[tor-bugs] #22466 [Core Tor/Tor]: "Crosscert is expired" warnings: RSA->Ed25519 identity crosscertifice apparently made in 1970?

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Jun 1 13:54:53 UTC 2017


#22466: "Crosscert is expired" warnings: RSA->Ed25519 identity crosscertifice
apparently made in 1970?
-------------------------------------------------+-------------------------
 Reporter:  nickm                                |          Owner:
     Type:  defect                               |         Status:  new
 Priority:  Medium                               |      Milestone:  Tor:
                                                 |  0.3.1.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  030-backport tor-relay certificate   |  Actual Points:
  expired 1970                                   |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by nickm):

 Another "fix" we could do here is to check whether the crosscert is
 expired when we're making  new keys.  We don't currently do that, since
 the cert is regenerated on startup and lives for 10 years ... but we could
 afford to shorten the lifetime if we make that change.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22466#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list