123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691 |
- #define NETWORKSTATUS_PRIVATE
- #include "or.h"
- #include "bridges.h"
- #include "channel.h"
- #include "circuitmux.h"
- #include "circuitmux_ewma.h"
- #include "circuitstats.h"
- #include "config.h"
- #include "connection.h"
- #include "connection_or.h"
- #include "consdiffmgr.h"
- #include "control.h"
- #include "crypto_rand.h"
- #include "crypto_util.h"
- #include "directory.h"
- #include "dirserv.h"
- #include "dos.h"
- #include "entrynodes.h"
- #include "hibernate.h"
- #include "main.h"
- #include "microdesc.h"
- #include "networkstatus.h"
- #include "nodelist.h"
- #include "protover.h"
- #include "relay.h"
- #include "router.h"
- #include "routerlist.h"
- #include "routerparse.h"
- #include "scheduler.h"
- #include "transports.h"
- #include "torcert.h"
- #include "channelpadding.h"
- #include "voting_schedule.h"
- #include "dirauth/dirvote.h"
- #include "dirauth/mode.h"
- #include "dirauth/shared_random.h"
- STATIC networkstatus_t *current_ns_consensus = NULL;
- STATIC networkstatus_t *current_md_consensus = NULL;
- typedef struct consensus_waiting_for_certs_t {
-
- networkstatus_t *consensus;
-
- char *body;
-
- time_t set_at;
-
- int dl_failed;
- } consensus_waiting_for_certs_t;
- static consensus_waiting_for_certs_t
- consensus_waiting_for_certs[N_CONSENSUS_FLAVORS];
- static time_t time_to_download_next_consensus[N_CONSENSUS_FLAVORS];
- static download_status_t consensus_dl_status[N_CONSENSUS_FLAVORS] =
- {
- { 0, 0, 0, DL_SCHED_CONSENSUS, DL_WANT_ANY_DIRSERVER,
- DL_SCHED_INCREMENT_FAILURE, 0, 0 },
- { 0, 0, 0, DL_SCHED_CONSENSUS, DL_WANT_ANY_DIRSERVER,
- DL_SCHED_INCREMENT_FAILURE, 0, 0 },
- };
- #define N_CONSENSUS_BOOTSTRAP_SCHEDULES 2
- #define CONSENSUS_BOOTSTRAP_SOURCE_AUTHORITY 0
- #define CONSENSUS_BOOTSTRAP_SOURCE_ANY_DIRSERVER 1
- static download_status_t
- consensus_bootstrap_dl_status[N_CONSENSUS_BOOTSTRAP_SCHEDULES] =
- {
- { 0, 0, 0, DL_SCHED_CONSENSUS, DL_WANT_AUTHORITY,
- DL_SCHED_INCREMENT_ATTEMPT, 0, 0 },
-
- { 0, 0, 0, DL_SCHED_CONSENSUS, DL_WANT_ANY_DIRSERVER,
- DL_SCHED_INCREMENT_ATTEMPT, 0, 0 },
- };
- static int have_warned_about_old_version = 0;
- static int have_warned_about_new_version = 0;
- static void update_consensus_bootstrap_multiple_downloads(
- time_t now,
- const or_options_t *options);
- static int networkstatus_check_required_protocols(const networkstatus_t *ns,
- int client_mode,
- char **warning_out);
- void
- networkstatus_reset_warnings(void)
- {
- SMARTLIST_FOREACH(nodelist_get_list(), node_t *, node,
- node->name_lookup_warned = 0);
- have_warned_about_old_version = 0;
- have_warned_about_new_version = 0;
- }
- void
- networkstatus_reset_download_failures(void)
- {
- int i;
- log_debug(LD_GENERAL,
- "In networkstatus_reset_download_failures()");
- for (i=0; i < N_CONSENSUS_FLAVORS; ++i)
- download_status_reset(&consensus_dl_status[i]);
- for (i=0; i < N_CONSENSUS_BOOTSTRAP_SCHEDULES; ++i)
- download_status_reset(&consensus_bootstrap_dl_status[i]);
- }
- static char *
- networkstatus_read_cached_consensus_impl(int flav,
- const char *flavorname,
- int unverified_consensus)
- {
- char buf[128];
- const char *prefix;
- if (unverified_consensus) {
- prefix = "unverified";
- } else {
- prefix = "cached";
- }
- if (flav == FLAV_NS) {
- tor_snprintf(buf, sizeof(buf), "%s-consensus", prefix);
- } else {
- tor_snprintf(buf, sizeof(buf), "%s-%s-consensus", prefix, flavorname);
- }
- char *filename = get_cachedir_fname(buf);
- char *result = read_file_to_str(filename, RFTS_IGNORE_MISSING, NULL);
- tor_free(filename);
- return result;
- }
- char *
- networkstatus_read_cached_consensus(const char *flavorname)
- {
- int flav = networkstatus_parse_flavor_name(flavorname);
- if (flav < 0)
- return NULL;
- return networkstatus_read_cached_consensus_impl(flav, flavorname, 0);
- }
- int
- router_reload_consensus_networkstatus(void)
- {
- const unsigned int flags = NSSET_FROM_CACHE | NSSET_DONT_DOWNLOAD_CERTS;
- int flav;
-
- for (flav = 0; flav < N_CONSENSUS_FLAVORS; ++flav) {
- const char *flavor = networkstatus_get_flavor_name(flav);
- char *s = networkstatus_read_cached_consensus_impl(flav, flavor, 0);
- if (s) {
- if (networkstatus_set_current_consensus(s, flavor, flags, NULL) < -1) {
- log_warn(LD_FS, "Couldn't load consensus %s networkstatus from cache",
- flavor);
- }
- tor_free(s);
- }
- s = networkstatus_read_cached_consensus_impl(flav, flavor, 1);
- if (s) {
- if (networkstatus_set_current_consensus(s, flavor,
- flags | NSSET_WAS_WAITING_FOR_CERTS,
- NULL)) {
- log_info(LD_FS, "Couldn't load unverified consensus %s networkstatus "
- "from cache", flavor);
- }
- tor_free(s);
- }
- }
- update_certificate_downloads(time(NULL));
- routers_update_all_from_networkstatus(time(NULL), 3);
- update_microdescs_from_networkstatus(time(NULL));
- return 0;
- }
- void
- vote_routerstatus_free_(vote_routerstatus_t *rs)
- {
- vote_microdesc_hash_t *h, *next;
- if (!rs)
- return;
- tor_free(rs->version);
- tor_free(rs->protocols);
- tor_free(rs->status.exitsummary);
- for (h = rs->microdesc; h; h = next) {
- tor_free(h->microdesc_hash_line);
- next = h->next;
- tor_free(h);
- }
- tor_free(rs);
- }
- void
- routerstatus_free_(routerstatus_t *rs)
- {
- if (!rs)
- return;
- tor_free(rs->exitsummary);
- tor_free(rs);
- }
- void
- document_signature_free_(document_signature_t *sig)
- {
- tor_free(sig->signature);
- tor_free(sig);
- }
- document_signature_t *
- document_signature_dup(const document_signature_t *sig)
- {
- document_signature_t *r = tor_memdup(sig, sizeof(document_signature_t));
- if (r->signature)
- r->signature = tor_memdup(sig->signature, sig->signature_len);
- return r;
- }
- void
- networkstatus_vote_free_(networkstatus_t *ns)
- {
- if (!ns)
- return;
- tor_free(ns->client_versions);
- tor_free(ns->server_versions);
- tor_free(ns->recommended_client_protocols);
- tor_free(ns->recommended_relay_protocols);
- tor_free(ns->required_client_protocols);
- tor_free(ns->required_relay_protocols);
- if (ns->known_flags) {
- SMARTLIST_FOREACH(ns->known_flags, char *, c, tor_free(c));
- smartlist_free(ns->known_flags);
- }
- if (ns->weight_params) {
- SMARTLIST_FOREACH(ns->weight_params, char *, c, tor_free(c));
- smartlist_free(ns->weight_params);
- }
- if (ns->net_params) {
- SMARTLIST_FOREACH(ns->net_params, char *, c, tor_free(c));
- smartlist_free(ns->net_params);
- }
- if (ns->supported_methods) {
- SMARTLIST_FOREACH(ns->supported_methods, char *, c, tor_free(c));
- smartlist_free(ns->supported_methods);
- }
- if (ns->package_lines) {
- SMARTLIST_FOREACH(ns->package_lines, char *, c, tor_free(c));
- smartlist_free(ns->package_lines);
- }
- if (ns->voters) {
- SMARTLIST_FOREACH_BEGIN(ns->voters, networkstatus_voter_info_t *, voter) {
- tor_free(voter->nickname);
- tor_free(voter->address);
- tor_free(voter->contact);
- if (voter->sigs) {
- SMARTLIST_FOREACH(voter->sigs, document_signature_t *, sig,
- document_signature_free(sig));
- smartlist_free(voter->sigs);
- }
- tor_free(voter);
- } SMARTLIST_FOREACH_END(voter);
- smartlist_free(ns->voters);
- }
- authority_cert_free(ns->cert);
- if (ns->routerstatus_list) {
- if (ns->type == NS_TYPE_VOTE || ns->type == NS_TYPE_OPINION) {
- SMARTLIST_FOREACH(ns->routerstatus_list, vote_routerstatus_t *, rs,
- vote_routerstatus_free(rs));
- } else {
- SMARTLIST_FOREACH(ns->routerstatus_list, routerstatus_t *, rs,
- routerstatus_free(rs));
- }
- smartlist_free(ns->routerstatus_list);
- }
- digestmap_free(ns->desc_digest_map, NULL);
- if (ns->sr_info.commits) {
- dirvote_clear_commits(ns);
- }
- tor_free(ns->sr_info.previous_srv);
- tor_free(ns->sr_info.current_srv);
- memwipe(ns, 11, sizeof(*ns));
- tor_free(ns);
- }
- networkstatus_voter_info_t *
- networkstatus_get_voter_by_id(networkstatus_t *vote,
- const char *identity)
- {
- if (!vote || !vote->voters)
- return NULL;
- SMARTLIST_FOREACH(vote->voters, networkstatus_voter_info_t *, voter,
- if (fast_memeq(voter->identity_digest, identity, DIGEST_LEN))
- return voter);
- return NULL;
- }
- document_signature_t *
- networkstatus_get_voter_sig_by_alg(const networkstatus_voter_info_t *voter,
- digest_algorithm_t alg)
- {
- if (!voter->sigs)
- return NULL;
- SMARTLIST_FOREACH(voter->sigs, document_signature_t *, sig,
- if (sig->alg == alg)
- return sig);
- return NULL;
- }
- int
- networkstatus_check_document_signature(const networkstatus_t *consensus,
- document_signature_t *sig,
- const authority_cert_t *cert)
- {
- char key_digest[DIGEST_LEN];
- const int dlen = sig->alg == DIGEST_SHA1 ? DIGEST_LEN : DIGEST256_LEN;
- char *signed_digest;
- size_t signed_digest_len;
- if (crypto_pk_get_digest(cert->signing_key, key_digest)<0)
- return -1;
- if (tor_memneq(sig->signing_key_digest, key_digest, DIGEST_LEN) ||
- tor_memneq(sig->identity_digest, cert->cache_info.identity_digest,
- DIGEST_LEN))
- return -1;
- if (authority_cert_is_blacklisted(cert)) {
-
- log_warn(LD_DIR, "Ignoring a consensus signature made with deprecated"
- " signing key %s",
- hex_str(cert->signing_key_digest, DIGEST_LEN));
- sig->bad_signature = 1;
- return 0;
- }
- signed_digest_len = crypto_pk_keysize(cert->signing_key);
- signed_digest = tor_malloc(signed_digest_len);
- if (crypto_pk_public_checksig(cert->signing_key,
- signed_digest,
- signed_digest_len,
- sig->signature,
- sig->signature_len) < dlen ||
- tor_memneq(signed_digest, consensus->digests.d[sig->alg], dlen)) {
- log_warn(LD_DIR, "Got a bad signature on a networkstatus vote");
- sig->bad_signature = 1;
- } else {
- sig->good_signature = 1;
- }
- tor_free(signed_digest);
- return 0;
- }
- int
- networkstatus_check_consensus_signature(networkstatus_t *consensus,
- int warn)
- {
- int n_good = 0;
- int n_missing_key = 0, n_dl_failed_key = 0;
- int n_bad = 0;
- int n_unknown = 0;
- int n_no_signature = 0;
- int n_v3_authorities = get_n_authorities(V3_DIRINFO);
- int n_required = n_v3_authorities/2 + 1;
- smartlist_t *list_good = smartlist_new();
- smartlist_t *list_no_signature = smartlist_new();
- smartlist_t *need_certs_from = smartlist_new();
- smartlist_t *unrecognized = smartlist_new();
- smartlist_t *missing_authorities = smartlist_new();
- int severity;
- time_t now = time(NULL);
- tor_assert(consensus->type == NS_TYPE_CONSENSUS);
- SMARTLIST_FOREACH_BEGIN(consensus->voters, networkstatus_voter_info_t *,
- voter) {
- int good_here = 0;
- int bad_here = 0;
- int unknown_here = 0;
- int missing_key_here = 0, dl_failed_key_here = 0;
- SMARTLIST_FOREACH_BEGIN(voter->sigs, document_signature_t *, sig) {
- if (!sig->good_signature && !sig->bad_signature &&
- sig->signature) {
-
- int is_v3_auth = trusteddirserver_get_by_v3_auth_digest(
- sig->identity_digest) != NULL;
- authority_cert_t *cert =
- authority_cert_get_by_digests(sig->identity_digest,
- sig->signing_key_digest);
- tor_assert(tor_memeq(sig->identity_digest, voter->identity_digest,
- DIGEST_LEN));
- if (!is_v3_auth) {
- smartlist_add(unrecognized, voter);
- ++unknown_here;
- continue;
- } else if (!cert || cert->expires < now) {
- smartlist_add(need_certs_from, voter);
- ++missing_key_here;
- if (authority_cert_dl_looks_uncertain(sig->identity_digest))
- ++dl_failed_key_here;
- continue;
- }
- if (networkstatus_check_document_signature(consensus, sig, cert) < 0) {
- smartlist_add(need_certs_from, voter);
- ++missing_key_here;
- if (authority_cert_dl_looks_uncertain(sig->identity_digest))
- ++dl_failed_key_here;
- continue;
- }
- }
- if (sig->good_signature)
- ++good_here;
- else if (sig->bad_signature)
- ++bad_here;
- } SMARTLIST_FOREACH_END(sig);
- if (good_here) {
- ++n_good;
- smartlist_add(list_good, voter->nickname);
- } else if (bad_here) {
- ++n_bad;
- } else if (missing_key_here) {
- ++n_missing_key;
- if (dl_failed_key_here)
- ++n_dl_failed_key;
- } else if (unknown_here) {
- ++n_unknown;
- } else {
- ++n_no_signature;
- smartlist_add(list_no_signature, voter->nickname);
- }
- } SMARTLIST_FOREACH_END(voter);
-
- SMARTLIST_FOREACH(router_get_trusted_dir_servers(),
- dir_server_t *, ds,
- {
- if ((ds->type & V3_DIRINFO) &&
- !networkstatus_get_voter_by_id(consensus, ds->v3_identity_digest))
- smartlist_add(missing_authorities, ds);
- });
- if (warn > 1 || (warn >= 0 &&
- (n_good + n_missing_key - n_dl_failed_key < n_required))) {
- severity = LOG_WARN;
- } else {
- severity = LOG_INFO;
- }
- if (warn >= 0) {
- SMARTLIST_FOREACH(unrecognized, networkstatus_voter_info_t *, voter,
- {
- tor_log(severity, LD_DIR, "Consensus includes unrecognized authority "
- "'%s' at %s:%d (contact %s; identity %s)",
- voter->nickname, voter->address, (int)voter->dir_port,
- voter->contact?voter->contact:"n/a",
- hex_str(voter->identity_digest, DIGEST_LEN));
- });
- SMARTLIST_FOREACH(need_certs_from, networkstatus_voter_info_t *, voter,
- {
- tor_log(severity, LD_DIR, "Looks like we need to download a new "
- "certificate from authority '%s' at %s:%d (contact %s; "
- "identity %s)",
- voter->nickname, voter->address, (int)voter->dir_port,
- voter->contact?voter->contact:"n/a",
- hex_str(voter->identity_digest, DIGEST_LEN));
- });
- SMARTLIST_FOREACH(missing_authorities, dir_server_t *, ds,
- {
- tor_log(severity, LD_DIR, "Consensus does not include configured "
- "authority '%s' at %s:%d (identity %s)",
- ds->nickname, ds->address, (int)ds->dir_port,
- hex_str(ds->v3_identity_digest, DIGEST_LEN));
- });
- {
- char *joined;
- smartlist_t *sl = smartlist_new();
- char *tmp = smartlist_join_strings(list_good, " ", 0, NULL);
- smartlist_add_asprintf(sl,
- "A consensus needs %d good signatures from recognized "
- "authorities for us to accept it. This one has %d (%s).",
- n_required, n_good, tmp);
- tor_free(tmp);
- if (n_no_signature) {
- tmp = smartlist_join_strings(list_no_signature, " ", 0, NULL);
- smartlist_add_asprintf(sl,
- "%d (%s) of the authorities we know didn't sign it.",
- n_no_signature, tmp);
- tor_free(tmp);
- }
- if (n_unknown) {
- smartlist_add_asprintf(sl,
- "It has %d signatures from authorities we don't "
- "recognize.", n_unknown);
- }
- if (n_bad) {
- smartlist_add_asprintf(sl, "%d of the signatures on it didn't verify "
- "correctly.", n_bad);
- }
- if (n_missing_key) {
- smartlist_add_asprintf(sl,
- "We were unable to check %d of the signatures, "
- "because we were missing the keys.", n_missing_key);
- }
- joined = smartlist_join_strings(sl, " ", 0, NULL);
- tor_log(severity, LD_DIR, "%s", joined);
- tor_free(joined);
- SMARTLIST_FOREACH(sl, char *, c, tor_free(c));
- smartlist_free(sl);
- }
- }
- smartlist_free(list_good);
- smartlist_free(list_no_signature);
- smartlist_free(unrecognized);
- smartlist_free(need_certs_from);
- smartlist_free(missing_authorities);
- if (n_good == n_v3_authorities)
- return 1;
- else if (n_good >= n_required)
- return 0;
- else if (n_good + n_missing_key >= n_required)
- return -1;
- else
- return -2;
- }
- #define NETWORKSTATUS_ALLOW_SKEW (24*60*60)
- int
- compare_digest_to_routerstatus_entry(const void *_key, const void **_member)
- {
- const char *key = _key;
- const routerstatus_t *rs = *_member;
- return tor_memcmp(key, rs->identity_digest, DIGEST_LEN);
- }
- int
- compare_digest_to_vote_routerstatus_entry(const void *_key,
- const void **_member)
- {
- const char *key = _key;
- const vote_routerstatus_t *vrs = *_member;
- return tor_memcmp(key, vrs->status.identity_digest, DIGEST_LEN);
- }
- routerstatus_t *
- networkstatus_vote_find_mutable_entry(networkstatus_t *ns, const char *digest)
- {
- return smartlist_bsearch(ns->routerstatus_list, digest,
- compare_digest_to_routerstatus_entry);
- }
- const routerstatus_t *
- networkstatus_vote_find_entry(networkstatus_t *ns, const char *digest)
- {
- return networkstatus_vote_find_mutable_entry(ns, digest);
- }
- int
- networkstatus_vote_find_entry_idx(networkstatus_t *ns,
- const char *digest, int *found_out)
- {
- return smartlist_bsearch_idx(ns->routerstatus_list, digest,
- compare_digest_to_routerstatus_entry,
- found_out);
- }
- MOCK_IMPL(routerstatus_t *,
- router_get_mutable_consensus_status_by_descriptor_digest,(
- networkstatus_t *consensus,
- const char *digest))
- {
- if (!consensus)
- consensus = networkstatus_get_latest_consensus();
- if (!consensus)
- return NULL;
- if (!consensus->desc_digest_map) {
- digestmap_t *m = consensus->desc_digest_map = digestmap_new();
- SMARTLIST_FOREACH(consensus->routerstatus_list,
- routerstatus_t *, rs,
- {
- digestmap_set(m, rs->descriptor_digest, rs);
- });
- }
- return digestmap_get(consensus->desc_digest_map, digest);
- }
- const routerstatus_t *
- router_get_consensus_status_by_descriptor_digest(networkstatus_t *consensus,
- const char *digest)
- {
- return router_get_mutable_consensus_status_by_descriptor_digest(
- consensus, digest);
- }
- static smartlist_t *
- router_get_descriptor_digests_in_consensus(networkstatus_t *consensus)
- {
- smartlist_t *result = smartlist_new();
- digestmap_iter_t *i;
- const char *digest;
- void *rs;
- char *digest_tmp;
- for (i = digestmap_iter_init(consensus->desc_digest_map);
- !(digestmap_iter_done(i));
- i = digestmap_iter_next(consensus->desc_digest_map, i)) {
- digestmap_iter_get(i, &digest, &rs);
- digest_tmp = tor_malloc(DIGEST_LEN);
- memcpy(digest_tmp, digest, DIGEST_LEN);
- smartlist_add(result, digest_tmp);
- }
- return result;
- }
- MOCK_IMPL(smartlist_t *,
- router_get_descriptor_digests,(void))
- {
- smartlist_t *result = NULL;
- if (current_ns_consensus) {
- result =
- router_get_descriptor_digests_in_consensus(current_ns_consensus);
- }
- return result;
- }
- MOCK_IMPL(download_status_t *,
- router_get_dl_status_by_descriptor_digest,(const char *d))
- {
- routerstatus_t *rs;
- if (!current_ns_consensus)
- return NULL;
- if ((rs = router_get_mutable_consensus_status_by_descriptor_digest(
- current_ns_consensus, d)))
- return &rs->dl_status;
- return NULL;
- }
- routerstatus_t *
- router_get_mutable_consensus_status_by_id(const char *digest)
- {
- const networkstatus_t *ns = networkstatus_get_latest_consensus();
- if (!ns)
- return NULL;
- smartlist_t *rslist = ns->routerstatus_list;
- return smartlist_bsearch(rslist, digest,
- compare_digest_to_routerstatus_entry);
- }
- const routerstatus_t *
- router_get_consensus_status_by_id(const char *digest)
- {
- return router_get_mutable_consensus_status_by_id(digest);
- }
- #define AUTHORITY_NS_CACHE_INTERVAL (10*60)
- #define NONAUTHORITY_NS_CACHE_INTERVAL (60*60)
- int
- we_want_to_fetch_flavor(const or_options_t *options, int flavor)
- {
- if (flavor < 0 || flavor > N_CONSENSUS_FLAVORS) {
-
-
- return 0;
- }
- if (authdir_mode_v3(options) || directory_caches_dir_info(options)) {
-
- return 1;
- }
- if (options->FetchUselessDescriptors) {
-
- return 1;
- }
-
- return flavor == usable_consensus_flavor();
- }
- int
- we_want_to_fetch_unknown_auth_certs(const or_options_t *options)
- {
- if (authdir_mode_v3(options) ||
- directory_caches_unknown_auth_certs((options))) {
-
- return 1;
- }
- if (options->FetchUselessDescriptors) {
-
- return 1;
- }
-
- return 0;
- }
- #define DELAY_WHILE_FETCHING_CERTS (20*60)
- #define MIN_DELAY_FOR_FETCH_CERT_STATUS_FAILURE (1*60)
- static int
- check_consensus_waiting_for_certs(int flavor, time_t now,
- download_status_t *dls)
- {
- consensus_waiting_for_certs_t *waiting;
-
- tor_assert(flavor >= 0 && flavor < N_CONSENSUS_FLAVORS);
- waiting = &consensus_waiting_for_certs[flavor];
- if (waiting->consensus) {
-
- if (waiting->set_at + DELAY_WHILE_FETCHING_CERTS > now &&
- waiting->consensus->valid_until > now) {
- return 1;
- } else {
- if (!waiting->dl_failed) {
- if (waiting->set_at + MIN_DELAY_FOR_FETCH_CERT_STATUS_FAILURE > now) {
- download_status_failed(dls, 0);
- }
- waiting->dl_failed=1;
- }
- }
- }
- return 0;
- }
- static void
- update_consensus_networkstatus_downloads(time_t now)
- {
- int i;
- const or_options_t *options = get_options();
- const int we_are_bootstrapping = networkstatus_consensus_is_bootstrapping(
- now);
- const int use_multi_conn =
- networkstatus_consensus_can_use_multiple_directories(options);
- if (should_delay_dir_fetches(options, NULL))
- return;
- for (i=0; i < N_CONSENSUS_FLAVORS; ++i) {
-
- const char *resource;
- networkstatus_t *c;
- int max_in_progress_conns = 1;
- if (! we_want_to_fetch_flavor(options, i))
- continue;
- c = networkstatus_get_latest_consensus_by_flavor(i);
- if (! (c && c->valid_after <= now && now <= c->valid_until)) {
-
- time_to_download_next_consensus[i] = now;
- }
- if (time_to_download_next_consensus[i] > now)
- continue;
- resource = networkstatus_get_flavor_name(i);
-
- if (we_are_bootstrapping && use_multi_conn) {
- max_in_progress_conns =
- options->ClientBootstrapConsensusMaxInProgressTries;
- }
- if (connection_dir_count_by_purpose_and_resource(
- DIR_PURPOSE_FETCH_CONSENSUS,
- resource)
- >= max_in_progress_conns) {
- continue;
- }
-
- if (we_are_bootstrapping && use_multi_conn
- && i == usable_consensus_flavor()) {
-
- if (networkstatus_consensus_is_already_downloading(resource))
- continue;
-
- update_consensus_bootstrap_multiple_downloads(now, options);
- } else {
-
-
- tor_assert(consensus_dl_status[i].schedule == DL_SCHED_CONSENSUS);
- if (!download_status_is_ready(&consensus_dl_status[i], now)) {
- continue;
- }
-
- if (check_consensus_waiting_for_certs(i, now, &consensus_dl_status[i])) {
- update_certificate_downloads(now);
- continue;
- }
-
- log_info(LD_DIR, "Launching %s standard networkstatus consensus "
- "download.", networkstatus_get_flavor_name(i));
- directory_get_from_dirserver(DIR_PURPOSE_FETCH_CONSENSUS,
- ROUTER_PURPOSE_GENERAL, resource,
- PDS_RETRY_IF_NO_SERVERS,
- consensus_dl_status[i].want_authority);
- }
- }
- }
- static void
- update_consensus_bootstrap_attempt_downloads(
- time_t now,
- download_status_t *dls,
- download_want_authority_t want_authority)
- {
- const char *resource = networkstatus_get_flavor_name(
- usable_consensus_flavor());
-
- tor_assert(dls->schedule == DL_SCHED_CONSENSUS);
-
- while (download_status_is_ready(dls, now)) {
- log_info(LD_DIR, "Launching %s bootstrap %s networkstatus consensus "
- "download.", resource, (want_authority == DL_WANT_AUTHORITY
- ? "authority"
- : "mirror"));
- directory_get_from_dirserver(DIR_PURPOSE_FETCH_CONSENSUS,
- ROUTER_PURPOSE_GENERAL, resource,
- PDS_RETRY_IF_NO_SERVERS, want_authority);
-
- download_status_increment_attempt(dls, resource, now);
- }
- }
- static void
- update_consensus_bootstrap_multiple_downloads(time_t now,
- const or_options_t *options)
- {
- const int usable_flavor = usable_consensus_flavor();
-
- if (!networkstatus_consensus_can_use_multiple_directories(options)) {
- return;
- }
-
-
-
- if (networkstatus_consensus_can_use_extra_fallbacks(options)) {
- download_status_t *dls_f =
- &consensus_bootstrap_dl_status[CONSENSUS_BOOTSTRAP_SOURCE_ANY_DIRSERVER];
- if (!check_consensus_waiting_for_certs(usable_flavor, now, dls_f)) {
-
- update_consensus_bootstrap_attempt_downloads(now, dls_f,
- DL_WANT_ANY_DIRSERVER);
- }
- }
-
- download_status_t *dls_a =
- &consensus_bootstrap_dl_status[CONSENSUS_BOOTSTRAP_SOURCE_AUTHORITY];
- if (!check_consensus_waiting_for_certs(usable_flavor, now, dls_a)) {
- update_consensus_bootstrap_attempt_downloads(now, dls_a,
- DL_WANT_AUTHORITY);
- }
- }
- void
- networkstatus_consensus_download_failed(int status_code, const char *flavname)
- {
- int flav = networkstatus_parse_flavor_name(flavname);
- if (flav >= 0) {
- tor_assert(flav < N_CONSENSUS_FLAVORS);
-
- download_status_failed(&consensus_dl_status[flav], status_code);
-
- update_consensus_networkstatus_downloads(time(NULL));
- }
- }
- #define CONSENSUS_MIN_SECONDS_BEFORE_CACHING 120
- static void
- update_consensus_networkstatus_fetch_time_impl(time_t now, int flav)
- {
- const or_options_t *options = get_options();
- networkstatus_t *c = networkstatus_get_latest_consensus_by_flavor(flav);
- const char *flavor = networkstatus_get_flavor_name(flav);
- if (! we_want_to_fetch_flavor(get_options(), flav))
- return;
- if (c && c->valid_after <= now && now <= c->valid_until) {
- long dl_interval;
- long interval = c->fresh_until - c->valid_after;
- long min_sec_before_caching = CONSENSUS_MIN_SECONDS_BEFORE_CACHING;
- time_t start;
- if (min_sec_before_caching > interval/16) {
-
- min_sec_before_caching = interval/16;
-
- if (min_sec_before_caching == 0) {
- min_sec_before_caching = 1;
- }
- }
- if (directory_fetches_dir_info_early(options)) {
-
- start = (time_t)(c->fresh_until + min_sec_before_caching);
-
- if (options->FetchDirInfoExtraEarly || authdir_mode_v3(options)) {
- dl_interval = 60;
- if (min_sec_before_caching + dl_interval > interval)
- dl_interval = interval/2;
- } else {
-
- dl_interval = interval/2;
- }
- } else {
-
- start = (time_t)(c->fresh_until + (interval*3)/4);
-
- dl_interval = ((c->valid_until - start) * 7 )/ 8;
-
- if (directory_fetches_dir_info_later(options)) {
-
- start = (time_t)(start + dl_interval + min_sec_before_caching);
-
- dl_interval = (c->valid_until - start) - min_sec_before_caching;
- }
- }
-
- if (dl_interval < 1)
- dl_interval = 1;
-
- if (start+dl_interval >= c->valid_until)
- start = c->valid_until - dl_interval - 1;
- log_debug(LD_DIR,
- "fresh_until: %ld start: %ld "
- "dl_interval: %ld valid_until: %ld ",
- (long)c->fresh_until, (long)start, dl_interval,
- (long)c->valid_until);
-
- tor_assert(c->fresh_until < start);
-
- tor_assert(start+dl_interval < c->valid_until);
- time_to_download_next_consensus[flav] =
- start + crypto_rand_int((int)dl_interval);
- {
- char tbuf1[ISO_TIME_LEN+1];
- char tbuf2[ISO_TIME_LEN+1];
- char tbuf3[ISO_TIME_LEN+1];
- format_local_iso_time(tbuf1, c->fresh_until);
- format_local_iso_time(tbuf2, c->valid_until);
- format_local_iso_time(tbuf3, time_to_download_next_consensus[flav]);
- log_info(LD_DIR, "Live %s consensus %s the most recent until %s and "
- "will expire at %s; fetching the next one at %s.",
- flavor, (c->fresh_until > now) ? "will be" : "was",
- tbuf1, tbuf2, tbuf3);
- }
- } else {
- time_to_download_next_consensus[flav] = now;
- log_info(LD_DIR, "No live %s consensus; we should fetch one immediately.",
- flavor);
- }
- }
- void
- update_consensus_networkstatus_fetch_time(time_t now)
- {
- int i;
- for (i = 0; i < N_CONSENSUS_FLAVORS; ++i) {
- if (we_want_to_fetch_flavor(get_options(), i))
- update_consensus_networkstatus_fetch_time_impl(now, i);
- }
- }
- int
- should_delay_dir_fetches(const or_options_t *options, const char **msg_out)
- {
- if (msg_out) {
- *msg_out = NULL;
- }
- if (options->DisableNetwork) {
- if (msg_out) {
- *msg_out = "DisableNetwork is set.";
- }
- log_info(LD_DIR, "Delaying dir fetches (DisableNetwork is set)");
- return 1;
- }
- if (we_are_hibernating()) {
- if (msg_out) {
- *msg_out = "We are hibernating or shutting down.";
- }
- log_info(LD_DIR, "Delaying dir fetches (Hibernating or shutting down)");
- return 1;
- }
- if (options->UseBridges) {
-
- if (num_bridges_usable(1) == 0) {
- if (msg_out) {
- *msg_out = "No running bridges";
- }
- log_info(LD_DIR, "Delaying dir fetches (no running bridges known)");
- return 1;
- }
- if (pt_proxies_configuration_pending()) {
- if (msg_out) {
- *msg_out = "Pluggable transport proxies still configuring";
- }
- log_info(LD_DIR, "Delaying dir fetches (pt proxies still configuring)");
- return 1;
- }
- }
- return 0;
- }
- void
- update_networkstatus_downloads(time_t now)
- {
- const or_options_t *options = get_options();
- if (should_delay_dir_fetches(options, NULL))
- return;
-
- update_consensus_networkstatus_downloads(now);
- }
- void
- update_certificate_downloads(time_t now)
- {
- int i;
- for (i = 0; i < N_CONSENSUS_FLAVORS; ++i) {
- if (consensus_waiting_for_certs[i].consensus)
- authority_certs_fetch_missing(consensus_waiting_for_certs[i].consensus,
- now, NULL);
- }
- if (current_ns_consensus)
- authority_certs_fetch_missing(current_ns_consensus, now, NULL);
- if (current_md_consensus)
- authority_certs_fetch_missing(current_md_consensus, now, NULL);
- }
- int
- consensus_is_waiting_for_certs(void)
- {
- return consensus_waiting_for_certs[usable_consensus_flavor()].consensus
- ? 1 : 0;
- }
- MOCK_IMPL(download_status_t *,
- networkstatus_get_dl_status_by_flavor,(consensus_flavor_t flavor))
- {
- download_status_t *dl = NULL;
- const int we_are_bootstrapping =
- networkstatus_consensus_is_bootstrapping(time(NULL));
- if ((int)flavor <= N_CONSENSUS_FLAVORS) {
- dl = &((we_are_bootstrapping ?
- consensus_bootstrap_dl_status : consensus_dl_status)[flavor]);
- }
- return dl;
- }
- MOCK_IMPL(download_status_t *,
- networkstatus_get_dl_status_by_flavor_bootstrap,(consensus_flavor_t flavor))
- {
- download_status_t *dl = NULL;
- if ((int)flavor <= N_CONSENSUS_FLAVORS) {
- dl = &(consensus_bootstrap_dl_status[flavor]);
- }
- return dl;
- }
- MOCK_IMPL(download_status_t *,
- networkstatus_get_dl_status_by_flavor_running,(consensus_flavor_t flavor))
- {
- download_status_t *dl = NULL;
- if ((int)flavor <= N_CONSENSUS_FLAVORS) {
- dl = &(consensus_dl_status[flavor]);
- }
- return dl;
- }
- MOCK_IMPL(networkstatus_t *,
- networkstatus_get_latest_consensus,(void))
- {
- if (we_use_microdescriptors_for_circuits(get_options()))
- return current_md_consensus;
- else
- return current_ns_consensus;
- }
- MOCK_IMPL(networkstatus_t *,
- networkstatus_get_latest_consensus_by_flavor,(consensus_flavor_t f))
- {
- if (f == FLAV_NS)
- return current_ns_consensus;
- else if (f == FLAV_MICRODESC)
- return current_md_consensus;
- else {
- tor_assert(0);
- return NULL;
- }
- }
- MOCK_IMPL(networkstatus_t *,
- networkstatus_get_live_consensus,(time_t now))
- {
- networkstatus_t *ns = networkstatus_get_latest_consensus();
- if (ns && networkstatus_is_live(ns, now))
- return ns;
- else
- return NULL;
- }
- int
- networkstatus_is_live(const networkstatus_t *ns, time_t now)
- {
- return (ns->valid_after <= now && now <= ns->valid_until);
- }
- int
- networkstatus_consensus_reasonably_live(const networkstatus_t *consensus,
- time_t now)
- {
- if (BUG(!consensus))
- return 0;
- return networkstatus_valid_until_is_reasonably_live(consensus->valid_until,
- now);
- }
- int
- networkstatus_valid_until_is_reasonably_live(time_t valid_until,
- time_t now)
- {
- #define REASONABLY_LIVE_TIME (24*60*60)
- return (now <= valid_until + REASONABLY_LIVE_TIME);
- }
- networkstatus_t *
- networkstatus_get_reasonably_live_consensus(time_t now, int flavor)
- {
- networkstatus_t *consensus =
- networkstatus_get_latest_consensus_by_flavor(flavor);
- if (consensus &&
- consensus->valid_after <= now &&
- networkstatus_consensus_reasonably_live(consensus, now))
- return consensus;
- else
- return NULL;
- }
- MOCK_IMPL(int,
- networkstatus_consensus_is_bootstrapping,(time_t now))
- {
-
- if (networkstatus_get_reasonably_live_consensus(
- now,
- usable_consensus_flavor())) {
- return 0;
- }
-
- if (consensus_is_waiting_for_certs()) {
- return 0;
- }
-
- return 1;
- }
- int
- networkstatus_consensus_can_use_multiple_directories(
- const or_options_t *options)
- {
-
- return !public_server_mode(options);
- }
- MOCK_IMPL(int,
- networkstatus_consensus_can_use_extra_fallbacks,(const or_options_t *options))
- {
-
- tor_assert(smartlist_len(router_get_fallback_dir_servers())
- >= smartlist_len(router_get_trusted_dir_servers()));
-
- return (!directory_fetches_from_authorities(options)
- && (smartlist_len(router_get_fallback_dir_servers())
- > smartlist_len(router_get_trusted_dir_servers())));
- }
- int
- networkstatus_consensus_is_already_downloading(const char *resource)
- {
- int answer = 0;
-
- smartlist_t *fetching_conns =
- connection_dir_list_by_purpose_resource_and_state(
- DIR_PURPOSE_FETCH_CONSENSUS, resource, DIR_CONN_STATE_CLIENT_READING);
-
- SMARTLIST_FOREACH_BEGIN(fetching_conns, dir_connection_t *, dirconn) {
-
- connection_t *base = TO_CONN(dirconn);
- if (base->linked_conn &&
- base->linked_conn->type == CONN_TYPE_AP &&
- !AP_CONN_STATE_IS_UNATTACHED(base->linked_conn->state)) {
- answer = 1;
- break;
- }
- } SMARTLIST_FOREACH_END(dirconn);
- smartlist_free(fetching_conns);
- return answer;
- }
- int
- networkstatus_consensus_has_ipv6(const or_options_t* options)
- {
- const networkstatus_t *cons = networkstatus_get_reasonably_live_consensus(
- approx_time(),
- usable_consensus_flavor());
-
- if (!cons) {
- return 0;
- }
-
- if (we_use_microdescriptors_for_circuits(options)) {
- return
- cons->consensus_method >= MIN_METHOD_FOR_A_LINES_IN_MICRODESC_CONSENSUS;
- } else {
- return 1;
- }
- }
- static int
- routerstatus_has_changed(const routerstatus_t *a, const routerstatus_t *b)
- {
- tor_assert(tor_memeq(a->identity_digest, b->identity_digest, DIGEST_LEN));
- return strcmp(a->nickname, b->nickname) ||
- fast_memneq(a->descriptor_digest, b->descriptor_digest, DIGEST_LEN) ||
- a->addr != b->addr ||
- a->or_port != b->or_port ||
- a->dir_port != b->dir_port ||
- a->is_authority != b->is_authority ||
- a->is_exit != b->is_exit ||
- a->is_stable != b->is_stable ||
- a->is_fast != b->is_fast ||
- a->is_flagged_running != b->is_flagged_running ||
- a->is_named != b->is_named ||
- a->is_unnamed != b->is_unnamed ||
- a->is_valid != b->is_valid ||
- a->is_possible_guard != b->is_possible_guard ||
- a->is_bad_exit != b->is_bad_exit ||
- a->is_hs_dir != b->is_hs_dir;
-
-
- }
- static void
- notify_control_networkstatus_changed(const networkstatus_t *old_c,
- const networkstatus_t *new_c)
- {
- smartlist_t *changed;
- if (old_c == new_c)
- return;
-
- control_event_newconsensus(new_c);
- if (!control_event_is_interesting(EVENT_NS))
- return;
- if (!old_c) {
- control_event_networkstatus_changed(new_c->routerstatus_list);
- return;
- }
- changed = smartlist_new();
- SMARTLIST_FOREACH_JOIN(
- old_c->routerstatus_list, const routerstatus_t *, rs_old,
- new_c->routerstatus_list, const routerstatus_t *, rs_new,
- tor_memcmp(rs_old->identity_digest,
- rs_new->identity_digest, DIGEST_LEN),
- smartlist_add(changed, (void*) rs_new)) {
- if (routerstatus_has_changed(rs_old, rs_new))
- smartlist_add(changed, (void*)rs_new);
- } SMARTLIST_FOREACH_JOIN_END(rs_old, rs_new);
- control_event_networkstatus_changed(changed);
- smartlist_free(changed);
- }
- static void
- notify_before_networkstatus_changes(const networkstatus_t *old_c,
- const networkstatus_t *new_c)
- {
- notify_control_networkstatus_changed(old_c, new_c);
- dos_consensus_has_changed(new_c);
- relay_consensus_has_changed(new_c);
- }
- static void
- notify_after_networkstatus_changes(void)
- {
- scheduler_notify_networkstatus_changed();
- }
- static void
- networkstatus_copy_old_consensus_info(networkstatus_t *new_c,
- const networkstatus_t *old_c)
- {
- if (old_c == new_c)
- return;
- if (!old_c || !smartlist_len(old_c->routerstatus_list))
- return;
- SMARTLIST_FOREACH_JOIN(old_c->routerstatus_list, routerstatus_t *, rs_old,
- new_c->routerstatus_list, routerstatus_t *, rs_new,
- tor_memcmp(rs_old->identity_digest,
- rs_new->identity_digest, DIGEST_LEN),
- STMT_NIL) {
-
- rs_new->last_dir_503_at = rs_old->last_dir_503_at;
- if (tor_memeq(rs_old->descriptor_digest, rs_new->descriptor_digest,
- DIGEST256_LEN)) {
-
- memcpy(&rs_new->dl_status, &rs_old->dl_status,sizeof(download_status_t));
- }
- } SMARTLIST_FOREACH_JOIN_END(rs_old, rs_new);
- }
- #ifdef TOR_UNIT_TESTS
- int
- networkstatus_set_current_consensus_from_ns(networkstatus_t *c,
- const char *flavor)
- {
- int flav = networkstatus_parse_flavor_name(flavor);
- switch (flav) {
- case FLAV_NS:
- if (current_ns_consensus) {
- networkstatus_copy_old_consensus_info(c, current_ns_consensus);
- networkstatus_vote_free(current_ns_consensus);
- }
- current_ns_consensus = c;
- break;
- case FLAV_MICRODESC:
- if (current_md_consensus) {
- networkstatus_copy_old_consensus_info(c, current_md_consensus);
- networkstatus_vote_free(current_md_consensus);
- }
- current_md_consensus = c;
- break;
- }
- return current_md_consensus ? 0 : -1;
- }
- #endif
- int
- any_client_port_set(const or_options_t *options)
- {
- return (options->SocksPort_set ||
- options->TransPort_set ||
- options->NATDPort_set ||
- options->ControlPort_set ||
- options->DNSPort_set ||
- options->HTTPTunnelPort_set);
- }
- static void
- handle_missing_protocol_warning_impl(const networkstatus_t *c,
- int is_client)
- {
- char *protocol_warning = NULL;
- int should_exit = networkstatus_check_required_protocols(c,
- is_client,
- &protocol_warning);
- if (protocol_warning) {
- tor_log(should_exit ? LOG_ERR : LOG_WARN,
- LD_GENERAL,
- "%s", protocol_warning);
- }
- if (should_exit) {
- tor_assert_nonfatal(protocol_warning);
- }
- tor_free(protocol_warning);
- if (should_exit)
- exit(1);
- }
- static void
- handle_missing_protocol_warning(const networkstatus_t *c,
- const or_options_t *options)
- {
- const int is_server = server_mode(options);
- const int is_client = any_client_port_set(options) || !is_server;
- if (is_server)
- handle_missing_protocol_warning_impl(c, 0);
- if (is_client)
- handle_missing_protocol_warning_impl(c, 1);
- }
- int
- networkstatus_set_current_consensus(const char *consensus,
- const char *flavor,
- unsigned flags,
- const char *source_dir)
- {
- networkstatus_t *c=NULL;
- int r, result = -1;
- time_t now = approx_time();
- const or_options_t *options = get_options();
- char *unverified_fname = NULL, *consensus_fname = NULL;
- int flav = networkstatus_parse_flavor_name(flavor);
- const unsigned from_cache = flags & NSSET_FROM_CACHE;
- const unsigned was_waiting_for_certs = flags & NSSET_WAS_WAITING_FOR_CERTS;
- const unsigned dl_certs = !(flags & NSSET_DONT_DOWNLOAD_CERTS);
- const unsigned accept_obsolete = flags & NSSET_ACCEPT_OBSOLETE;
- const unsigned require_flavor = flags & NSSET_REQUIRE_FLAVOR;
- const common_digests_t *current_digests = NULL;
- consensus_waiting_for_certs_t *waiting = NULL;
- time_t current_valid_after = 0;
- int free_consensus = 1;
- int checked_protocols_already = 0;
- if (flav < 0) {
-
- log_warn(LD_BUG, "Unrecognized consensus flavor %s", flavor);
- return -2;
- }
-
- c = networkstatus_parse_vote_from_string(consensus, NULL, NS_TYPE_CONSENSUS);
- if (!c) {
- log_warn(LD_DIR, "Unable to parse networkstatus consensus");
- result = -2;
- goto done;
- }
- if (from_cache && !was_waiting_for_certs) {
-
- checked_protocols_already = 1;
- handle_missing_protocol_warning(c, options);
- }
- if ((int)c->flavor != flav) {
-
- if (require_flavor) {
- log_warn(LD_DIR, "Got consensus with unexpected flavor %s (wanted %s)",
- networkstatus_get_flavor_name(c->flavor), flavor);
- goto done;
- }
- flav = c->flavor;
- flavor = networkstatus_get_flavor_name(flav);
- }
- if (flav != usable_consensus_flavor() &&
- !we_want_to_fetch_flavor(options, flav)) {
-
- goto done;
- }
- if (from_cache && !accept_obsolete &&
- c->valid_until < now-OLD_ROUTER_DESC_MAX_AGE) {
- log_info(LD_DIR, "Loaded an expired consensus. Discarding.");
- goto done;
- }
- if (!strcmp(flavor, "ns")) {
- consensus_fname = get_cachedir_fname("cached-consensus");
- unverified_fname = get_cachedir_fname("unverified-consensus");
- if (current_ns_consensus) {
- current_digests = ¤t_ns_consensus->digests;
- current_valid_after = current_ns_consensus->valid_after;
- }
- } else if (!strcmp(flavor, "microdesc")) {
- consensus_fname = get_cachedir_fname("cached-microdesc-consensus");
- unverified_fname = get_cachedir_fname("unverified-microdesc-consensus");
- if (current_md_consensus) {
- current_digests = ¤t_md_consensus->digests;
- current_valid_after = current_md_consensus->valid_after;
- }
- } else {
- tor_assert_nonfatal_unreached();
- result = -2;
- goto done;
- }
- if (current_digests &&
- tor_memeq(&c->digests, current_digests, sizeof(c->digests))) {
-
- log_info(LD_DIR, "Got a %s consensus we already have", flavor);
- goto done;
- }
- if (current_valid_after && c->valid_after <= current_valid_after) {
-
- log_info(LD_DIR, "Got a %s consensus at least as old as the one we have",
- flavor);
- goto done;
- }
-
- if ((r=networkstatus_check_consensus_signature(c, 1))<0) {
- if (r == -1) {
-
- if (!was_waiting_for_certs) {
- log_info(LD_DIR,
- "Not enough certificates to check networkstatus consensus");
- }
- if (!current_valid_after ||
- c->valid_after > current_valid_after) {
- waiting = &consensus_waiting_for_certs[flav];
- networkstatus_vote_free(waiting->consensus);
- tor_free(waiting->body);
- waiting->consensus = c;
- free_consensus = 0;
- waiting->body = tor_strdup(consensus);
- waiting->set_at = now;
- waiting->dl_failed = 0;
- if (!from_cache) {
- write_str_to_file(unverified_fname, consensus, 0);
- }
- if (dl_certs)
- authority_certs_fetch_missing(c, now, source_dir);
-
- result = 0;
- } else {
-
- if (was_waiting_for_certs && from_cache)
- if (unlink(unverified_fname) != 0) {
- log_warn(LD_FS,
- "Failed to unlink %s: %s",
- unverified_fname, strerror(errno));
- }
- }
- goto done;
- } else {
-
- if (!was_waiting_for_certs) {
- log_warn(LD_DIR, "Not enough good signatures on networkstatus "
- "consensus");
- result = -2;
- }
- if (was_waiting_for_certs && (r < -1) && from_cache) {
- if (unlink(unverified_fname) != 0) {
- log_warn(LD_FS,
- "Failed to unlink %s: %s",
- unverified_fname, strerror(errno));
- }
- }
- goto done;
- }
- }
-
- if (from_cache && was_waiting_for_certs) {
-
- log_info(LD_DIR, "Unverified consensus signatures verified.");
- tor_rename(unverified_fname, consensus_fname);
- }
- if (!from_cache && flav == usable_consensus_flavor())
- control_event_client_status(LOG_NOTICE, "CONSENSUS_ARRIVED");
- if (!checked_protocols_already) {
- handle_missing_protocol_warning(c, options);
- }
-
- if (r != 1 && dl_certs)
- authority_certs_fetch_missing(c, now, source_dir);
- const int is_usable_flavor = flav == usable_consensus_flavor();
-
- if (is_usable_flavor) {
- notify_before_networkstatus_changes(networkstatus_get_latest_consensus(),
- c);
- }
- if (flav == FLAV_NS) {
- if (current_ns_consensus) {
- networkstatus_copy_old_consensus_info(c, current_ns_consensus);
- networkstatus_vote_free(current_ns_consensus);
-
- current_ns_consensus = NULL;
- }
- current_ns_consensus = c;
- free_consensus = 0;
- } else if (flav == FLAV_MICRODESC) {
- if (current_md_consensus) {
- networkstatus_copy_old_consensus_info(c, current_md_consensus);
- networkstatus_vote_free(current_md_consensus);
-
- current_md_consensus = NULL;
- }
- current_md_consensus = c;
- free_consensus = 0;
- }
- waiting = &consensus_waiting_for_certs[flav];
- if (waiting->consensus &&
- waiting->consensus->valid_after <= c->valid_after) {
- networkstatus_vote_free(waiting->consensus);
- waiting->consensus = NULL;
- if (consensus != waiting->body)
- tor_free(waiting->body);
- else
- waiting->body = NULL;
- waiting->set_at = 0;
- waiting->dl_failed = 0;
- if (unlink(unverified_fname) != 0) {
- log_warn(LD_FS,
- "Failed to unlink %s: %s",
- unverified_fname, strerror(errno));
- }
- }
- if (is_usable_flavor) {
-
- notify_after_networkstatus_changes();
-
- voting_schedule_recalculate_timing(options, now);
- reschedule_dirvote(options);
- nodelist_set_consensus(c);
-
- update_consensus_networkstatus_fetch_time(now);
-
- cmux_ewma_set_options(options, c);
-
- connection_or_update_token_buckets(get_connection_array(), options);
- circuit_build_times_new_consensus_params(
- get_circuit_build_times_mutable(), c);
- channelpadding_new_consensus_params(c);
- }
-
- if (c->valid_after <= now && now <= c->valid_until) {
- download_status_reset(&consensus_dl_status[flav]);
- } else {
- if (!from_cache)
- download_status_failed(&consensus_dl_status[flav], 0);
- }
- if (we_want_to_fetch_flavor(options, flav)) {
- dirserv_set_cached_consensus_networkstatus(consensus,
- flavor,
- &c->digests,
- c->digest_sha3_as_signed,
- c->valid_after);
- if (dir_server_mode(get_options())) {
- consdiffmgr_add_consensus(consensus, c);
- }
- }
- if (!from_cache) {
- write_str_to_file(consensus_fname, consensus, 0);
- }
- #define EARLY_CONSENSUS_NOTICE_SKEW 60
- if (now < c->valid_after - EARLY_CONSENSUS_NOTICE_SKEW) {
- char tbuf[ISO_TIME_LEN+1];
- char dbuf[64];
- long delta = now - c->valid_after;
- char *flavormsg = NULL;
- format_iso_time(tbuf, c->valid_after);
- format_time_interval(dbuf, sizeof(dbuf), delta);
- log_warn(LD_GENERAL, "Our clock is %s behind the time published in the "
- "consensus network status document (%s UTC). Tor needs an "
- "accurate clock to work correctly. Please check your time and "
- "date settings!", dbuf, tbuf);
- tor_asprintf(&flavormsg, "%s flavor consensus", flavor);
- clock_skew_warning(NULL, delta, 1, LD_GENERAL, flavormsg, "CONSENSUS");
- tor_free(flavormsg);
- }
-
- microdesc_reset_outdated_dirservers_list();
- router_dir_info_changed();
- result = 0;
- done:
- if (free_consensus)
- networkstatus_vote_free(c);
- tor_free(consensus_fname);
- tor_free(unverified_fname);
- return result;
- }
- void
- networkstatus_note_certs_arrived(const char *source_dir)
- {
- int i;
- for (i=0; i<N_CONSENSUS_FLAVORS; ++i) {
- const char *flavor_name = networkstatus_get_flavor_name(i);
- consensus_waiting_for_certs_t *waiting = &consensus_waiting_for_certs[i];
- if (!waiting->consensus)
- continue;
- if (networkstatus_check_consensus_signature(waiting->consensus, 0)>=0) {
- char *waiting_body = waiting->body;
- if (!networkstatus_set_current_consensus(
- waiting_body,
- flavor_name,
- NSSET_WAS_WAITING_FOR_CERTS,
- source_dir)) {
- tor_free(waiting_body);
- }
- }
- }
- }
- void
- routers_update_all_from_networkstatus(time_t now, int dir_version)
- {
- routerlist_t *rl = router_get_routerlist();
- networkstatus_t *consensus = networkstatus_get_reasonably_live_consensus(now,
- FLAV_NS);
- if (!consensus || dir_version < 3)
- return;
-
- routers_update_status_from_consensus_networkstatus(rl->routers, 0);
- SMARTLIST_FOREACH(rl->routers, routerinfo_t *, ri,
- ri->cache_info.routerlist_index = ri_sl_idx);
- if (rl->old_routers)
- signed_descs_update_status_from_consensus_networkstatus(rl->old_routers);
- if (!have_warned_about_old_version) {
- int is_server = server_mode(get_options());
- version_status_t status;
- const char *recommended = is_server ?
- consensus->server_versions : consensus->client_versions;
- status = tor_version_is_obsolete(VERSION, recommended);
- if (status == VS_RECOMMENDED) {
- log_info(LD_GENERAL, "The directory authorities say my version is ok.");
- } else if (status == VS_EMPTY) {
- log_info(LD_GENERAL,
- "The directory authorities don't recommend any versions.");
- } else if (status == VS_NEW || status == VS_NEW_IN_SERIES) {
- if (!have_warned_about_new_version) {
- log_notice(LD_GENERAL, "This version of Tor (%s) is newer than any "
- "recommended version%s, according to the directory "
- "authorities. Recommended versions are: %s",
- VERSION,
- status == VS_NEW_IN_SERIES ? " in its series" : "",
- recommended);
- have_warned_about_new_version = 1;
- control_event_general_status(LOG_WARN, "DANGEROUS_VERSION "
- "CURRENT=%s REASON=%s RECOMMENDED=\"%s\"",
- VERSION, "NEW", recommended);
- }
- } else {
- log_warn(LD_GENERAL, "Please upgrade! "
- "This version of Tor (%s) is %s, according to the directory "
- "authorities. Recommended versions are: %s",
- VERSION,
- status == VS_OLD ? "obsolete" : "not recommended",
- recommended);
- have_warned_about_old_version = 1;
- control_event_general_status(LOG_WARN, "DANGEROUS_VERSION "
- "CURRENT=%s REASON=%s RECOMMENDED=\"%s\"",
- VERSION, status == VS_OLD ? "OBSOLETE" : "UNRECOMMENDED",
- recommended);
- }
- }
- }
- void
- routers_update_status_from_consensus_networkstatus(smartlist_t *routers,
- int reset_failures)
- {
- const or_options_t *options = get_options();
- int authdir = authdir_mode_v3(options);
- networkstatus_t *ns = networkstatus_get_latest_consensus();
- if (!ns || !smartlist_len(ns->routerstatus_list))
- return;
- routers_sort_by_identity(routers);
- SMARTLIST_FOREACH_JOIN(ns->routerstatus_list, routerstatus_t *, rs,
- routers, routerinfo_t *, router,
- tor_memcmp(rs->identity_digest,
- router->cache_info.identity_digest, DIGEST_LEN),
- {
- }) {
-
- if (tor_memeq(router->cache_info.signed_descriptor_digest,
- rs->descriptor_digest, DIGEST_LEN)) {
- if (ns->valid_until > router->cache_info.last_listed_as_valid_until)
- router->cache_info.last_listed_as_valid_until = ns->valid_until;
- }
- if (authdir) {
-
- routerinfo_t *old_router =
- router_get_mutable_by_digest(router->cache_info.identity_digest);
- if (old_router != router) {
- router->needs_retest_if_added =
- dirserv_should_launch_reachability_test(router, old_router);
- }
- }
- if (reset_failures) {
- download_status_reset(&rs->dl_status);
- }
- } SMARTLIST_FOREACH_JOIN_END(rs, router);
- router_dir_info_changed();
- }
- void
- signed_descs_update_status_from_consensus_networkstatus(smartlist_t *descs)
- {
- networkstatus_t *ns = current_ns_consensus;
- if (!ns)
- return;
- if (!ns->desc_digest_map) {
- char dummy[DIGEST_LEN];
-
- memset(dummy, 0, sizeof(dummy));
- router_get_consensus_status_by_descriptor_digest(ns, dummy);
- }
- SMARTLIST_FOREACH(descs, signed_descriptor_t *, d,
- {
- const routerstatus_t *rs = digestmap_get(ns->desc_digest_map,
- d->signed_descriptor_digest);
- if (rs) {
- if (ns->valid_until > d->last_listed_as_valid_until)
- d->last_listed_as_valid_until = ns->valid_until;
- }
- });
- }
- char *
- networkstatus_getinfo_helper_single(const routerstatus_t *rs)
- {
- return routerstatus_format_entry(rs, NULL, NULL, NS_CONTROL_PORT,
- ROUTERSTATUS_FORMAT_NO_CONSENSUS_METHOD,
- NULL);
- }
- char *
- networkstatus_getinfo_by_purpose(const char *purpose_string, time_t now)
- {
- const time_t cutoff = now - ROUTER_MAX_AGE_TO_PUBLISH;
- char *answer;
- routerlist_t *rl = router_get_routerlist();
- smartlist_t *statuses;
- const uint8_t purpose = router_purpose_from_string(purpose_string);
- routerstatus_t rs;
- const int bridge_auth = authdir_mode_bridge(get_options());
- if (purpose == ROUTER_PURPOSE_UNKNOWN) {
- log_info(LD_DIR, "Unrecognized purpose '%s' when listing router statuses.",
- purpose_string);
- return NULL;
- }
- statuses = smartlist_new();
- SMARTLIST_FOREACH_BEGIN(rl->routers, routerinfo_t *, ri) {
- node_t *node = node_get_mutable_by_id(ri->cache_info.identity_digest);
- if (!node)
- continue;
- if (ri->cache_info.published_on < cutoff)
- continue;
- if (ri->purpose != purpose)
- continue;
-
- if (bridge_auth && ri->purpose == ROUTER_PURPOSE_BRIDGE)
- dirserv_set_router_is_running(ri, now);
-
- set_routerstatus_from_routerinfo(&rs, node, ri, now, 0);
- smartlist_add(statuses, networkstatus_getinfo_helper_single(&rs));
- } SMARTLIST_FOREACH_END(ri);
- answer = smartlist_join_strings(statuses, "", 0, NULL);
- SMARTLIST_FOREACH(statuses, char *, cp, tor_free(cp));
- smartlist_free(statuses);
- return answer;
- }
- void
- networkstatus_dump_bridge_status_to_file(time_t now)
- {
- char *status = networkstatus_getinfo_by_purpose("bridge", now);
- char *fname = NULL;
- char *thresholds = NULL;
- char *published_thresholds_and_status = NULL;
- char published[ISO_TIME_LEN+1];
- const routerinfo_t *me = router_get_my_routerinfo();
- char fingerprint[FINGERPRINT_LEN+1];
- char *fingerprint_line = NULL;
- if (me && crypto_pk_get_fingerprint(me->identity_pkey,
- fingerprint, 0) >= 0) {
- tor_asprintf(&fingerprint_line, "fingerprint %s\n", fingerprint);
- } else {
- log_warn(LD_BUG, "Error computing fingerprint for bridge status.");
- }
- format_iso_time(published, now);
- dirserv_compute_bridge_flag_thresholds();
- thresholds = dirserv_get_flag_thresholds_line();
- tor_asprintf(&published_thresholds_and_status,
- "published %s\nflag-thresholds %s\n%s%s",
- published, thresholds, fingerprint_line ? fingerprint_line : "",
- status);
- fname = get_datadir_fname("networkstatus-bridges");
- write_str_to_file(fname,published_thresholds_and_status,0);
- tor_free(thresholds);
- tor_free(published_thresholds_and_status);
- tor_free(fname);
- tor_free(status);
- tor_free(fingerprint_line);
- }
- static int32_t
- get_net_param_from_list(smartlist_t *net_params, const char *param_name,
- int32_t default_val, int32_t min_val, int32_t max_val)
- {
- int32_t res = default_val;
- size_t name_len = strlen(param_name);
- tor_assert(max_val > min_val);
- tor_assert(min_val <= default_val);
- tor_assert(max_val >= default_val);
- SMARTLIST_FOREACH_BEGIN(net_params, const char *, p) {
- if (!strcmpstart(p, param_name) && p[name_len] == '=') {
- int ok=0;
- long v = tor_parse_long(p+name_len+1, 10, INT32_MIN,
- INT32_MAX, &ok, NULL);
- if (ok) {
- res = (int32_t) v;
- break;
- }
- }
- } SMARTLIST_FOREACH_END(p);
- if (res < min_val) {
- log_warn(LD_DIR, "Consensus parameter %s is too small. Got %d, raising to "
- "%d.", param_name, res, min_val);
- res = min_val;
- } else if (res > max_val) {
- log_warn(LD_DIR, "Consensus parameter %s is too large. Got %d, capping to "
- "%d.", param_name, res, max_val);
- res = max_val;
- }
- return res;
- }
- MOCK_IMPL(int32_t,
- networkstatus_get_param, (const networkstatus_t *ns, const char *param_name,
- int32_t default_val, int32_t min_val, int32_t max_val))
- {
- if (!ns)
- ns = networkstatus_get_latest_consensus();
- if (!ns || !ns->net_params)
- return default_val;
- return get_net_param_from_list(ns->net_params, param_name,
- default_val, min_val, max_val);
- }
- int32_t
- networkstatus_get_overridable_param(const networkstatus_t *ns,
- int32_t torrc_value,
- const char *param_name,
- int32_t default_val,
- int32_t min_val, int32_t max_val)
- {
- if (torrc_value >= min_val && torrc_value <= max_val)
- return torrc_value;
- else
- return networkstatus_get_param(
- ns, param_name, default_val, min_val, max_val);
- }
- int
- networkstatus_get_weight_scale_param(networkstatus_t *ns)
- {
- return networkstatus_get_param(ns, "bwweightscale",
- BW_WEIGHT_SCALE,
- BW_MIN_WEIGHT_SCALE,
- BW_MAX_WEIGHT_SCALE);
- }
- int32_t
- networkstatus_get_bw_weight(networkstatus_t *ns, const char *weight_name,
- int32_t default_val)
- {
- int32_t param;
- int max;
- if (!ns)
- ns = networkstatus_get_latest_consensus();
- if (!ns || !ns->weight_params)
- return default_val;
- max = networkstatus_get_weight_scale_param(ns);
- param = get_net_param_from_list(ns->weight_params, weight_name,
- default_val, -1,
- BW_MAX_WEIGHT_SCALE);
- if (param > max) {
- log_warn(LD_DIR, "Value of consensus weight %s was too large, capping "
- "to %d", weight_name, max);
- param = max;
- }
- return param;
- }
- const char *
- networkstatus_get_flavor_name(consensus_flavor_t flav)
- {
- switch (flav) {
- case FLAV_NS:
- return "ns";
- case FLAV_MICRODESC:
- return "microdesc";
- default:
- tor_fragile_assert();
- return "??";
- }
- }
- int
- networkstatus_parse_flavor_name(const char *flavname)
- {
- if (!strcmp(flavname, "ns"))
- return FLAV_NS;
- else if (!strcmp(flavname, "microdesc"))
- return FLAV_MICRODESC;
- else
- return -1;
- }
- int
- client_would_use_router(const routerstatus_t *rs, time_t now)
- {
- if (!rs->is_flagged_running) {
-
- return 0;
- }
- if (rs->published_on + OLD_ROUTER_DESC_MAX_AGE < now) {
-
- return 0;
- }
- if (!routerstatus_version_supports_extend2_cells(rs, 1)) {
-
- return 0;
- }
- return 1;
- }
- int
- getinfo_helper_networkstatus(control_connection_t *conn,
- const char *question, char **answer,
- const char **errmsg)
- {
- const routerstatus_t *status;
- (void) conn;
- if (!networkstatus_get_latest_consensus()) {
- *answer = tor_strdup("");
- return 0;
- }
- if (!strcmp(question, "ns/all")) {
- smartlist_t *statuses = smartlist_new();
- SMARTLIST_FOREACH(networkstatus_get_latest_consensus()->routerstatus_list,
- const routerstatus_t *, rs,
- {
- smartlist_add(statuses, networkstatus_getinfo_helper_single(rs));
- });
- *answer = smartlist_join_strings(statuses, "", 0, NULL);
- SMARTLIST_FOREACH(statuses, char *, cp, tor_free(cp));
- smartlist_free(statuses);
- return 0;
- } else if (!strcmpstart(question, "ns/id/")) {
- char d[DIGEST_LEN];
- const char *q = question + 6;
- if (*q == '$')
- ++q;
- if (base16_decode(d, DIGEST_LEN, q, strlen(q)) != DIGEST_LEN) {
- *errmsg = "Data not decodeable as hex";
- return -1;
- }
- status = router_get_consensus_status_by_id(d);
- } else if (!strcmpstart(question, "ns/name/")) {
- const node_t *n = node_get_by_nickname(question+8, 0);
- status = n ? n->rs : NULL;
- } else if (!strcmpstart(question, "ns/purpose/")) {
- *answer = networkstatus_getinfo_by_purpose(question+11, time(NULL));
- return *answer ? 0 : -1;
- } else if (!strcmp(question, "consensus/packages")) {
- const networkstatus_t *ns = networkstatus_get_latest_consensus();
- if (ns && ns->package_lines)
- *answer = smartlist_join_strings(ns->package_lines, "\n", 0, NULL);
- else
- *errmsg = "No consensus available";
- return *answer ? 0 : -1;
- } else if (!strcmp(question, "consensus/valid-after") ||
- !strcmp(question, "consensus/fresh-until") ||
- !strcmp(question, "consensus/valid-until")) {
- const networkstatus_t *ns = networkstatus_get_latest_consensus();
- if (ns) {
- time_t t;
- if (!strcmp(question, "consensus/valid-after"))
- t = ns->valid_after;
- else if (!strcmp(question, "consensus/fresh-until"))
- t = ns->fresh_until;
- else
- t = ns->valid_until;
- char tbuf[ISO_TIME_LEN+1];
- format_iso_time(tbuf, t);
- *answer = tor_strdup(tbuf);
- } else {
- *errmsg = "No consensus available";
- }
- return *answer ? 0 : -1;
- } else {
- return 0;
- }
- if (status)
- *answer = networkstatus_getinfo_helper_single(status);
- return 0;
- }
- int
- networkstatus_check_required_protocols(const networkstatus_t *ns,
- int client_mode,
- char **warning_out)
- {
- const char *func = client_mode ? "client" : "relay";
- const char *required, *recommended;
- char *missing = NULL;
- tor_assert(warning_out);
- if (client_mode) {
- required = ns->required_client_protocols;
- recommended = ns->recommended_client_protocols;
- } else {
- required = ns->required_relay_protocols;
- recommended = ns->recommended_relay_protocols;
- }
- if (!protover_all_supported(required, &missing)) {
- tor_asprintf(warning_out, "At least one protocol listed as required in "
- "the consensus is not supported by this version of Tor. "
- "You should upgrade. This version of Tor will not work as a "
- "%s on the Tor network. The missing protocols are: %s",
- func, missing);
- tor_free(missing);
- return 1;
- }
- if (! protover_all_supported(recommended, &missing)) {
- tor_asprintf(warning_out, "At least one protocol listed as recommended in "
- "the consensus is not supported by this version of Tor. "
- "You should upgrade. This version of Tor will eventually "
- "stop working as a %s on the Tor network. The missing "
- "protocols are: %s",
- func, missing);
- tor_free(missing);
- }
- tor_assert_nonfatal(missing == NULL);
- return 0;
- }
- void
- ns_detached_signatures_free_(ns_detached_signatures_t *s)
- {
- if (!s)
- return;
- if (s->signatures) {
- STRMAP_FOREACH(s->signatures, flavor, smartlist_t *, sigs) {
- SMARTLIST_FOREACH(sigs, document_signature_t *, sig,
- document_signature_free(sig));
- smartlist_free(sigs);
- } STRMAP_FOREACH_END;
- strmap_free(s->signatures, NULL);
- strmap_free(s->digests, tor_free_);
- }
- tor_free(s);
- }
- void
- networkstatus_free_all(void)
- {
- int i;
- networkstatus_vote_free(current_ns_consensus);
- networkstatus_vote_free(current_md_consensus);
- current_md_consensus = current_ns_consensus = NULL;
- for (i=0; i < N_CONSENSUS_FLAVORS; ++i) {
- consensus_waiting_for_certs_t *waiting = &consensus_waiting_for_certs[i];
- if (waiting->consensus) {
- networkstatus_vote_free(waiting->consensus);
- waiting->consensus = NULL;
- }
- tor_free(waiting->body);
- }
- }
|