aboutsummaryrefslogtreecommitdiff
path: root/net/tor/Makefile
Commit message (Collapse)AuthorAge
* tor: update to 0.4.8.11 stableRui Salvaterra2024-04-16
| | | | | | | | Minor release, see the changelog [1] for what's new. [1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.11/ChangeLog Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: update to 0.4.8.10 stableRui Salvaterra2024-03-31
| | | | | | | | Bugfix release, see the changelog [1] for what's new. [1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.10/ChangeLog Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* net/tor: add licenseFabrice Fontaine2024-01-31
| | | | | | tor is licensed under BSD-3-Clause Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
* tor: update to 0.4.8.7 stableRui Salvaterra2023-10-26
| | | | | | | | Bugfix release, see the changelog [1] for what's new. [1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.7/ChangeLog Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: fix daemon reloadingValdikSS ValdikSS2023-10-22
| | | | | | procd requires init script name, not the path to executable Signed-off-by: ValdikSS ValdikSS <iam@valdikss.org.ru>
* tor: update to 0.4.8.4 stableRui Salvaterra2023-09-03
| | | | | | | | First release of the 0.4.8.x series, see the changelog [1] for what's new. [1] https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.4/ChangeLog Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* treewide: refactor to use PKG_BUILD_FLAGS:=ltoAndre Heider2023-04-08
| | | | | | | | | | See commit 07730ff3 "treewide: add support for "lto" in PKG_BUILD_FLAGS" on the main repository. Note: Some packages only added `-flto` to CFLAGS and not LDFLAGS. This fixes it and properly enables LTO. Signed-off-by: Andre Heider <a.heider@gmail.com>
* treewide: refactor to use PKG_BUILD_FLAGS:=gc-sectionsAndre Heider2023-04-08
| | | | | | | | | | | | See commit da370098 "treewide: add support for "gc-sections" in PKG_BUILD_FLAGS" on the main repository. Note: This only touches packages which use all three parts (-ffunction-sections, -fdata-sections and -Wl,--gc-sections) enabled by this build flag. Some packages only use a subset, and these are left unchanged for now. Signed-off-by: Andre Heider <a.heider@gmail.com>
* tor: update to version 0.4.7.13Daniel Bermond2023-02-24
| | | | | | | | | Maintainers : @hauke (Hauke Mehrtens) and @tripolar (Peter Wagner) Build system : Arch Linux x86_64 Build tested : r7800 OpenWrt git master (r22104-01262c921c) Run tested : r7800 OpenWrt git master (r22104-01262c921c) Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
* tor: bump to 0.4.7.12 stableRui Salvaterra2022-12-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Quoting the changelog: Changes in version 0.4.7.12 - 2022-12-06 This version contains a major change that is a new key for moria1. Also, new metrics are exported on the MetricsPort for the congestion control subsystem. o Directory authority changes (moria1): - Rotate the relay identity key and v3 identity key for moria1. They have been online for more than a decade and refreshing keys periodically is good practice. Advertise new ports too, to avoid confusion. Closes ticket 40722. o Minor feature (Congestion control metrics): - Add additional metricsport relay metrics for congestion control. Closes ticket 40724. o Minor features (fallbackdir): - Regenerate fallback directories generated on December 06, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/12/06. o Minor bugfixes (cpuworker, relay): - Fix an off by one overload calculation on the number of CPUs being used by our thread pool. Fixes bug 40719; bugfix on 0.3.5.1-alpha. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: bump to 0.4.7.11 stableRui Salvaterra2022-12-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Quoting the changelog: Changes in version 0.4.7.11 - 2022-11-10 This version contains several major fixes aimed at helping defend against network denial of service. It is also extending drastically the MetricsPort for relays to help us gather more internal data to investigate performance and attacks. We strongly recommend to upgrade to this version especially for Exit relays in order to help the network defend against this ongoing DDoS. o Directory authority changes (dizum, Faravahar): - Change dizum IP address. Closes ticket 40687. - Remove Faravahar until its operator, Sina, set it back up online outside of Team Cymru network. Closes ticket 40688. o Major bugfixes (geoip data): - IPFire informed us on August 12th that databases generated after (including) August 10th did not have proper ARIN network allocations. We are updating the database to use the one generated on August 9th, 2022. Fixes bug 40658; bugfix on 0.4.5.13. o Major bugfixes (onion service): - Set a much higher circuit build timeout for opened client rendezvous circuit. Before this, tor would time them out very quickly leading to unnecessary retries meaning more load on the network. Fixes bug 40694; bugfix on 0.3.5.1-alpha. o Major bugfixes (OSX): - Fix coarse-time computation on Apple platforms (like Mac M1) where the Mach absolute time ticks do not correspond directly to nanoseconds. Previously, we computed our shift value wrong, which led us to give incorrect timing results. Fixes bug 40684; bugfix on 0.3.3.1-alpha. o Major bugfixes (relay): - Improve security of our DNS cache by randomly clipping the TTL value. TROVE-2021-009. Fixes bug 40674; bugfix on 0.3.5.1-alpha. o Minor feature (Mac and iOS build): - Change how combine_libs works on Darwin like platforms to make sure we don't include any `__.SYMDEF` and `__.SYMDEF SORTED` symbols on the archive before we repack and run ${RANLIB} on the archive. This fixes a build issue with recent Xcode versions on Mac Silicon and iOS. Closes ticket 40683. o Minor feature (metrics): - Add various congestion control counters to the MetricsPort. Closes ticket 40708. o Minor feature (performance): - Bump the maximum amount of CPU that can be used from 16 to 128. Note that NumCPUs torrc option overrides this hardcoded maximum. Fixes bug 40703; bugfix on 0.3.5.1-alpha. o Minor feature (relay): - Make an hardcoded value for the maximum of per CPU tasks into a consensus parameter. - Two new consensus parameters are added to control the wait time in queue of the onionskins. One of them is the torrc MaxOnionQueueDelay options which supersedes the consensus parameter. Closes ticket 40704. o Minor feature (relay, DoS): - Apply circuit creation anti-DoS defenses if the outbound circuit max cell queue size is reached too many times. This introduces two new consensus parameters to control the queue size limit and number of times allowed to go over that limit. Closes ticket 40680. o Minor feature (relay, metrics): - Add DoS defenses counter to MetricsPort. - Add congestion control RTT reset counter to MetricsPort. - Add counters to the MetricsPort how many connections, per type, are currently opened and how many were created. - Add relay flags from the consensus to the MetricsPort. - Add total number of opened circuits to MetricsPort. - Add total number of streams seen by an Exit to the MetricsPort. - Add traffic stats as in number of read/written bytes in total. - Related to ticket 40194. o Minor features (fallbackdir): - Regenerate fallback directories generated on November 10, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/11/10. o Minor bugfixes (authorities, sandbox): - Allow to write file my-consensus-<flavor-name> to disk when sandbox is activated. Fixes bug 40663; bugfix on 0.3.5.1-alpha. o Minor bugfixes (dirauth): - Directory authorities stop voting a consensus "Measured" weight for relays with the Authority flag. Now these relays will be considered unmeasured, which should reserve their bandwidth for their dir auth role and minimize distractions from other roles. In place of the "Measured" weight, they now include a "MeasuredButAuthority" weight (not used by anything) so the bandwidth authority's opinion on this relay can be recorded for posterity. Lastly, remove the AuthDirDontVoteOnDirAuthBandwidth torrc option which never worked right. Fixes bugs 40698 and 40700; bugfix on 0.4.7.2-alpha. o Minor bugfixes (onion service client): - A collapsing onion service circuit should be seen as an "unreachable" error so it can be retried. Fixes bug 40692; bugfix on 0.3.5.1-alpha. o Minor bugfixes (onion service): - Make the service retry a rendezvous if the circuit is being repurposed for measurements. Fixes bug 40696; bugfix on 0.3.5.1-alpha. o Minor bugfixes (relay overload statistics): - Count total create cells vs dropped create cells properly, when assessing if our fraction of dropped cells is too high. We only count non-client circuits in the denominator, but we would include client circuits in the numerator, leading to surprising log lines claiming that we had dropped more than 100% of incoming create cells. Fixes bug 40673; bugfix on 0.4.7.1-alpha. o Code simplification and refactoring (bridges): - Remove unused code related to ExtPort connection ID. Fixes bug 40648; bugfix on 0.3.5.1-alpha. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: update to 0.4.7.9Nick Hainke2022-09-26
| | | | | | | Release Notes: https://forum.torproject.net/t/urgent-stable-release-0-4-5-14-0-4-6-12-and-0-4-7-10 Signed-off-by: Nick Hainke <vincent@systemli.org>
* tor: bump to 0.4.7.8 stableRui Salvaterra2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the changelog… o Major bugfixes (congestion control, TROVE-2022-001): - Fix a scenario where RTT estimation can become wedged, seriously degrading congestion control performance on all circuits. This impacts clients, onion services, and relays, and can be triggered remotely by a malicious endpoint. Tracked as CVE-2022-33903. Fixes bug 40626; bugfix on 0.4.7.5-alpha. o Minor features (fallbackdir): - Regenerate fallback directories generated on June 17, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/06/17. o Minor bugfixes (linux seccomp2 sandbox): - Allow the rseq system call in the sandbox. This solves a crash issue with glibc 2.35 on Linux. Patch from pmu-ipf. Fixes bug 40601; bugfix on 0.3.5.11. o Minor bugfixes (logging): - Demote a harmless warn log message about finding a second hop to from warn level to info level, if we do not have enough descriptors yet. Leave it at notice level for other cases. Fixes bug 40603; bugfix on 0.4.7.1-alpha. - Demote a notice log message about "Unexpected path length" to info level. These cases seem to happen arbitrarily, and we likely will never find all of them before the switch to arti. Fixes bug 40612; bugfix on 0.4.7.5-alpha. o Minor bugfixes (relay, logging): - Demote a harmless XOFF log message to from notice level to info level. Fixes bug 40620; bugfix on 0.4.7.5-alpha. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: bump to 0.4.7.7 stableRui Salvaterra2022-04-30
| | | | | | The first stable release in the 0.4.7.x series. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: bump to 0.4.6.10 stableRui Salvaterra2022-04-01
| | | | Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: bump to 0.4.6.9 stableRui Salvaterra2022-01-12
| | | | Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: bump to 0.4.6.8 stableRui Salvaterra2021-10-30
| | | | Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: bump to 0.4.6.7Rui Salvaterra2021-09-03
| | | | Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: bump to 0.4.6.6 stableRui Salvaterra2021-08-02
| | | | | | Run-tested on mvebu/cortexa9 (tor-basic) without issues. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: update to version 0.4.5.8Jan Pavlinec2021-05-19
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: update to version 0.4.5.7Jan Pavlinec2021-03-16
| | | | | | Fixes CVE-2021-28089 and CVE-2021-28090 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: fix building without OpenSSL engine supportRui Salvaterra2021-02-25
| | | | | | Otherwise it would fail with linking errors. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: update to version 0.4.5.6Jan Pavlinec2021-02-19
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: update to version 0.4.4.6 (security fix)Jan Pavlinec2020-11-18
| | | | | | Fixes TROVE-2020- 005 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: disable man pages and html manual generationRui Salvaterra2020-10-28
| | | | | | We don't need this on an embedded system. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: add a basic variant, without relay/bridge supportRui Salvaterra2020-10-28
| | | | | | | If relay/bridge support isn't required, this variant is about 300 kiB smaller than the full tor daemon. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: improve readability of the packages help textRui Salvaterra2020-10-28
| | | | | | | Whitespace before and after the description makes the package information much more obvious. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* tor: update to version 0.4.4.5Jan Pavlinec2020-09-30
| | | | | | | | Changes: -Fix PIC configuration to --enable-pic -disable mallinfo Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: update to version 0.4.3.6 (security fix)Jan Pavlinec2020-07-21
| | | | | | | Fixes CVE-2020- 15572 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: remove libssp hackRosen Penev2020-06-18
| | | | | | Does not seem to be needed anymore. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* tor: update to version 0.4.3.5Jan Pavlinec2020-05-20
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: update to version 0.4.2.7 (security fix)Jan Pavlinec2020-03-26
| | | | | | | Fixes: CVE-2020-10592 Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: fix init scriptsRosen Penev2020-02-15
| | | | | | pidfile should not be set. tor handles it. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* tor: update init scriptJan Pavlinec2020-02-12
| | | | | | | | | Changes: -add uci config -create pid file by procd -add reload function Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: update to version 0.4.2.6Jan Pavlinec2020-02-04
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: add respawn to init scriptJan Pavlinec2019-12-30
| | | | | | | | | | Note: In some cases when tor daemon starts before than the router is connected to the Internet. Tor will exit and you have to run it manually. This should fix this case. Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: update to version 0.4.2.5Jan Pavlinec2019-12-29
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: update to 0.4.1.6Jan Pavlinec2019-10-10
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: update to version 0.4.1.5Jan Pavlinec2019-08-23
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: update to 0.4.0.5Peter Wagner2019-05-05
| | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* tor: Remove zstd dependencyRosen Penev2019-04-01
| | | | | | Now that zstd is in the tree, tor stars to pick it up. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* tor: fix CPE IDJan Pavlinec2019-03-26
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: always create folders and set ownershipPeter Wagner2019-03-11
| | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* tor: Add PKG_CPE_ID for proper CVE tracking.Jan Pavlinec2019-02-26
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: update to 0.3.5.8Peter Wagner2019-02-23
| | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* tor: update to 0.3.5.7Peter Wagner2019-01-14
| | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* tor: update to version 0.3.4.10Jan Pavlinec2019-01-08
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* tor: package improvementsKonstantin Demin2018-12-08
| | | | | | | | | | | | | | | | | | | | | | | | * remove "torify" script - "torify" script is just a wrapper around torsocks, but torsocks is not currently present in packages. * tor-geoip: fix "install" recipe: - use $(INSTALL_DATA) instead of $(CP) as a proper way of installing files * drop deprecated configure option: "--with-ssl-dir" is considered deprecated and obsolete, while "--with-openssl-dir" is already present. * build in parallel * build with -ffunction-sections, -fdata-sections, --gc-sections and -flto * remove "--disable-largefile" in CONFIGURE_ARGS * remove "-std=gnu99" in EXTRA_CFLAGS * use $(FPIC) in EXTRA_CFLAGS * remove trailing whitespace Compile- and run-tested on ar71xx/generic, TP-Link Archer C7 v2 (world-wide version). Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
* tor:update to 0.3.4.9Peter Wagner2018-11-04
| | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* tor: update to 0.3.4.8Peter Wagner2018-09-17
| | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
Powered by cgit, Themed by Ted Yin.