svn:r2461

plus unshadow some variables


svn:r2460

svn:r2459

Check fingerprint list before generating running-routers lists; also add as-yet-uncalled function to update an OR connection nickname on the fly


svn:r2458

svn:r2457

fix a potential confusion in fetch_from_buf_http()
make all our int config options non-negative
better bounds checking on options that are ports


svn:r2456

and clean some deadweight from util.h


svn:r2455

svn:r2454

svn:r2453

Make a bounds-checking replacement for strtol with slightly easier error-checking in the common case


svn:r2452

svn:r2451

svn:r2450

svn:r2449

svn:r2447

svn:r2446

svn:r2445

svn:r2444

Add an implementation of trusted_dir_server logic to switch towards simply remembering an addr/port/keyid for each trusted dir server


svn:r2443

svn:r2442

svn:r2441

svn:r2440

svn:r2439

sometimes circuit_get_open_circ_or_launch() can return 0 but not
return a circuit, e.g. because too many circuits have failed recently
so the new one didn't launch. we need to tolerate that.


svn:r2438

We don't think this is exploitable, but best to fix it anyway.


svn:r2437

svn:r2436

what went wrong


svn:r2435

svn:r2434

svn:r2433

svn:r2432

svn:r2431

svn:r2430

Turn tor_strpartion into a swiss-army-knife function, so it can terminate or not-terminate appropriately.


svn:r2429

Include a dir-signing-key token in directories to tell the parsing entity which key is being used to sign.  This is the first step in obsoleting the dirservers file.


svn:r2428

svn:r2427

svn:r2426

svn:r2425

svn:r2424

Make base-64-encoded DER work, including workaround for ugly openssl misfeature that makes base64 decoding fail when you strip out the newlines.


svn:r2423

svn:r2422

svn:r2421