bugfix: only require the correct key if the nickname is for

a verified router


svn:r2084
This commit is contained in:
Roger Dingledine
2004-07-21 18:20:09 +00:00
parent c83f0e948f
commit 1e62d24ddc
+2 -1
View File
@@ -309,7 +309,8 @@ connection_tls_finish_handshake(connection_t *conn) {
crypto_free_pk_env(identity_rcvd);
router = router_get_by_nickname(nickname);
if(router && /* we know this nickname; make sure it's the right guy */
if(router && /* we know this nickname */
router->is_verified && /* make sure it's the right guy */
memcmp(digest_rcvd, router->identity_digest, DIGEST_LEN) != 0) {
log_fn(LOG_WARN, "Identity key not as expected for %s", nickname);
return -1;