See: #40601.

Peter Müller authored Apr 30, 2022 and Alexander Færøy committed May 09, 2022

This was found to be necessary in conjunction with glibc 2.35 on Linux. 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>

Apparently glibc-2.34 uses clone3, when previously it just used
clone.

Closes ticket #40590.

Due to a possible Guard subsystem recursion, when the HS client gets
notified that the directory information has changed, it must run it in a
seperate mainloop event to avoid such issue.

See the ticket for more information on the recursion. This also fixes a
fatal assert.

Fixes #40579
Signed-off-by: David Goulet <dgoulet@torproject.org>

Prometheus needs unique labels and so this bug was causing an onion
service with multiple ports to have multiple "port=" label for the
metrics requiring a port label.

Fixes #40581
Signed-off-by: David Goulet <dgoulet@torproject.org>

This enables on-demand debian packaging CI builds on maintenance
branches, to replace (often unnecessary) daily scheduled builds.

Fixes #40552
Signed-off-by: David Goulet <dgoulet@torproject.org>

Signed-off-by: David Goulet <dgoulet@torproject.org>

Signed-off-by: David Goulet <dgoulet@torproject.org>

Signed-off-by: David Goulet <dgoulet@torproject.org>

HSv2 is not advertised as a supported protocol version anymore.

This was introduced with the merge-forward of commit 72041c63


which didn't fix the unit test.

Fixes #40549
Signed-off-by: David Goulet <dgoulet@torproject.org>

Jérôme Charaoui authored Jan 10, 2022 and David Goulet committed Jan 18, 2022

This removes the '/blog/' URL component which relies on a 
redirection since the blog has been migrated to Lektor

Change https://www.torproject.org/download/download#warning to
https://support.torproject.org/faq/staying-anonymous/



Closes #40544
Signed-off-by: David Goulet <dgoulet@torproject.org>

We removed HSIntro=3 and HSDir=1 that are v2 specific. Since 0.3.5.17,
we do not support introducing or being a directory for onion service v2.

Closes #40509
Signed-off-by: David Goulet <dgoulet@torproject.org>

This avoids performing and then freeing a lot of small mallocs() if
the hash line has too many elements.

Fixes one case of bug 40472; resolves OSS-Fuzz 38363.  Bugfix on
0.3.1.1-alpha when the consdiff parsing code was introduced.

As a side effect, this fixes a "Bug" warning.

Closes #40515.  Bugfix on 0.2.4.10-alpha.

From LibreSSL versions 3.2.1 through 3.4.0, our configure script
would conclude that TLSv1.3 as supported, but it actually wasn't.
This led to annoying breakage like #40128 and #40445.

Now we give an error message if we try to build with one of those
versions.

Closes #40511.

Previously the logic was reversed, and always gave the wrong answer.
This has no other effect than to change whether we suppress
deprecated API warnings.

Fixes #40429; bugfix on 0.3.5.13.

Signed-off-by: David Goulet <dgoulet@torproject.org>