Re: [tor-dev] tor and libressl

2015-02-21 Thread cacahuatl
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

VoidLinux also runs with LibreSSL as it's default libssl provider, and
it's xbps build template shows it's a pretty seamless process.

https://github.com/voidlinux/void-packages/blob/master/srcpkgs/tor/template

Leo Unglaub:
 Hey,
 
 On 02/21/15 13:45, Ximin Luo wrote:
 Could you write some more details about how you got this to work?
 For example, did you link in libressl during the build, did you
 have to change anything, or did you just drop-in libressl.so (or
 whatever) to a pre-built tor and have everything work?
 
 it's actually quit easy. If you use OpenBSD for example there is
 already libressl installed. They have keept the same old API from
 OpenSSL so you could build applications the same way as you did
 with OpenSSL.
 
 They have also added a more modern API called libtls: 
 http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/tls_accept_socket.3?query=tls_initsec=3

 
 
 Greetings Leo
 
-BEGIN PGP SIGNATURE-

iQEcBAEBCgAGBQJU6MvBAAoJEFmpmcH7mQWj99wH/Rcx0nFNcDD1HqqBFxZH5OVY
EtbyrEyphE2QYOImG3zVc4GwSnS9OXaZeDL0d1P4JHTdvySqTE1t6RFZaWj57Ddk
aaYV9qyK9ZXZonS4+eEUHrQYDi/2R+gITKQrV96U437G99oOsLBoeaYzCKg2cFVj
2gtmQjm4r9HREwlng/J6ORAHjgeY0KfBjC3PbrpNMMGnd5Ylu0ZjWneJbpbawHmD
Pqj/yhIlTrGPs4DfWsWmGDRYqJ6PO1pz3SBRw9JjoU6J1Ky9UJ5QgRMUAH77CV96
Raotx34rRfzQ5q1GhXJ41tDLNLUJ/lFuBz89z+MPrR7bZVu6NgQq50eWpZSbwoI=
=Afop
-END PGP SIGNATURE-
___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


Re: [tor-dev] tor and libressl

2015-02-21 Thread Leo Unglaub

Hey,

On 02/21/15 13:45, Ximin Luo wrote:

Could you write some more details about how you got this to work? For example, 
did you link in libressl during the build, did you have to change anything, or 
did you just drop-in libressl.so (or whatever) to a pre-built tor and have 
everything work?


it's actually quit easy. If you use OpenBSD for example there is already 
libressl installed. They have keept the same old API from OpenSSL so you 
could build applications the same way as you did with OpenSSL.


They have also added a more modern API called libtls: 
http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/tls_accept_socket.3?query=tls_initsec=3


Greetings
Leo

--
Leo Unglaub

Website: https://www.leo-unglaub.net
Twitter: https://twitter.com/LeoUnglaub
___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


Re: [tor-dev] tor and libressl

2015-02-21 Thread Leo Unglaub

Hey,

On 02/20/15 23:01, Tyrano Sauro wrote:

I got tor build with libressl. it works. Is this a good idea?


yes it is. libressl is a cleaned up version of openssl. The OpenBSD guys 
removed all that useless crap from the library and fixed a lot of bugs. 
Running Tor with libressl is a performence and a security improvement.


Greetings
Leo

--
Leo Unglaub
___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


Re: [tor-dev] Tor Project Idea for GSOC 2015

2015-02-21 Thread Paul Syverson
Hi Gautham,

On Thu, Feb 19, 2015 at 03:53:00PM +0530, Gautham Nekkanti wrote:
 Hi,
 
 I am Gautham (icodemachine from IRC and TRAC). I am willing to
 participate in GSoC 2015. I was brainstorming for project ideas and thought
 of this useful project idea.
 
 I want to put forward a project idea of Simple analytics tool for HIDDEN
 service providers.

Nice idea.

 Although, there are already thousands of
 third-party traffic statistic tools, most of them require javascript and
 just defeats the whole purpose of server anonymity. This project is a
 little similar to Arm, instead it involves in listening how many users are
 connected to our site and parsing it.
 
 Advanced metrics like IP addresses of visitors, countries, e.t.c. wouldn't
 be available as it is pointless in our case (Since the IPs reflect the IPs
 of exit nodes).

I was going to say that it could still be useful to detect in order to
notice patterns of (mis)behavior from exit relays, also if shared this
could be useful for statistics to help understand the network. The
latter wouldn't be of direct use to the onion service provider but
both would help in general...

But then I realized this reasoning accepts your statement that IPs are
of exit nodes.  Actually, for onion services all connections are
outbound, so IPs are only of guard nodes for the onionsite.

But this little mistake also made me think that sharing of the other
statistics would still be useful for the understanding use of onion
services. This would have to be only if the onionsite operator wanted
to share and should be configured with consideration for privacy and
security. There is existing project work looking at supporting
voluntary indexing by onion services and this could be a nice
complement to that. Playing up that aspect could perhaps up the
interest of potential mentors.

Cool idea in any case,
Paul

 So, it basically displays the number of visitors and a few
 other metrics. Historic data will be presented graphically. The data will
 be accessible through a localhost website and Historic data would be stored
 in a local database. Although, it is not nearly as advanced as other
 statistic tools, it would still be an essential tool for Hidden service
 providers to analyze their traffic figures. How would it be? Please share
 your views.
 
 Thanks,
 Gautham


___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev


Re: [tor-dev] tor and libressl

2015-02-21 Thread Ximin Luo
On 20/02/15 23:01, Tyrano Sauro wrote:
 I got tor build with libressl. it works. Is this a good idea?
 
 TY
 

Could you write some more details about how you got this to work? For example, 
did you link in libressl during the build, did you have to change anything, or 
did you just drop-in libressl.so (or whatever) to a pre-built tor and have 
everything work?

X

-- 
GPG: 4096R/1318EFAC5FBBDBCE
git://github.com/infinity0/pubkeys.git
___
tor-dev mailing list
tor-dev@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev