diff options
| author | Nick Mathewson <nickm@torproject.org> | 2017-06-05 15:44:36 -0400 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2017-06-05 15:44:36 -0400 |
| commit | d5acdadaeffa8e1c61abef5881e9cc6e42d9a755 (patch) | |
| tree | ee2887749e97b34092109038dfe3a784df34155c /changes | |
| parent | d1c1dc229e189cbf4e463b82751af007801a02eb (diff) | |
| parent | e5bdfd66cf03e8410c511f6dcf309142c64c85f5 (diff) | |
| download | tor-d5acdadaeffa8e1c61abef5881e9cc6e42d9a755.tar.gz tor-d5acdadaeffa8e1c61abef5881e9cc6e42d9a755.zip | |
Merge branch 'bug22460_030_01' into maint-0.3.0
Diffstat (limited to 'changes')
| -rw-r--r-- | changes/bug22460_case1 | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/changes/bug22460_case1 b/changes/bug22460_case1 new file mode 100644 index 0000000000..cfe78ad791 --- /dev/null +++ b/changes/bug22460_case1 @@ -0,0 +1,16 @@ + o Major bugfixes (relays, key management): + - Regenerate link and authentication certificates whenever the key that + signs them changes; also, regenerate link certificates whenever the + signed key changes. Previously, these processes were only weakly + coupled, and we relays could (for minutes to hours) wind up with an + inconsistent set of keys and certificates, which other relays + would not accept. Fixes two cases of bug 22460; bugfix on + 0.3.0.1-alpha. + - When sending an Ed25519 signing->link certificate in a CERTS cell, + send the certificate that matches the x509 certificate that we used + on the TLS connection. Previously, there was a race condition if + the TLS context rotated after we began the TLS handshake but + before we sent the CERTS cell. Fixes a case of bug 22460; bugfix + on 0.3.0.1-alpha. + + |