From 88e3eca79a996b5b04d04e1b5a48849ab5a0e023 Mon Sep 17 00:00:00 2001 From: evilaliv3 Date: Sun, 22 Feb 2015 23:11:21 +0100 Subject: [PATCH 1/4] Apply changelog for wheezy release 3.1.39 --- debian/changelog | 677 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 677 insertions(+) create mode 100644 debian/changelog diff --git a/debian/changelog b/debian/changelog new file mode 100644 index 00000000..ab2e3cf6 --- /dev/null +++ b/debian/changelog @@ -0,0 +1,677 @@ +tor2web (3.1.39) wheezy; urgency=medium + + * New upstream release + + -- GlobaLeaks software signing key Sun, 22 Feb 2015 21:00:23 +0100 + +tor2web (3.1.35-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.35 (fixed url mangling regexp) + + -- GlobaLeaks software signing key Mon, 8 Dec 2014 23:03:42 +0002 + +tor2web (3.1.34-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.34 (fixed regression related to automatic following of redirects) + + -- GlobaLeaks software signing key Mon, 8 Dec 2014 22:12:42 +0002 + +tor2web (3.1.33-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.33 (fixed regression related to automatic following of redirects) + + -- GlobaLeaks software signing key Mon, 8 Dec 2014 21:27:42 +0002 + +tor2web (3.1.32-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.32 (fixed bug related to wrong header fix) + + -- GlobaLeaks software signing key Mon, 24 Nov 2014 00:40:42 +0002 + +tor2web (3.1.31-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.31 (more explicit/safe handling of dummyproxy urls with support for https) + + -- GlobaLeaks software signing key Mon, 17 Nov 2014 21:48:42 +0002 + +tor2web (3.1.30-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.30 (added support for TLS hidden services) + + -- GlobaLeaks software signing key Mon, 17 Nov 2014 21:48:42 +0002 + +tor2web (3.1.29-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.29 (Corrected regexp for translation mode) + + -- GlobaLeaks software signing key Thu, 13 Nov 2014 15:05:42 +0002 + +tor2web (3.1.28-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.28 (Fixed header injection twice bug) + + -- GlobaLeaks software signing key Thu, 13 Nov 2014 13:22:42 +0002 + +tor2web (3.1.27-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.27 (Fixed race condition bug) + + -- GlobaLeaks software signing key Thu, 13 Nov 2014 12:11:42 +0002 + +tor2web (3.1.26-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.26 (Fixed Apparmor script) + + -- GlobaLeaks software signing key Wed, 12 Nov 2014 18:29:42 +0002 + +tor2web (3.1.25-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.25 (Reverted changes related to new packaging) + + -- GlobaLeaks software signing key Mon, 27 Oct 2014 19:49:42 +0002 + +tor2web (3.1.24-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.24 (Fixed onionoo list fetching after SSLv3 has been disabled) + + -- GlobaLeaks software signing key Mon, 27 Oct 2014 18:30:42 +0002 + +tor2web (3.1.23-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.23 (Packaging fixes) + + -- GlobaLeaks software signing key Tue, 21 Oct 2014 10:13:42 +0002 + +tor2web (3.1.22-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.22 (Packaging fixes) + + -- GlobaLeaks software signing key Tue, 21 Oct 2014 09:20:42 +0002 + +tor2web (3.1.21-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.21 (Disabled SSLv3 due to PoodleBleed Bug) + + -- GlobaLeaks software signing key Tue, 21 Oct 2014 00:40:42 +0002 + +tor2web (3.1.20-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.20 (Packaging fixes) + + -- GlobaLeaks software signing key Sun, 19 Oct 2014 15:10:42 +0002 + +tor2web (3.1.19-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.19 (Optimization fixes) + + -- GlobaLeaks software signing key Sun, 19 Oct 2014 14:41:42 +0002 + +tor2web (3.1.18-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.18 (Packaging fixes) + + -- GlobaLeaks software signing key Sun, 19 Oct 2014 03:32:42 +0002 + +tor2web (3.1.17-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.17 (Added HostsMap feature) + + -- GlobaLeaks software signing key Sun, 19 Oct 2014 03:18:42 +0002 + +tor2web (3.1.16-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.16 (Regression Fix) + + -- GlobaLeaks software signing key Sat, 11 Oct 2014 01:10:42 +0002 + +tor2web (3.1.15-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.15 (Packaging fixes) + + -- GlobaLeaks software signing key Sat, 11 Oct 2014 00:46:42 +0002 + +tor2web (3.1.14-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.14 (Minor additions) + + -- GlobaLeaks software signing key Sat, 11 Oct 2014 00:15:42 +0002 + +tor2web (3.1.13-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.13 (Packaging fixes) + + -- GlobaLeaks software signing key Sat, 9 Aug 2014 18:08:42 +0002 + +tor2web (3.1.12-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.12 (Packaging fixes) + + -- GlobaLeaks software signing key Sat, 9 Aug 2014 17:57:42 +0002 + +tor2web (3.1.11-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.11 (initial implementation of access disclaimer) + + -- GlobaLeaks software signing key Sat, 9 Aug 2014 17:43:42 +0002 + +tor2web (3.1.10-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.10 (added support for Ubuntu 14.04) + + -- GlobaLeaks software signing key Tue, 29 Jul 2014 00:35:42 +0002 + +tor2web (3.1.9-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.9 (Packaging fix: added configuration example for publish_lists) + + -- GlobaLeaks software signing key Sat, 14 Jun 2014 11:30:42 +0002 + +tor2web (3.1.8-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.8 (Added blacklist/whitelist expose capability in order to support Ahmia.fi) + + -- GlobaLeaks software signing key Sat, 14 Jun 2014 11:01:42 +0002 + +tor2web (3.1.7-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.7 + + -- GlobaLeaks software signing key Mon, 24 Feb 2014 02:08:42 +0002 + +tor2web (3.1.6-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.6 + + -- GlobaLeaks software signing key Mon, 24 Feb 2014 01:35:42 +0002 + +tor2web (3.1.5-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.5 Added support for TLSv1.1 and TLSv1.2 thanks to pyOpenSSL 0.14 + + -- GlobaLeaks software signing key Mon, 24 Feb 2014 01:01:42 +0002 + +tor2web (3.1.4-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.4 Minor fixes. + + -- GlobaLeaks software signing key Sat, 22 Feb 2014 16:10:42 +0002 + +tor2web (3.1.3-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.3 Minor fixes. + + -- GlobaLeaks software signing key Thu, 04 Feb 2014 09:48:42 +0002 + +tor2web (3.1.2-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.2 Minor fixes. + + -- GlobaLeaks software signing key Thu, 30 Jan 2014 18:06:42 +0002 + +tor2web (3.1.1-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.1 Banner updated + + -- GlobaLeaks software signing key Tue, 17 Jan 2014 15:22:42 +0002 + +tor2web (3.1.0-0) unstable; urgency=low + + * Tor2web 3.0 - 3.1.0 Stable Release + + -- GlobaLeaks software signing key Tue, 17 Jan 2014 15:00:42 +0002 + +tor2web (3.0.77-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.77 Minor fixes. + + -- GlobaLeaks software signing key Tue, 14 Jan 2013 18:26:42 +0002 + +tor2web (3.0.76-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.76 decoy widget bugfixing. + + -- GlobaLeaks software signing key Mon, 02 Dec 2013 16:03:42 +0002 + +tor2web (3.0.75-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.75 upgraded to Twisted 13.2.0; prctl dependency removed. + + -- GlobaLeaks software signing key Thu, 28 Nov 2013 10:16:42 +0002 + +tor2web (3.0.74-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.74 Minor fixes + + -- GlobaLeaks software signing key Sun, 27 Oct 2013 11:00:42 +0002 + +tor2web (3.0.73-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.73 Minor fixes + + -- GlobaLeaks software signing key Sat, 14 Sep 2013 23:41:42 +0002 + +tor2web (3.0.72-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.72 Minor fixes + + -- GlobaLeaks software signing key Fri, 13 Sep 2013 01:41:42 +0002 + +tor2web (3.0.71-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.71 Minor fixes + + -- GlobaLeaks software signing key Fri, 13 Sep 2013 01:32:42 +0002 + +tor2web (3.0.70-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.70 Minor fixes + + -- GlobaLeaks software signing key Fri, 13 Sep 2013 01:26:42 +0002 + +tor2web (3.0.69-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.69 Minor fixes + + -- GlobaLeaks software signing key Fri, 13 Sep 2013 01:18:42 +0002 + +tor2web (3.0.68-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.68 Minor fixes + + -- GlobaLeaks software signing key Fri, 13 Sep 2013 01:08:42 +0002 + +tor2web (3.0.67-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.67 Packaging fixes + + -- GlobaLeaks software signing key Fri, 13 Sep 2013 00:55:42 +0002 + +tor2web (3.0.66-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.66 Massive fixs thanks to python pycharm code debugging + + -- GlobaLeaks software signing key Thu, 12 Sep 2013 23:40:42 +0002 + +tor2web (3.0.65-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.65 Fixed debian packaging (Apparmor related) + + -- GlobaLeaks software signing key Thu, 12 Sep 2013 18:11:42 +0002 + +tor2web (3.0.64-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.64 AppArmor sandboxing profile added + + -- GlobaLeaks software signing key Thu, 12 Sep 2013 17:53:42 +0002 + +tor2web (3.0.63-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.63 Fix against TLS CRIME Attack + + -- GlobaLeaks software signing key Tue, 10 Sep 2013 11:34:42 +0002 + +tor2web (3.0.63-0) unstable; urgency=low + + * Tor2web 3.0 - 3.0.63 Fix against TLS CRIME Attack + + -- GlobaLeaks software signing key Tue, 10 Sep 2013 11:34:42 +0002 + +tor2web (3.0.62-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.62 + + -- GlobaLeaks software signing key Tue, 10 Sep 2013 00:30:42 +0002 + +tor2web (3.0.61-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.61 Security enforcement of filesystem permissions + + -- GlobaLeaks software signing key Mon, 9 Sep 2013 16:52:42 +0002 + +tor2web (3.0.60-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.60 Security enforcement of filesystem permissions + + -- GlobaLeaks software signing key Mon, 9 Sep 2013 16:35:42 +0002 + +tor2web (3.0.59-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.59 Security enforcement of default SSL ciphers + + -- GlobaLeaks software signing key Mon, 9 Sep 2013 11:56:42 +0002 + +tor2web (3.0.58-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.58 Added dummyproxy capability + + -- GlobaLeaks software signing key Sat, 7 Sep 2013 10:11:42 +0002 + +tor2web (3.0.57-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.57 Stevy Legacy fix + + -- GlobaLeaks software signing key Fri, 6 Sep 2013 17:32:42 +0002 + +tor2web (3.0.56-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.56 Enabled PFS + + -- GlobaLeaks software signing key Fri, 6 Sep 2013 15:49:42 +0002 + +tor2web (3.0.55-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.55 Compatibility fixes + + -- GlobaLeaks software signing key Wed, 5 Sep 2013 12:04:42 +0002 + +tor2web (3.0.54-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.54 Compatibility fixes (mainly with IE and Safari) + + -- GlobaLeaks software signing key Wed, 5 Sep 2013 11:07:42 +0002 + +tor2web (3.0.53-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.53 Packaging Fixes + + -- GlobaLeaks software signing key Wed, 4 Sep 2013 22:40:42 +0002 + +tor2web (3.0.52-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.52 Packaging Fixes + + -- GlobaLeaks software signing key Wed, 4 Sep 2013 22:23:42 +0002 + +tor2web (3.0.51-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.51 Packaging Fixes + + -- GlobaLeaks software signing key Wed, 4 Sep 2013 21:52:42 +0002 + +tor2web (3.0.50-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.50 Minor Fixes + + -- GlobaLeaks software signing key Wed, 4 Sep 2013 21:49:42 +0002 + +tor2web (3.0.49-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.49 Minor Fixes + + -- GlobaLeaks software signing key Sun, 1 Sep 2013 19:12:42 +0002 + +tor2web (3.0.48-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.48 Minor Fixes + + -- GlobaLeaks software signing key Sun, 1 Sep 2013 19:06:42 +0002 + +tor2web (3.0.47-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.47 Minor Fixes + + -- GlobaLeaks software signing key Sun, 1 Sep 2013 15:44:42 +0002 + +tor2web (3.0.46-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.46 Minor Fixes + + -- GlobaLeaks software signing key Sun, 1 Sep 2013 15:40:42 +0002 + +tor2web (3.0.45-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.45 Minor Fixes + + -- GlobaLeaks software signing key Sun, 1 Sep 2013 15:33:42 +0002 + +tor2web (3.0.44-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.44 Minor Fixes + + -- GlobaLeaks software signing key Thu, 29 Aug 2013 13:46:42 +0002 + +tor2web (3.0.43-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.43 Minor Fixes + + -- GlobaLeaks software signing key Thu, 29 Aug 2013 10:19:42 +0002 + +tor2web (3.0.42-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.42 Minor Fixes + + -- GlobaLeaks software signing key Thu, 29 Aug 2013 00:28:42 +0002 + +tor2web (3.0.41-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.41 Minor Fixes + + -- GlobaLeaks software signing key Wed, 28 Aug 2013 22:48:42 +0002 + +tor2web (3.0.40-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.40 Minor Fixes + + -- GlobaLeaks software signing key Tue, 27 Aug 2013 20:47:42 +0002 + +tor2web (3.0.39-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.39 Minor Fixes + + -- GlobaLeaks software signing key Tue, 27 Aug 2013 20:23:42 +0002 + +tor2web (3.0.38-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.38 Minor Fixes + + -- GlobaLeaks software signing key Tue, 27 Aug 2013 10:23:42 +0002 + +tor2web (3.0.37-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.37 Minor Fixes + + -- GlobaLeaks software signing key Mon, 26 Aug 2013 23:15:42 +0002 + +tor2web (3.0.36-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.36 Minor Fixes + + -- GlobaLeaks software signing key Mon, 26 Aug 2013 20:37:42 +0002 + +tor2web (3.0.35-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.35 Minor Fixes + + -- GlobaLeaks software signing key Mon, 26 Aug 2013 15:22:42 +0002 + +tor2web (3.0.34-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.34 Minor Fixes + + -- GlobaLeaks software signing key Mon, 26 Aug 2013 12:22:42 +0002 + +tor2web (3.0.33-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.33 Minor Fixes + + -- GlobaLeaks software signing key Sat, 24 Aug 2013 02:39:42 +0002 + +tor2web (3.0.32-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.32 Minor Fixes + + -- GlobaLeaks software signing key Fri, 23 Aug 2013 22:18:42 +0002 + +tor2web (3.0.31-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.31 Minor Fixes + + -- GlobaLeaks software signing key Fri, 23 Aug 2013 18:08:42 +0002 + +tor2web (3.0.30-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.30 Minor Fixes + + -- GlobaLeaks software signing key Fri, 23 Aug 2013 17:44:42 +0002 + +tor2web (3.0.29-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.29 Minor Fixes + + -- GlobaLeaks software signing key Fri, 23 Aug 2013 17:37:42 +0002 + +tor2web (3.0.28-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.28 Minor Fixes + + -- GlobaLeaks software signing key Fri, 23 Aug 2013 17:09:42 +0002 + +tor2web (3.0.27-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.27 Packaging Fixes + + -- GlobaLeaks software signing key Fri, 23 Aug 2013 16:31:42 +0002 + +tor2web (3.0.26-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.26 Multiprocess server implemented + + -- GlobaLeaks software signing key Fri, 23 Aug 2013 16:21:42 +0002 + +tor2web (3.0.25-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.25 Minor Fixes + + -- GlobaLeaks software signing key Wed, 21 Aug 2013 10:39:42 +0002 + +tor2web (3.0.24-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.24 Minor Fixes + + -- GlobaLeaks software signing key Mon, 19 Aug 2013 12:37:42 +0002 + +tor2web (3.0.23-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.23 Added Remote Blacklist fetching + + -- GlobaLeaks software signing key Mon, 19 Aug 2013 02:41:42 +0002 + +tor2web (3.0.22-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.22 Addeed Remote Blacklist fetching + + -- GlobaLeaks software signing key Mon, 19 Aug 2013 02:27:42 +0002 + +tor2web (3.0.20-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.20 Minor Additions + + -- GlobaLeaks software signing key Wed, 16 Aug 2013 02:38:42 +0002 + +tor2web (3.0.19-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.19 Fixed Packaging issues + + -- GlobaLeaks software signing key Wed, 14 Aug 2013 23:30:42 +0002 + +tor2web (3.0.16-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.16 Simple Stats API added + + -- GlobaLeaks software signing key Wed, 14 Aug 2013 22:30:42 +0002 + +tor2web (3.0.15-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.15 Added possibility to enable HTTP/HTTPS/BOTH (Schiphol Airport Edition) + + -- GlobaLeaks software signing key Tue, 13 Aug 2013 12:40:42 +0002 + +tor2web (3.0.14-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.14 Added Decoy Traffic API (ringobongo security edition) + + -- GlobaLeaks software signing key Tue, 13 Aug 2013 01:07:42 +0002 + +tor2web (3.0.13-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.13 Packaging fixed (but we like to continue calling it nukraxe edition) + + -- GlobaLeaks software signing key Tue, 13 Aug 2013 00:17:42 +0002 + +tor2web (3.0.12-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.12 Fixed Twisted Leak (nukraxe edition) + + -- GlobaLeaks software signing key Mon, 12 Aug 2013 11:45:42 +0002 + +tor2web (3.0.11-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.11 Added possibility to disable banner + + -- GlobaLeaks software signing key Sat, 10 Aug 2013 20:36:42 +0002 + +tor2web (3.0.10-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.10 Packaging Fixes + + -- GlobaLeaks software signing key Fri, 9 Aug 2013 16:16:42 +0002 + +tor2web (3.0.9-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.9 Minor Fixes + + -- GlobaLeaks software signing key Fri, 9 Aug 2013 12:54:42 +0002 + +tor2web (3.0.8-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.8 Globaleaks Signed Release + + -- GlobaLeaks software signing key Fri, 9 Aug 2013 12:31:42 +0002 + +tor2web (3.0.7-2) unstable; urgency=low + + * Tor2web 3.0 - 3.0.7 Globaleaks Signed Release + + -- GlobaLeaks software signing key Fri, 9 Aug 2013 11:31:42 +0002 + +tor2web (3.0.6-2) unstable; urgency=low + + * Tor2web 3.0 - Init Script updated / Cron Mem Check Script added + + -- Tor2web software signing key Thu, 6 Aug 2013 15:01:02 +0002 + +tor2web (3.0.5-2) unstable; urgency=low + + * Tor2web 3.0 - Minor fixes + + -- Tor2web software signing key Thu, 1 Aug 2013 11:02:02 +0002 + +tor2web (3.0.4-2) unstable; urgency=low + + * Tor2web 3.0 - Minor fixes + + -- Tor2web software signing key Fri, 25 Jul 2013 20:16:02 +0002 + +tor2web (3.0.3-2) unstable; urgency=low + + * Tor2web 3.0 - Minor fixes + + -- Tor2web software signing key Sun, 21 Jul 2013 00:28:02 +0002 + +tor2web (3.0.2-2) unstable; urgency=low + + * Tor2web 3.0 - Minor fixes + + -- Tor2web software signing key Wed, 17 Jul 2013 15:11:02 +0002 + +tor2web (3.0.1-2) unstable; urgency=high + + * Tor2web 3.0 - Minor fixes + + -- Tor2web software signing key Mon, 15 Jul 2013 14:54:03 +0002 + +tor2web (3.0.0-2) unstable; urgency=high + + * Tor2web 3.0 - First Deb Release + + -- Tor2web software signing key Sat, 29 Jun 2013 18:54:05 +0002 From 62e4fd938183572b711933dd5915fce424784bc8 Mon Sep 17 00:00:00 2001 From: evilaliv3 Date: Mon, 23 Feb 2015 13:08:23 +0100 Subject: [PATCH 2/4] Add checktor.js script to misc scripts useful for Tor2web integration --- misc/checktor.js | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 misc/checktor.js diff --git a/misc/checktor.js b/misc/checktor.js new file mode 100644 index 00000000..fa86bd0f --- /dev/null +++ b/misc/checktor.js @@ -0,0 +1,33 @@ +/* + Copyright 2015 - Hermes Center - GlobaLeaks project + Author + + Javascript CheckTor library +*/ + +function redirectIfOnTor(url, test_url) { + // Test if the user is using Tor and in that case + // redirects the user to provided url + try { + if (typeof(test_url) === 'undefined') { + var test_url = 'https://antani.tor2web.org/checktor'; + } + if (window.XMLHttpRequest) { + var xmlhttp = new XMLHttpRequest(); + + xmlhttp.onreadystatechange=function() { + if (xmlhttp.readyState==4 && xmlhttp.status==200) { + if (xmlhttp.getResponseHeader("x-check-tor")) { + window.location.href = url; + } + } + } + + xmlhttp.open("GET", test_url, true); + xmlhttp.send(); + + } + } catch(err) { + + } +} From aa64cc38186c63ddd077c77494bde60ea5af115b Mon Sep 17 00:00:00 2001 From: evilaliv3 Date: Fri, 27 Feb 2015 21:30:20 +0100 Subject: [PATCH 3/4] Change sslcontext.method setting in order to enforce TLS usage this change reflects the same configuratin present in tor2web.utils.ssl and applied on globaleaks in globaleaks in relation to ticket: https://github.com/globaleaks/GlobaLeaks/issues/1182 --- tor2web/utils/mail.py | 6 +++++- tor2web/utils/ssl.py | 1 - 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/tor2web/utils/mail.py b/tor2web/utils/mail.py index 56561eb6..56fef6b7 100644 --- a/tor2web/utils/mail.py +++ b/tor2web/utils/mail.py @@ -56,7 +56,11 @@ def sendmail(authenticationUsername, authenticationSecret, fromAddress, toAddres @param smtpPort: the smtp port """ contextFactory = ClientContextFactory() - contextFactory.method = SSL.SSLv3_METHOD + + # evilaliv3: + # in order to understand and before change this settings please + # read the comment inside tor2web.utils.ssl + contextFactory.method = SSL.SSLv23_METHOD resultDeferred = defer.Deferred() diff --git a/tor2web/utils/ssl.py b/tor2web/utils/ssl.py index 2f8d8ce4..6f103f53 100644 --- a/tor2web/utils/ssl.py +++ b/tor2web/utils/ssl.py @@ -126,7 +126,6 @@ def __init__(self, privateKeyFileName, certificateChainFileName, dhFileName, cip # This trick make openssl consider valid all TLS methods. self.sslmethod = SSL.SSLv23_METHOD - self.dhFileName = dhFileName self.cipherList = cipherList From 34fede79384ea5884379603f8bfbcc9e5b272bc2 Mon Sep 17 00:00:00 2001 From: Virgil Date: Mon, 9 Mar 2015 19:58:30 +0800 Subject: [PATCH 4/4] added support for more HTTP response headers For example, the "Link" and "X-Pingback" headers on: http://54ogum7gwxhtgiya.onion This patch makes those headers (and others) work as intended. --- tor2web/t2w.py | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/tor2web/t2w.py b/tor2web/t2w.py index 1e11b10e..71ec0d1d 100644 --- a/tor2web/t2w.py +++ b/tor2web/t2w.py @@ -1052,6 +1052,7 @@ def handleHeader(self, key, values): # some headers does not allow multiple occurrences # in case of multiple occurrences we evaluate only the first valueLower = values[0].lower() + proto = 'http://' if config.transport == 'HTTP' else 'https://' if keyLower == 'transfer-encoding' and valueLower == 'chunked': return @@ -1074,14 +1075,19 @@ def handleHeader(self, key, values): values = [re_sub(rexp['set-cookie_t2w'], r'domain=\1\2.' + config.basehost + r'\3', x) for x in values] - if keyLower in 'location': + elif keyLower == 'location': if config.mode == 'TRANSLATION': values = [re_sub(self.translation_rexp['from'], self.translation_rexp['to'], x) for x in values] - - proto = 'http://' if config.transport == 'HTTP' else 'https://' + values = [re_sub(rexp['t2w'], proto + r'\2.' + config.basehost, x) for x in values] + # especially for headers 'link' and 'x-pingback', but lets cut to the chase and do + # the regex for all non-exempted headers + else: + values = [ re_sub(rexp['t2w'], config.proto + r'\2.' + config.basehost, x) for x in values ] + + self.responseHeaders.setRawHeaders(key, values) def processResponseHeaders(self, headers):