Skip to content
Snippets Groups Projects
  1. Apr 15, 2010
  2. Apr 14, 2010
    • Sebastian Hahn's avatar
      Add --enable-static-zlib option · 71fb687d
      Sebastian Hahn authored
      Works like the --enable-static-openssl/libevent options. Requires
      --with-zlib-dir to be set. Note that other dependencies might still
      pull in a dynamicly linked zlib, if you don't link them in statically
      too.
      71fb687d
  3. Apr 13, 2010
    • Nick Mathewson's avatar
      Fix renegotiation on OpenSSL versions that backport RFC5746. · 6ad09cc6
      Nick Mathewson authored
      Our code assumed that any version of OpenSSL before 0.9.8l could not
      possibly require SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION.  This is
      so... except that many vendors have backported the flag from later
      versions of openssl when they backported the RFC5476 renegotiation
      feature.
      
      The new behavior is particularly annoying to detect.  Previously,
      leaving SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION unset meant that
      clients would fail to renegotiate.  People noticed that one fast!
      Now, OpenSSL's RFC5476 support means that clients will happily talk to
      any servers there are, but servers won't accept renegotiation requests
      from unpatched clients unless SSL_OP_ALLOW_etc is set.  More fun:
      servers send back a "no renegotiation for you!" error, which unpatched
      clients respond to by stalling, and generally producing no useful
      error message.
      
      This might not be _the_ cause of bug 1346, but it is quite likely _a_
      cause for bug 1346.
      6ad09cc6
    • Nick Mathewson's avatar
      Merge branch 'correct_halflife' · fe57aab2
      Nick Mathewson authored
      fe57aab2
    • Nick Mathewson's avatar
      Rename CircPriorityHalflifeMsec to CircuitPriorityHalflifeMsec · 96a0edf3
      Nick Mathewson authored
      Everything that accepted the 'Circ' name handled it wrong, so even now
      that we fixed the handling of the parameter, we wouldn't be able to
      set it without making all the 0.2.2.7..0.2.2.10 relays act wonky.
      This patch makes Tors accept the 'Circuit' name instead, so we can
      turn on circuit priorities without confusing the versions that treated
      the 'Circ' name as occasion to act weird.
      96a0edf3
  4. Apr 12, 2010
  5. Apr 04, 2010
  6. Apr 03, 2010
  7. Apr 02, 2010
  8. Mar 30, 2010
  9. Mar 29, 2010
  10. Mar 21, 2010
  11. Mar 16, 2010
  12. Mar 15, 2010
  13. Mar 13, 2010
  14. Mar 11, 2010
  15. Mar 09, 2010
  16. Mar 08, 2010
  17. Mar 07, 2010
  18. Mar 05, 2010
Loading