|  | @@ -2550,62 +2550,143 @@ Changes in version 0.0.6.1 - 2004-05-06
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  Changes in version 0.0.6 - 2004-05-02
 | 
	
		
			
				|  |  | +  [version bump only]
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.6rc4 - 2004-05-01
 | 
	
		
			
				|  |  | +  o Update the built-in dirservers list to use the new directory format
 | 
	
		
			
				|  |  | +  o Fix a rare seg fault: if a node offering a hidden service attempts
 | 
	
		
			
				|  |  | +    to build a circuit to Alice's rendezvous point and fails before it
 | 
	
		
			
				|  |  | +    reaches the last hop, it retries with a different circuit, but
 | 
	
		
			
				|  |  | +    then dies.
 | 
	
		
			
				|  |  | +  o Handle windows socket errors correctly.
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.6rc3 - 2004-04-28
 | 
	
		
			
				|  |  | +  o Don't expire non-general excess circuits (if we had enough
 | 
	
		
			
				|  |  | +    circuits open, we were expiring rendezvous circuits -- even
 | 
	
		
			
				|  |  | +    when they had a stream attached. oops.)
 | 
	
		
			
				|  |  | +  o Fetch randomness from /dev/urandom better (not via fopen/fread)
 | 
	
		
			
				|  |  | +  o Better debugging for tls errors
 | 
	
		
			
				|  |  | +  o Some versions of openssl have an SSL_pending function that erroneously
 | 
	
		
			
				|  |  | +    returns bytes when there is a non-application record pending.
 | 
	
		
			
				|  |  | +  o Set Content-Type on the directory and hidserv descriptor.
 | 
	
		
			
				|  |  | +  o Remove IVs from cipher code, since AES-ctr has none.
 | 
	
		
			
				|  |  | +  o Win32 fixes. Tor now compiles on win32 with no warnings/errors.
 | 
	
		
			
				|  |  | +    o We were using an array of length zero in a few places.
 | 
	
		
			
				|  |  | +    o win32's gethostbyname can't resolve an IP to an IP.
 | 
	
		
			
				|  |  | +    o win32's close can't close a socket.
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.6rc2 - 2004-04-26
 | 
	
		
			
				|  |  | +  o Fix a bug where we were closing tls connections intermittently.
 | 
	
		
			
				|  |  | +    It turns out openssl keeps its errors around -- so if an error
 | 
	
		
			
				|  |  | +    happens, and you don't ask about it, and then another openssl
 | 
	
		
			
				|  |  | +    operation happens and succeeds, and you ask if there was an error,
 | 
	
		
			
				|  |  | +    it tells you about the first error. Fun fun.
 | 
	
		
			
				|  |  | +  o Fix a bug that's been lurking since 27 may 03 (!)
 | 
	
		
			
				|  |  | +    When passing back a destroy cell, we would use the wrong circ id.
 | 
	
		
			
				|  |  | +    'Mostly harmless', but still worth fixing.
 | 
	
		
			
				|  |  | +  o Since we don't support truncateds much, don't bother sending them;
 | 
	
		
			
				|  |  | +    just close the circ.
 | 
	
		
			
				|  |  | +  o check for <machine/limits.h> so we build on NetBSD again (I hope).
 | 
	
		
			
				|  |  | +  o don't crash if a conn that sent a begin has suddenly lost its circuit
 | 
	
		
			
				|  |  | +    (this was quite rare).
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.6rc1 - 2004-04-25
 | 
	
		
			
				|  |  | +  o We now rotate link (tls context) keys and onion keys.
 | 
	
		
			
				|  |  | +  o CREATE cells now include oaep padding, so you can tell
 | 
	
		
			
				|  |  | +    if you decrypted them correctly.
 | 
	
		
			
				|  |  | +  o Add bandwidthburst to server descriptor.
 | 
	
		
			
				|  |  | +  o Directories now say which dirserver signed them.
 | 
	
		
			
				|  |  | +  o Use a tor_assert macro that logs failed assertions too.
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.6pre5 - 2004-04-18
 | 
	
		
			
				|  |  | +  o changes from 0.0.6pre4:
 | 
	
		
			
				|  |  | +    - make tor build on broken freebsd 5.2 installs
 | 
	
		
			
				|  |  | +    - fix a failed assert when you try an intro point, get a nack, and try
 | 
	
		
			
				|  |  | +      a second one and it works.
 | 
	
		
			
				|  |  | +    - when alice uses a port that the hidden service doesn't accept,
 | 
	
		
			
				|  |  | +      it now sends back an end cell (denied by exit policy). otherwise
 | 
	
		
			
				|  |  | +      alice would just have to wait to time out.
 | 
	
		
			
				|  |  | +    - fix another rare bug: when we had tried all the intro
 | 
	
		
			
				|  |  | +      points for a hidden service, we fetched the descriptor
 | 
	
		
			
				|  |  | +      again, but we left our introcirc thinking it had already
 | 
	
		
			
				|  |  | +      sent an intro, so it kept waiting for a response...
 | 
	
		
			
				|  |  | +    - bugfix: when you sleep your hidden-service laptop, as soon
 | 
	
		
			
				|  |  | +      as it wakes up it tries to upload a service descriptor, but
 | 
	
		
			
				|  |  | +      socketpair fails for some reason (localhost not up yet?).
 | 
	
		
			
				|  |  | +      now we simply give up on that upload, and we'll try again later.
 | 
	
		
			
				|  |  | +      i'd still like to find the bug though.
 | 
	
		
			
				|  |  | +    - if an intro circ waiting for an ack dies before getting one, then
 | 
	
		
			
				|  |  | +      count it as a nack
 | 
	
		
			
				|  |  | +    - we were reusing stale service descriptors and refetching usable
 | 
	
		
			
				|  |  | +      ones. oops.
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.6pre4 - 2004-04-14
 | 
	
		
			
				|  |  | +  o changes from 0.0.6pre3:
 | 
	
		
			
				|  |  | +    - when bob fails to connect to the rendezvous point, and his
 | 
	
		
			
				|  |  | +      circ didn't fail because of the rendezvous point itself, then
 | 
	
		
			
				|  |  | +      he retries a couple of times
 | 
	
		
			
				|  |  | +    - we expire introduction and rendezvous circs more thoroughly
 | 
	
		
			
				|  |  | +      (sometimes they were hanging around forever)
 | 
	
		
			
				|  |  | +    - we expire unattached rendezvous streams that have been around
 | 
	
		
			
				|  |  | +      too long (they were sticking around forever).
 | 
	
		
			
				|  |  | +    - fix a measly fencepost error that was crashing everybody with
 | 
	
		
			
				|  |  | +      a strict glibc.
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.6pre3 - 2004-04-14
 | 
	
		
			
				|  |  | +  o changes from 0.0.6pre2:
 | 
	
		
			
				|  |  | +    - make hup work again
 | 
	
		
			
				|  |  | +    - fix some memory leaks for dirservers
 | 
	
		
			
				|  |  | +    - allow more skew in rendezvous descriptor timestamps, to help
 | 
	
		
			
				|  |  | +      handle people like blanu who don't know what time it is
 | 
	
		
			
				|  |  | +    - normal circs are 3 hops, but some rend/intro circs are 4, if
 | 
	
		
			
				|  |  | +      the initiator doesn't get to choose the last hop
 | 
	
		
			
				|  |  | +    - send acks for introductions, so alice can know whether to try
 | 
	
		
			
				|  |  | +      again
 | 
	
		
			
				|  |  | +    - bob publishes intro points more correctly
 | 
	
		
			
				|  |  | +  o changes from 0.0.5:
 | 
	
		
			
				|  |  | +    - fix an assert trigger that's been plaguing us since the days
 | 
	
		
			
				|  |  | +      of 0.0.2prexx (thanks weasel!)
 | 
	
		
			
				|  |  | +    - retry stream correctly when we fail to connect because of
 | 
	
		
			
				|  |  | +      exit-policy-reject (should try another) or can't-resolve-address
 | 
	
		
			
				|  |  | +      (also should try another, because dns on random internet servers
 | 
	
		
			
				|  |  | +      is flaky).
 | 
	
		
			
				|  |  | +    - when we hup a dirserver and we've *removed* a server from the
 | 
	
		
			
				|  |  | +      approved-routers list, now we remove that server from the
 | 
	
		
			
				|  |  | +      in-memory directories too
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.6pre2 - 2004-04-08
 | 
	
		
			
				|  |  | +  o We fixed our base32 implementation. Now it works on all architectures.
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.6pre1 - 2004-04-08
 | 
	
		
			
				|  |  |    o Features:
 | 
	
		
			
				|  |  |      - Hidden services and rendezvous points are implemented. Go to
 | 
	
		
			
				|  |  |        http://6sxoyfb3h2nvok2d.onion/ for an index of currently available
 | 
	
		
			
				|  |  |        hidden services. (This only works via a socks4a proxy such as
 | 
	
		
			
				|  |  |        Privoxy, and currently it's quite slow.)
 | 
	
		
			
				|  |  | -    - We now rotate link (tls context) keys and onion keys.
 | 
	
		
			
				|  |  | -    - CREATE cells now include oaep padding, so you can tell
 | 
	
		
			
				|  |  | -      if you decrypted them correctly.
 | 
	
		
			
				|  |  | -    - Retry stream correctly when we fail to connect because of
 | 
	
		
			
				|  |  | -      exit-policy-reject (should try another) or can't-resolve-address.
 | 
	
		
			
				|  |  | -    - When we hup a dirserver and we've *removed* a server from the
 | 
	
		
			
				|  |  | -      approved-routers list, now we remove that server from the
 | 
	
		
			
				|  |  | -      in-memory directories too.
 | 
	
		
			
				|  |  | -    - Add bandwidthburst to server descriptor.
 | 
	
		
			
				|  |  | -    - Directories now say which dirserver signed them.
 | 
	
		
			
				|  |  | -    - Use a tor_assert macro that logs failed assertions too.
 | 
	
		
			
				|  |  | -    - Since we don't support truncateds much, don't bother sending them;
 | 
	
		
			
				|  |  | -      just close the circ.
 | 
	
		
			
				|  |  | -    - Fetch randomness from /dev/urandom better (not via fopen/fread)
 | 
	
		
			
				|  |  | -    - Better debugging for tls errors
 | 
	
		
			
				|  |  | -    - Set Content-Type on the directory and hidserv descriptor.
 | 
	
		
			
				|  |  | -    - Remove IVs from cipher code, since AES-ctr has none.
 | 
	
		
			
				|  |  | -  o Bugfixes:
 | 
	
		
			
				|  |  | -    - Fix an assert trigger for exit nodes that's been plaguing us since
 | 
	
		
			
				|  |  | -      the days of 0.0.2prexx (thanks weasel!)
 | 
	
		
			
				|  |  | -    - Fix a bug where we were closing tls connections intermittently.
 | 
	
		
			
				|  |  | -      It turns out openssl keeps its errors around -- so if an error
 | 
	
		
			
				|  |  | -      happens, and you don't ask about it, and then another openssl
 | 
	
		
			
				|  |  | -      operation happens and succeeds, and you ask if there was an error,
 | 
	
		
			
				|  |  | -      it tells you about the first error.
 | 
	
		
			
				|  |  | -    - Fix a bug that's been lurking since 27 may 03 (!)
 | 
	
		
			
				|  |  | -      When passing back a destroy cell, we would use the wrong circ id.
 | 
	
		
			
				|  |  | -    - Don't crash if a conn that sent a begin has suddenly lost its circuit.
 | 
	
		
			
				|  |  | -    - Some versions of openssl have an SSL_pending function that erroneously
 | 
	
		
			
				|  |  | -      returns bytes when there is a non-application record pending.
 | 
	
		
			
				|  |  | -    - Win32 fixes. Tor now compiles on win32 with no warnings/errors.
 | 
	
		
			
				|  |  | -      o We were using an array of length zero in a few places.
 | 
	
		
			
				|  |  | -      o Win32's gethostbyname can't resolve an IP to an IP.
 | 
	
		
			
				|  |  | -      o Win32's close can't close a socket.
 | 
	
		
			
				|  |  | -      o Handle windows socket errors correctly.
 | 
	
		
			
				|  |  | -  o Portability:
 | 
	
		
			
				|  |  | -    - check for <sys/limits.h> so we build on FreeBSD again, and
 | 
	
		
			
				|  |  | -      <machine/limits.h> for NetBSD.
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  Changes in version 0.0.5 - 2004-03-30
 | 
	
		
			
				|  |  | +  [version bump only]
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.5rc3 - 2004-03-29
 | 
	
		
			
				|  |  |    o Install torrc as torrc.sample -- we no longer clobber your
 | 
	
		
			
				|  |  |      torrc. (Woo!)
 | 
	
		
			
				|  |  | -  o Fix mangled-state bug in directory fetching (was causing sigpipes).
 | 
	
		
			
				|  |  | -  o Only build circuits after we've fetched the directory: clients were
 | 
	
		
			
				|  |  | -    using only the directory servers before they'd fetched a directory.
 | 
	
		
			
				|  |  | -    This also means longer startup time; so it goes.
 | 
	
		
			
				|  |  | -  o Fix an assert trigger where an OP would fail to handshake, and we'd
 | 
	
		
			
				|  |  | -    expect it to have a nickname.
 | 
	
		
			
				|  |  | -  o Work around a tsocks bug: do a socks reject when AP connection dies
 | 
	
		
			
				|  |  | -    early, else tsocks goes into an infinite loop.
 | 
	
		
			
				|  |  | +  o Re-enable recommendedversion checking (we broke it in rc2, oops)
 | 
	
		
			
				|  |  | +  o Add in a 'notice' log level for things the operator should hear
 | 
	
		
			
				|  |  | +    but that aren't warnings
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.5rc2 - 2004-03-29
 | 
	
		
			
				|  |  |    o Hold socks connection open until reply is flushed (if possible)
 | 
	
		
			
				|  |  |    o Make exit nodes resolve IPs to IPs immediately, rather than asking
 | 
	
		
			
				|  |  |      the dns farm to do it.
 | 
	
	
		
			
				|  | @@ -2615,8 +2696,17 @@ Changes in version 0.0.5 - 2004-03-30
 | 
	
		
			
				|  |  |    o Give socks 'reject' replies their whole 15s to attempt to flush,
 | 
	
		
			
				|  |  |      rather than seeing the 60s timeout and assuming the flush had failed.
 | 
	
		
			
				|  |  |    o Clean automake droppings from the cvs repository
 | 
	
		
			
				|  |  | -  o Add in a 'notice' log level for things the operator should hear
 | 
	
		
			
				|  |  | -    but that aren't warnings
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +
 | 
	
		
			
				|  |  | +Changes in version 0.0.5rc1 - 2004-03-28
 | 
	
		
			
				|  |  | +  o Fix mangled-state bug in directory fetching (was causing sigpipes).
 | 
	
		
			
				|  |  | +  o Only build circuits after we've fetched the directory: clients were
 | 
	
		
			
				|  |  | +    using only the directory servers before they'd fetched a directory.
 | 
	
		
			
				|  |  | +    This also means longer startup time; so it goes.
 | 
	
		
			
				|  |  | +  o Fix an assert trigger where an OP would fail to handshake, and we'd
 | 
	
		
			
				|  |  | +    expect it to have a nickname.
 | 
	
		
			
				|  |  | +  o Work around a tsocks bug: do a socks reject when AP connection dies
 | 
	
		
			
				|  |  | +    early, else tsocks goes into an infinite loop.
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  
 | 
	
		
			
				|  |  |  Changes in version 0.0.4 - 2004-03-26
 |