tor/changes
David Goulet 07b3028db7 Prohibit the use of one entry node with an HS
In a nutshell, since a circuit can not exit at its entry point, it's very
easy for an attacker to find the hidden service guard if only one EntryNodes
is specified since for that guard, the HS will refuse to build a rendezvous
circuit to it.

For now, the best solution is to stop tor to allow a single EntryNodes for
an hidden service.

Fixes #14917

Signed-off-by: David Goulet <dgoulet@ev0ke.net>
2015-09-02 10:47:20 -04:00
..
.dummy Add a .dummy file in the changes directory to stop git from removing it 2015-05-11 11:41:48 -04:00
16679_16685_etc changes file for ed25519_keygen branch 2015-08-19 13:36:51 -04:00
autodetect-chutney-path Autodetect CHUTNEY_PATH if chutney is next to tor 2015-08-27 10:31:35 +10:00
bug14917 Prohibit the use of one entry node with an HS 2015-09-02 10:47:20 -04:00
bug16274 Set the open file limit to the current value before changing it 2015-08-05 13:17:33 -04:00
bug16286 Improve log messages for problems about ed25519 keypinning 2015-07-31 10:47:39 -04:00
bug16389 Add changes file for #16389 2015-08-13 15:09:35 +02:00
bug16524 Make HSDir depend on Running/Valid again. 2015-08-11 08:42:19 -04:00
bug16539 Fix a memory leak when adding an ri with expired ed certs 2015-08-12 12:27:45 -04:00
bug16644 Switch order of unblocking threads and releasing the mutex. 2015-08-04 13:35:02 -04:00
bug16697 Add get_max_sockets() and remove dead code 2015-07-30 15:21:12 -04:00
bug16741 Check for EINTR correctly on windows 2015-08-07 09:12:33 -04:00
bug16742 Increase AccountingMax example value to 40 GB. 2015-08-14 09:54:29 -04:00
bug16901 Fail in configure when openssl is too old. #16901. 2015-09-01 09:02:12 -04:00
bug16913 Remove -F from tor-resolve(1) usage message. 2015-08-30 21:57:24 +03:00
bug16924 properly delete current channel in channel_free_list 2015-09-01 15:10:10 +02:00
bug16929 Include doc/TUNING in our release tarballs 2015-09-01 09:15:11 -04:00
bug16964 Let bridge authorities run under the sandbox 2015-09-02 09:59:22 -04:00
bug16965 Let recent relays run with the chutney sandbox. 2015-09-02 09:59:50 -04:00
callgraph changes file for callgraph scripts 2015-07-30 12:35:52 -04:00
chutney-coverage When building with coverage, run chutney with coverage 2015-08-03 13:23:58 -04:00
decouple-write-handle_write Do not autoflush control connections as their outbufs get big 2015-07-30 13:31:27 -04:00
decouple_control_events Refactor our logic for sending events to controllers 2015-08-18 08:55:28 -04:00
decouple_dir_all_unreachable Decouple the backend for directory_all_unreachable to simplify our CFG 2015-08-12 11:02:20 -04:00
decouple_init_keys Split the client-only parts of init_keys() into a separate function 2015-08-11 10:41:20 -04:00
decouple_lost_owner Change lost_owning_controller() to call activate_signal(). 2015-08-13 09:17:41 -04:00
decouple_retry_directory Decouple routerlist_retry_directory_downloads() from the blob 2015-08-13 09:45:30 -04:00
early-check-paths Improved targets for "run all the tests, no, all of them." 2015-08-03 13:03:58 -04:00
feature14175-chutney-performance Add chutney performance testing support to src/test/test-network.sh 2015-07-06 16:59:15 +10:00
feature14882-TestingDirAuthVoteIsStrict New TestingDirAuthVote{Exit,Guard,HSDir}IsStrict flags 2015-08-18 14:51:57 +10:00
feature16533 Use ed25519-donna's batch verification support when applicable. 2015-08-12 16:01:28 +00:00
feature16535 Enable ed25519-donna's SSE2 code when possible for 32 bit x86. 2015-08-17 18:41:41 +00:00
geoip-july2015 Update geoip and geoip6 to the July 8 2015 database. 2015-07-29 15:49:04 +02:00
malformed-hostname-safe-logging Expand changes file 2015-08-25 09:37:52 -04:00
microdesc_cycle Remove a 9-function strongly connected component of tor's callgraph. 2015-08-10 15:00:17 -04:00
move_formatting_functions whoops; add a stale changes file 2015-08-12 12:31:03 -04:00
pullup_nulterm Remove the unused "nulterminate" option to buf_pullup() 2015-09-01 14:36:25 -04:00
test-full Improved targets for "run all the tests, no, all of them." 2015-08-03 13:03:58 -04:00
test-network-bridges-hs Test bridges and hidden services in make test-network 2015-09-02 00:52:30 +10:00
test-workqueue-windows Let's try to get test_workqueue working on windows 2015-08-05 10:34:46 -04:00
ticket13338 Remove tor-fw-helper code 2015-07-14 14:48:22 -04:00
ticket15254-hs-stats-default Enable hidden service statistics by default 2015-09-02 13:53:36 +02:00
ticket16831_part1 Adding changes file. 2015-08-23 16:06:41 +03:00
windows_only_files Wrap windows-only C files in #ifdef _WIN32 2015-07-30 11:14:15 -04:00
workqueue_reply_t Ensure worker threads actually exit when it is time 2015-08-21 10:36:53 -04:00