A normal Tor client can cause thatlog message during its normal operation. Demote the 'replay detected' log message emitted when a hiddenservice receives the same Diffie-Hellman public key in two differentINTRODUCE2 cells to info level.

Bugfix on 0.2.0.7-alpha,when we decided to allow these config options to both be set. Correct the man page to explain that HashedControlPassword andCookieAuthentication can both be set, in which case either methodis sufficient to authenticate to Tor.Minor bugfixes (documentation and log messages): Update to the SeptemMaxmind GeoLite Country database.

Add a VoteOnHidServDirectoriesV2 config option to allow directoryauthorities to abstain from voting on assignment of the HSDirconsensus flag.

Change the default required uptime for a relay to be accepted asa HSDir (hidden service directory) from 24 hours to 25 hours.Improves on 0.2.0.10-alpha resolves ticket 2649.

Adjust the expiration time on our SSL session certificates tobetter match SSL certs seen in the wild.

We thinkthat these attacks are infeasible (requiring the attacker to sendon the order of zettabytes of altered cells in a short interval),but we'd rather block them off in case there are any classes ofthis attack that we missed. This prevents a possible class of active attacksby an attacker who controls both an introduction point and arendezvous point, and who uses the malleability of AES-CTR toalter the encrypted g^x portion of the INTRODUCE1 cell.

Check for replays of the public-key encrypted portion of anINTRODUCE1 cell, in addition to the current check for replays ofthe g^x value.Avoid an assertion failure when reloading a configuration withTrackExitHosts changes.

For mac download