Kutshanje kukhutshwe uhlobo olutsha lweTor 0.3.5.7, esetyenziselwa ukucwangcisa umsebenzi wenethiwekhi engaziwayo yeTor.
I-Tor 0.3.5.7 yamkelwe njengenguqulelo yokuqala ezinzileyo yesebe le-0.3.5, esele ikhula kwezi nyanga zine zidlulileyo.
Kwangelo xesha Ukuhlaziywa kokulungiswa kukhutshelwe amasebe amadala eTor 0.3.4.10 kunye no-0.3.3.11, ezibandakanya ukulungiswa kwe-bug. Isebe le-0.3.5 liya kuhamba kunye nomjikelo wenkxaso ende (i-LTS), ebandakanya ukukhutshwa kohlaziyo lomsebenzi ophambili kwiminyaka emithathu (kude kube nguFebruwari 1, 2022).
Uthotho lweTor 0.3.5 lubandakanya izinto ezintsha kunye nokuphuculwa kokusebenza, kubandakanya ukugunyaziswa kwabathengi kweenkonzo ze-anyanisi v3, ukucoca iingxelo zokuvula, inkxaso yokuphucula izixhobo zomlinganiso we-bandwidth, inkxaso yovavanyo lwe-NSS endaweni ye-OpenSSL, nokunye okuninzi.
Iimpawu ezintsha eziphambili zeTor 0.3.5.7
Ngale nkululeko intsha Inkxaso eyongeziweyo yokugunyazisa unxibelelwano lwabathengi kwiinkonzo ezifihliweyo kusetyenziswa uhlobo lwesithathu lwenkqubo yeetswele yeprotocol.
Ugunyaziso lwenziwa kwinqanaba lokufikelela kwiinkcazo zeenkonzo, Ngoku inkonzo efihliweyo inokuqwalaselwa ukwenzela ukuba kuphela ngabaxhasi abagunyazisiweyo abanokuchaza okubhaliweyo kwisichazi ukufumana ulwazi malunga nonxibelelwano.
Abathengi banokusebenzisa ukhetho lwe "ClientOnionAuthDir" elongezwe kwi-torrc kwaye isikhombisi "esigunyazisiweyo_abathengi /" sicetyisiwe kwiinkonzo zokugcina uluhlu lwabathengi abagunyazisiweyo.
Iinkonzo ezifihliweyo ezisekwe kuhlobo lwesithathu lweprotocol, ukuveliswa kwezinto zokubala ezihlaziyiweyo kuphuculwe ukuqinisekisa ukwenziwa kweenkonzo ngokuqhuba kweenkonzo ezifanayo kwimikhosi eyahlukeneyo ngaphandle kwesidingo sokumisela ukungqinelanisa idatha kumamkeli.
Ukwahlula amatyathanga abaxhasi, kucetyisiwe ukucwangciswa kwe-HiddenServiceExportCircuitID, enokuchazwa ngokunxulumene nenkonzo efihliweyo xa usebenzisa uhlobo lwesithathu lwenkqubo.
Lo msebenzi ukuvumela ukuba ufikelele kwinkonzo efihliweyo ngokusebenzisa umthetho olandelwayo we-HAProxy ukunika idilesi ye-IP ebonakalayo kumtya womthengi ongenayo.
Enye ingongoma ebalulekileyo kukuba Umsebenzi uqalile kulungelelwaniso olupheleleyo lwesiseko sekhowudi yeTor ukuphucula imodyuli kunye nokwenza lula ukugcinwa kweprojekthi.
Ngokomzekelo, Ukwahlulwa kweefayile ezinkulu kwiifayile ezincinci kunye nokwahlulahlula ukusebenza okuthile kuqala.
Isikhombisi "esiqhelekileyo" sahlulwe saba siseti samathala eencwadi (isikhombisi se "lib"), iifayile kulawulo "o" zihanjisiwe zaya kwicandelo lesiseko ("isiseko" solawulo), iimodyuli ezimeleyo ("uphawu" ulawulo) okanye usetyenziso (isikhombisi "sesicelo").
Oku kulungiselelwe ukonyusa intsebenzo (ixesha lokuqalisa lincitshisiwe ngomndilili we-8%).
Olunye utshintsho
Ngokuzenzekela, Inguqulelo yesithathu yomgaqo olandelwayo yenziwe yasebenza ngeetswele.
Ukuba kunyanzelekile ukuba wenze iinkonzo ezintsha ezifihliweyo ngokusekwe kuguqulelo lwesibini lwenkqubo, emva kokufaka uhlaziyo, kuya kufuneka utshintsho lotshintsho ("Inkonzo efihliweyoVersion 2").
Kwiinkonzo esele zikhona, uguqulelo lomgaqo-nkqubo luya kuhlala lungatshintshi, njengoko kubonisiwe kwifayile enezitshixo.
Gqibela Isango elingagqibekanga liye layeka ukuqala kwimowudi yokuphuma. Ukuba iparameter ye-ExitRelay isetelwe "ngokuzenzekelayo", indawo yokuphuma ngoku ifuna ubumbeko olucacileyo lwemithetho yokuphuma kwezithuthi usebenzisa i-ExitPolicy kunye ne-RededuExitPolicy.
Imiyalezo yahlengahlengiswa ngexesha lokuqalisa kweTor, enokuthi ikhokelele ekuphulweni kokuhambelana kunye nezixhobo zangaphandle zokuhlalutya iinkuni.
Ulwazi malunga nenkqubela phambili yokufumana idatha kwiserver yolawulo yapheliswa ngaphambi kokuba uqhagamshelo oluyimpumelelo kwisango (lokuhambisa okanye ibhulorho) lasekwa.
Y yongeze inkxaso yokuphucula izixhobo zokulinganisa umda wendlela kunye nokwenza ukuba kube lula ukuphumaKuyimposiso ukusebenzisa iilayibrari ze-NSS eziphuhliswe yiprojekthi yeMozilla endaweni ye-OpenSSL.