changelog cleanups. give 0.2.1.6-alpha a deadline.

svn:r16995
This commit is contained in:
Roger Dingledine 2008-09-29 06:54:32 +00:00
parent 99755f374d
commit 57942415ef

View File

@ -1,21 +1,21 @@
Changes in version 0.2.1.6-alpha - 2008-09-xx Changes in version 0.2.1.6-alpha - 2008-09-29
o Major features: o Major features:
- Implement proposal 121: make it possible to build hidden services - Implement proposal 121: make it possible to build hidden services
that only certain clients are allowed to connect to. This is that only certain clients are allowed to connect to. This is
enforced at several points, so that unauthorized clients are enforced at several points, so that unauthorized clients are unable
unable to send INTRODUCE cells to the service, or even (depending to send INTRODUCE cells to the service, or even (depending on the
on the type of authentication) to learn introduction points. This type of authentication) to learn introduction points. This feature
feature raises the bar for certain kinds of active attacks against raises the bar for certain kinds of active attacks against hidden
hidden services. Code by Karsten Loesing. services. Code by Karsten Loesing.
- Relays now store and serve v2 hidden service descriptors by default - Relays now store and serve v2 hidden service descriptors by default,
(i.e. new default value for HidServDirectoryV2 is 1). This is the i.e., the new default value for HidServDirectoryV2 is 1. This is
last step in proposal 114, which aims to make hidden service the last step in proposal 114, which aims to make hidden service
connections more reliable. lookups more reliable.
- Allow node restrictions to work include country codes. The syntax - Allow node restrictions to include country codes. The syntax to
to exclude nodes an a country with country code XX is "ExcludeNodes exclude nodes in a country with country code XX is "ExcludeNodes
{XX}". Patch from Robert Hogan. {XX}". Patch from Robert Hogan.
- Allow ExitNodes list to include IP ranges and country codes, just like - Allow ExitNodes list to include IP ranges and country codes, just
the Exclude*Nodes lists. Patch from Robert Hogan. like the Exclude*Nodes lists. Patch from Robert Hogan.
o Major bugfixes: o Major bugfixes:
- Fix a bug when parsing ports in tor_addr_port_parse() that caused - Fix a bug when parsing ports in tor_addr_port_parse() that caused
@ -23,12 +23,12 @@ Changes in version 0.2.1.6-alpha - 2008-09-xx
relay. Fixes bug 809. Bugfix on 0.2.1.5-alpha. relay. Fixes bug 809. Bugfix on 0.2.1.5-alpha.
- When extending a circuit to a hidden service directory to upload a - When extending a circuit to a hidden service directory to upload a
rendezvous descriptor using a BEGIN_DIR cell, almost 1/6 of all rendezvous descriptor using a BEGIN_DIR cell, almost 1/6 of all
requests failed, because the router descriptor has not been requests failed, because the router descriptor had not been
downloaded yet. In these cases, do not attempt to upload the downloaded yet. In these cases, we now wait until the router
rendezvous descriptor, but wait until the router descriptor is descriptor is downloaded, and then retry. Likewise, clients
downloaded and retry. Likewise, do not attempt to fetch a rendezvous now skip over a hidden service directory if they don't yet have
descriptor from a hidden service directory for which the router its router descriptor, rather than futilely requesting it and
descriptor has not yet been downloaded. Fixes bug 767. Bugfix putting mysterious complaints in the logs. Fixes bug 767. Bugfix
on 0.2.0.10-alpha. on 0.2.0.10-alpha.
- When fetching v0 and v2 rendezvous service descriptors in parallel, - When fetching v0 and v2 rendezvous service descriptors in parallel,
we were failing the whole hidden service request when the v0 we were failing the whole hidden service request when the v0
@ -60,18 +60,19 @@ Changes in version 0.2.1.6-alpha - 2008-09-xx
the user knows what they were asking for. Fixes bug 752. Bugfix the user knows what they were asking for. Fixes bug 752. Bugfix
on 0.0.9rc5. Diagnosed by BarkerJr. on 0.0.9rc5. Diagnosed by BarkerJr.
- If we are not using BEGIN_DIR cells, don't attempt to contact hidden - If we are not using BEGIN_DIR cells, don't attempt to contact hidden
service directories with non-open dir port. Bugfix on 0.2.0.10-alpha. service directories if they have no advertised dir port. Bugfix
on 0.2.0.10-alpha.
- If we overrun our per-second write limits a little, count this as - If we overrun our per-second write limits a little, count this as
having used up our write allocation for the second, and choke outgoing having used up our write allocation for the second, and choke
directory writes. Previously, we had only counted this when we outgoing directory writes. Previously, we had only counted this when
had met our limits precisely. Fixes bug 824. Patch from by rovv. we had met our limits precisely. Fixes bug 824. Patch from by rovv.
Bugfix on 0.2.0.x (??). Bugfix on 0.2.0.x (??).
- Avoid a 0/0 calculation when calculating router uptime at directory - Avoid a "0 divided by 0" calculation when calculating router uptime
authorities. Bugfix on 0.2.0.8-alpha. at directory authorities. Bugfix on 0.2.0.8-alpha.
o Minor bugfixes (controller): o Minor bugfixes (controller):
- Make DNS resolved events into "CLOSED", not "FAILED". Bugfix on - Make DNS resolved events into "CLOSED", not "FAILED". Bugfix on
0.1.2.5-alpha. Fix by Robert Hogan. Resolves bug 807. 0.1.2.5-alpha. Fix by Robert Hogan. Resolves bug 807.
o Minor features: o Minor features:
- Update to the "September 1 2008" ip-to-country file. - Update to the "September 1 2008" ip-to-country file.
@ -85,19 +86,19 @@ Changes in version 0.2.1.6-alpha - 2008-09-xx
port. Use "getinfo dir/status-vote/current/consensus" to fetch it. port. Use "getinfo dir/status-vote/current/consensus" to fetch it.
- Better logging about stability/reliability calculations on directory - Better logging about stability/reliability calculations on directory
servers. servers.
- Drop the requirement to have an open dir port for storing and serving - Drop the requirement to have an open dir port for storing and
v2 hidden service descriptors. serving v2 hidden service descriptors.
- Authorities now serve a /tor/dbg-stability.txt URL to help debug - Directory authorities now serve a /tor/dbg-stability.txt URL to
WFU and MTBF calculations. help debug WFU and MTBF calculations.
- Implement most of Proposal 152: allow specialized servers to permit - Implement most of Proposal 152: allow specialized servers to permit
single-hop circuits, and clients to use those servers to build single-hop circuits, and clients to use those servers to build
single-hop circuits when using a specialized controller. Patch single-hop circuits when using a specialized controller. Patch
from Josh Albrecht. Resolves "Bug" 768. from Josh Albrecht. Resolves feature request 768.
o Code simplifications and refactoring: o Code simplifications and refactoring:
- Revise the connection_new functions so that a more typesafe variant - Revise the connection_new functions so that a more typesafe variant
exists. This will work better with Coverity, and let us find any exists. This will work better with Coverity, and let us find any
actual mistakes we're making here. actual mistakes we're making here.
- Refactor unit testing logic so that dmalloc can be used sensibly - Refactor unit testing logic so that dmalloc can be used sensibly
with unit tests to check for memory leaks. with unit tests to check for memory leaks.
- Move all hidden-service related fields from connection and circuit - Move all hidden-service related fields from connection and circuit
@ -354,7 +355,7 @@ Changes in version 0.2.0.29-rc - 2008-07-08
O_CREAT flag. Fortify was complaining, and correctly so. Fixes O_CREAT flag. Fortify was complaining, and correctly so. Fixes
bug 742; fix from Michael Scherer. Bugfix on 0.0.2pre19. bug 742; fix from Michael Scherer. Bugfix on 0.0.2pre19.
- Correctly detect transparent proxy support on Linux hosts that - Correctly detect transparent proxy support on Linux hosts that
require in.h to be included before netfilter_ipv4.h. Patch require in.h to be included before netfilter_ipv4.h. Patch
from coderman. from coderman.
- Disallow session resumption attempts during the renegotiation - Disallow session resumption attempts during the renegotiation
stage of the v2 handshake protocol. Clients should never be trying stage of the v2 handshake protocol. Clients should never be trying