user/ioerror/tor, branch tls-cert-work

Implement prop 179

2011-03-05T06:00:44+00:00

Add Rakshasa Prime related code
Implement 2048 bit TLS certificates
Implement Internet Widgits Pty Ltd step in the arms race
add get_rakshasa() set_rakshasa() and many other functions

Merge remote branch 'origin/maint-0.2.2'

2011-03-04T05:25:14+00:00

C style fix: a no-args function is void fn(void), not void fn().

2011-03-04T04:42:14+00:00

Add a magic field to tor_tls_t to catch exdata corruption bugs, if any appear.

2011-03-04T04:41:34+00:00

Emend changes/tls-hash

2011-03-04T01:54:53+00:00

Check the result of SSL_set_ex_data

2011-03-04T00:17:39+00:00

Reported by piebeer.

Use SSL__ex_data instead of SSL__app_data

2011-03-03T23:34:53+00:00

SSL_*_app_data uses ex_data index 0, which will be the first one allocated
by SSL_get_ex_new_index. Thus, if we ever started using the ex_data feature
for some other purpose, or a library linked to Tor ever started using
OpenSSL's ex_data feature, Tor would break in spectacular and mysterious
ways. Using the SSL_*_ex_data functions directly now may save us from
that particular form of breakage in the future.

But I would not be surprised if using OpenSSL's ex_data functions at all
(directly or not) comes back to bite us on our backends quite hard. The
specified behaviour of dup_func in the man page is stupid, and
crypto/ex_data.c is a horrific mess.

Remove now-unused helper functions

2011-03-03T22:59:21+00:00

These functions were needed only by code removed in the preceding commit.

Reported by mobmix.

Merge remote branch 'rransom/typo-fix-2011-03-03-01' into maint-0.2.2

2011-03-03T18:50:17+00:00

Fix typo in man page

2011-03-03T18:41:39+00:00