_reached_eof().  However, as a cache we (sometimes?) just
 ask for "all".  router_set_networkstatus() would freak out over that, meaning
 it would log a warning and drop the status document instead of caching it
 as it is supposed to.  Now we let router_set_networkstatus() know if the
 data comes from an all-request so it can do the right thing.


svn:r8513

svn:r8497

 router_set_networkstatus() gets a list of status documents we asked for from
 connection_dir_client_reached_eof().  However, as a cache we (sometimes?) just
 ask for "all".  router_set_networkstatus() would freak out over that, meaning
 it would log a warning and drop the status document instead of caching it
 as it is supposed to.  Now we let router_set_networkstatus() know if the
 data comes from an all-request so it can do the right thing.


svn:r8398

a client, so you can become a server more smoothly.


svn:r8359

 Clean up wide lines from last patch.


svn:r6907

 Refactor connection_t into edge, or, dir, control, and base subtypes.  This might save some RAM on busy exit servers, but really matters most in terms of correctness.


svn:r6906

svn:r6815

out network statuses! so clients were downloading the whole thing,
and then discarding them because they're malformed.


svn:r6778

by asking the directory authorities. This code only kicks in when you
would normally have exited with a "no address" error.

This design is flawed, though, since the X-Your-Address-Is header is not
authenticated, and doing it this way introduces too many new attacks. The
right answer is to give IP address hints inside the HELLO cell; much of
this code can be reused when we switch.


svn:r6774

svn:r6763

svn:r6735

svn:r6734

svn:r6722

svn:r6707

Unify HTTP response code into one place so it is easier to add headers.  Add an X-You-Are header, which we should probably rename. NOTE that we should not use this field for things where it matters if dirs lie.


svn:r6705

complete_only == !allow_partial. This enables useful use of partial desc downloads. Backport candidate


svn:r6700

svn:r6678

svn:r6675

When requesting or serving resources via fingerprint/digest, request and respond in-order, removing duplicates.


svn:r6673

svn:r6664

write_to_buf != connection_write_to_buf.  Also, add a connection_write_to_buf_zlib wrapper that sucks.


svn:r6650

svn:r6646

svn:r6645

svn:r6644

Instead of adding servers and v1 directories to buffers en masse, directory servers add them on the fly as their outbufs are depleted.  This will save ram on busy dirservers.


svn:r6641

svn:r6629

svn:r6628

svn:r6627

Add a new warning to our "warn a lot" list: unused parameters.  This means we have to explicitly "use" unuseds, but it can catch bugs.  (It caught two coding mistakes so far.)


svn:r6532

svn:r6396

Change a dumb interface.  Also, increment trusted_dir_server_t.n_networkstatus_failures when an all.z download fails entirely or partially.


svn:r6345

svn:r6340