On Fri, 23 Apr 2010 14:16:57 -0400 Roger Dingledine <a...@mit.edu> wrote: >On Fri, Apr 23, 2010 at 02:35:01PM +0200, Timo Schoeler wrote: >> I'm seeing declining traffic over the last few weeks, please see graph: >> It dropped from a sustainted 2,5Mbps (or more) to about a fifth, with a >> massive drop today. >> >> I'm running >> >> tor-0.2.1.25-1.el5.rf >> >> on a 64Bit CentOS machine. Is there something going in the TOR network? > >My first thought is that you updated your openssl rpm in centos, which >disabled tls renegotiation in yet another new way, and that broke your >Tor relay. Meaning your relay still worked, but it would only do tls >renegotiation with other people with centos's particular openssl twist. > >Tor 0.2.2.11-alpha fixes the issue we hope: > - Fix SSL renegotiation behavior on OpenSSL versions like on Centos > that claim to be earlier than 0.9.8m, but which have in reality > backported huge swaths of 0.9.8m or 0.9.8n renegotiation > behavior. Possible fix for some cases of bug 1346. > I hope that, in the future, openssl.org will make some effort to coordinate such things with the various operating system developers in a way that avoids turning the situation into such a cl*****f*** again. It's obviously been a nightmare for you and the rest of the tor project, and I'd bet heavily that the tor project is not the only one so affected.
>But we haven't yet put out a stable release that includes that patch. > >So if you upgraded to the latest 0.2.2.x-alpha to get the fixes for other >bugs, you would get the fix for this bug too. Let us know if it works. > Are there any ideas floating around yet as to why tor doesn't work with openssl 1.0.0? Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * ********************************************************************** *********************************************************************** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talk in the body. http://archives.seul.org/or/talk/