Check V3 authority certificates for expiry, and warn the authority op as they get old.


svn:r11427

 Reject incoming votes when the valid-after time does not match the period that we're trying to vote for.


svn:r11426

 remove yet more pointless differences between our eventdns.c and the evdns.c in libevent.


svn:r11425

 remove more pointless differences between our eventdns.c and the evdns.c in libevent.


svn:r11416

 Change comments in eventdns.c to C-style, so we can more easily diff it against the version in libevent to reconcile them (again).


svn:r11415

 Undo brokenness from merge conflict.


svn:r11414

 Fix a couple of memory leaks in eventdns.c; found by niels.  Not backport candidates, since they only affect DNSPort users.


svn:r11413

svn:r11412

 Another round of whitespeace fixes.


svn:r11407

 Add some generic skew-and-tolerance functions so we can handle time more sanely.


svn:r11406

 Implement certificate fetch functions.


svn:r11405

svn:r11395

svn:r11390

 Move NT services code into its own C file.  Probably will not build happily on win32 yet; more hacking needed.


svn:r11388

svn:r11382

 There is no good reason to make hashedcontrolpassword and cookieauthentication mutually exclusive.  So let's not.


svn:r11377

 Better comment in dnsserv.c


svn:r11376

 Patch from sjmurdoch to fix dnsleak warning when reverse-resolving via socks5.


svn:r11373

 Oops. Initialize "changed" variable when removing obsolete guards.


svn:r11346

svn:r11340

 Refactor store_stats_t to hold a pointer to the proper mmap, and turn it into a full-fledged type.  This sets stuff up nicely for adding a separate "annotated" store.  Add some XXXX NM items that need to be fixed when annotated stores exist


svn:r11338

 Check correct circuit type when calling functions from rend_process_relay_cell. Backport candidate.


svn:r11336

 Fix a segfault in expand_filename("~").  Found by lindi.


svn:r11332

svn:r11327

 0-pad minutes and seconds when displaying weighted mtbf in info logs.


svn:r11324

svn:r11322

svn:r11315

 Teach tor about more libevent versions.  Be more clear that "Known bugs" means "it will crash or something."  Most significantly, stop issuing dire warnings every time we run with kqueue on os x: it seems to have worked for a while now.


svn:r11314

This is great. But it does this before configuring the logs, so
it only goes to stdout and is then lost.


svn:r11313

 Use (and debug) new file-writing functions in order to simplify code that formerly built big strings in RAM.


svn:r11301

 Refactor write_chunks_to_file_impl: break out the "pick a temporary name if it makes sense, and open the right filename" logic and the "close the file and unlink or rename if necessary" logic.  This will let us write big files in a smarter way than "Build a big string" or "make a list of chunks", once we get around to using it.


svn:r11300

 Make controllers accept LF as well as CRLF.  Update spec to reflect this.  Remove now-dead code.  Make controller warning about v0 protocol more accurate.


svn:r11299

 Add a line to the state file for each guard to let us know which version added the guard.  If the line is absent, assume the guard was added by whatever version of Tor last wrote the state file.  Remove guards if the version that added them was using a bad guard selection algorithm.  (Previously, we removed guards if the version that wrote the file was using a bad guard selection algorithm, even if the guards themselves were chosen by a good version.) 


svn:r11298

 More items for the TODO (from last Friday mtg with Roger)


svn:r11297

 Check for absent nickname when making extend info.  I still dont know when this happens, but it is easy enough to check for.  Fixes bug 467.


svn:r11293

 Sort all of the items in the TODO.  That took longer than I had hoped, but I think it was useful.


svn:r11292

 Mark TODO items with what sections I would like to move them to.  Pending scan by arma, the next commits will remove these annotations and move the items around.


svn:r11291

 Most configuration options have the same names in or.h and in torrc.  Make the macros reflect this, so that it is easier to fit them onto a line, and so that mismatched options stand out more


svn:r11290

 Add a new ClientDNSRejectInternalAddresses option (default: on) to refuse to believe that any address can map to or from an internal address.  This blocks some kinds of potential browser-based attacks, especially on hosts using DNSPort.  Also clarify behavior in some comments.  Backport candiate?


svn:r11287

svn:r11285