diff options
author | Nick Mathewson <nickm@torproject.org> | 2015-01-08 11:20:26 -0500 |
---|---|---|
committer | Nick Mathewson <nickm@torproject.org> | 2015-01-09 10:28:59 -0500 |
commit | 69df16e3765383bd59fd2fbedbb5301f3b58ab14 (patch) | |
tree | ca11ab5d577a9f3c3ceccd9917a95c8d115468f8 /changes/bug11457 | |
parent | 33df3e37ffecfed309a1a0f210a96620c0ebb837 (diff) | |
download | tor-69df16e3765383bd59fd2fbedbb5301f3b58ab14.tar.gz tor-69df16e3765383bd59fd2fbedbb5301f3b58ab14.zip |
Rewrite the logic for deciding when to drop old/superseded certificates
Fixes bug 11454, where we would keep around a superseded descriptor
if the descriptor replacing it wasn't at least a week later. Bugfix
on 0.2.1.8-alpha.
Fixes bug 11457, where a certificate with a publication time in the
future could make us discard existing (and subsequent!) certificates
with correct publication times. Bugfix on 0.2.0.3-alpha.
Diffstat (limited to 'changes/bug11457')
-rw-r--r-- | changes/bug11457 | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changes/bug11457 b/changes/bug11457 new file mode 100644 index 0000000000..a8b76f6d78 --- /dev/null +++ b/changes/bug11457 @@ -0,0 +1,5 @@ + o Minor bugfixes: + - If an authority operator accidentally makes a signing certificate with + a future publication time, do not discard its real signing + certificates. Fixes bug 11457; bugfix on 0.2.0.3-alpha. + |