diff options
| author | Nick Mathewson <nickm@torproject.org> | 2013-11-14 09:37:41 -0500 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2013-11-14 09:37:41 -0500 |
| commit | f6e07c158f3d161e570e34ab6f4ca75f351df3a6 (patch) | |
| tree | c7fa2e2e3c43da750fd798ef166bdd08c2d6ff00 /changes/prop157-require | |
| parent | a82b18f2168ce19e0637740fed5746d6daac4e3a (diff) | |
| download | tor-f6e07c158f3d161e570e34ab6f4ca75f351df3a6.tar.gz tor-f6e07c158f3d161e570e34ab6f4ca75f351df3a6.zip | |
Make the dir-key-crosscert element required
In proposal 157, we added a cross-certification element for
directory authority certificates. We implemented it in
0.2.1.9-alpha. All Tor directory authorities now generate it.
Here, as planned, make it required, so that we can finally close
proposal 157.
The biggest change in the code is in the unit test data, where some
old hardcoded certs that we made long ago have become no longer
valid and now need to be replaced.
Diffstat (limited to 'changes/prop157-require')
| -rw-r--r-- | changes/prop157-require | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changes/prop157-require b/changes/prop157-require new file mode 100644 index 0000000000..0c35f64d28 --- /dev/null +++ b/changes/prop157-require @@ -0,0 +1,5 @@ + o Minor features: + - Clients now reject any directory authority certificates lacking + a dir-key-crosscert element. These have been included since + 0.2.1.9-alpha, so there's no real reason for them to be optional + any longer. Completes proposal 157.
\ No newline at end of file |