aboutsummaryrefslogtreecommitdiff
path: root/src/test
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2014-10-08 08:32:00 -0400
committerNick Mathewson <nickm@torproject.org>2015-05-28 10:41:49 -0400
commit592a43910706a67048c7d05e45d35dc79712820a (patch)
treebe4ae3a131e54248a845bea08e9d3c688bec3ce6 /src/test
parenteacbe03c71a9ddc7c3745ef8da88580a60021201 (diff)
downloadtor-592a43910706a67048c7d05e45d35dc79712820a.tar.gz
tor-592a43910706a67048c7d05e45d35dc79712820a.zip
Tie key-pinning logic into directory authority operation
With this patch: * Authorities load the key-pinning log at startup. * Authorities open a key-pinning log for writing at startup. * Authorities reject any router with an ed25519 key where they have previously seen that ed25519 key with a different RSA key, or vice versa. * Authorities warn about, but *do not* reject, RSA-only descriptors when the RSA key has previously gone along with an Ed25519 key. (We should make this a 'reject' too, but we can't do that until we're sure there's no legit reason to downgrade to 0.2.5.)
Diffstat (limited to 'src/test')
0 files changed, 0 insertions, 0 deletions