torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Rewrite the logic for deciding when to drop old/superseded certificates

Browse Source 
Fixes bug 11454, where we would keep around a superseded descriptor
if the descriptor replacing it wasn't at least a week later.  Bugfix
on 0.2.1.8-alpha.

Fixes bug 11457, where a certificate with a publication time in the
future could make us discard existing (and subsequent!) certificates
with correct publication times.  Bugfix on 0.2.0.3-alpha.
This commit is contained in:
Nick Mathewson
2015-01-08 11:20:26 -05:00
parent 33df3e37ff
commit 69df16e376
4 changed files with 68 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/bug11454
+6
View File
@@ -0,0 +1,6 @@
o Minor bugfixes:
- Remove any old authority certificates that have been superseded
for at least two days. Previously, we would keep superseded
certificates until they expired, if they were published close
in time to the certificate that superseded them.
Fixes bug 11454; bugfix on 0.2.1.8-alpha.
changes/bug11457
+5
View File
@@ -0,0 +1,5 @@
o Minor bugfixes:
- If an authority operator accidentally makes a signing certificate with
a future publication time, do not discard its real signing
certificates. Fixes bug 11457; bugfix on 0.2.0.3-alpha.