Re: net/tor: update to 0.4.8.13 with PoW defense

On Thursday, October 31st, 2024 at 7:43 PM, Pascal Stumpf <pascal@stumpf.co> wrote:

> On Mon, 28 Oct 2024 09:03:47 +0000, openbsd@systemfailure.net wrote:
>
> > Hello,
> >
> > tor-0.4.8.13 is out, this is a bugfix release [1].
> >
> > Attached is a patch updating tor to 0.4.8.13, while also enabling
> > Proof-of-Work defense as I proposed a few days ago [2].
> >
> > The only test failing is the same that failed consistently with previous
> > versions or tor, and it doesn't prevent the port to build and run fine,
> > at least on amd64.
> >
> > Best regards.
>
>
> * fix license marker
> * don't conflate it with an unrelated update.
>
> I'll be running this for a few days on my node.
>
> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/net/tor/Makefile,v
> diff -u -p -r1.166 Makefile
> --- Makefile 28 Oct 2024 18:02:42 -0000 1.166
> +++ Makefile 28 Oct 2024 18:22:46 -0000
> @@ -1,12 +1,13 @@
> COMMENT= anonymity service using onion routing
>
> DISTNAME= tor-0.4.8.13
> +REVISION= 0
> CATEGORIES= net
> HOMEPAGE= https://www.torproject.org/
>
> MAINTAINER= Pascal Stumpf pascal@stumpf.co
>
>
> -# BSD
> +# GPLv3
> PERMIT_PACKAGE= Yes
>
> WANTLIB += c crypto event_core event_extra execinfo m pthread ssl z
> @@ -21,7 +22,8 @@ CONFIGURE_ARGS= --with-ssl-dir=/usr \
> --with-libevent-dir="${LOCALBASE}" \
> --disable-gcc-hardening \
> --disable-lzma \
> - --disable-zstd
> + --disable-zstd \
> + --enable-gpl
> CONFIGURE_ENV+=ac_cv_member_struct_ssl_method_st_get_cipher_by_char=no
> CFLAGS+= -DDISABLE_ENGINES


Thanks 👍


> > -- [1]
> > https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNo
> > tes
> >
> > [2] https://marc.info/?l=openbsd-ports&m=172926299413404&w=2
> >
> > > > text/x-patch content