[tor-bugs] #4370 [Tor Client]: If the CERTS cell contains a cert with a scary time, don't warn unless it's from an authority

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Wed Nov 2 22:54:45 UTC 2011


#4370: If the CERTS cell contains a cert with a scary time, don't warn unless it's
from an authority
------------------------+---------------------------------------------------
 Reporter:  arma        |          Owner:                    
     Type:  defect      |         Status:  new               
 Priority:  normal      |      Milestone:  Tor: 0.2.3.x-final
Component:  Tor Client  |        Version:  Tor: 0.2.3.7-alpha
 Keywords:              |         Parent:                    
   Points:              |   Actualpoints:                    
------------------------+---------------------------------------------------

Comment(by shamrock):

 The confusion stems from the wording of the error message. For example, I
 am seeing:

 {{{
 Nov 02 23:43:40.000 [warn] Certificate not yet valid: is your system clock
 set incorrectly?
 Nov 02 23:43:40.000 [warn] (certificate lifetime runs from Nov  3 02:15:27
 2011 GMT through Nov  2 02:15:27 2012 GMT. Your time is Nov 02 22:43:40
 2011 GMT.)
 }}}

 The verbiage is confusing, because the user will assume the invalid
 certificate in question is a cert created by the user's system rather than
 the cert of some other system that may have an incorrect time set.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4370#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list