[tor-bugs] #33148 [Core Tor/Tor]: hs-v3: Clean cached descriptor(s) on ONION_CLIENT_AUTH_REMOVE
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Feb 4 13:58:39 UTC 2020
#33148: hs-v3: Clean cached descriptor(s) on ONION_CLIENT_AUTH_REMOVE
--------------------------------+--------------------------------
Reporter: dgoulet | Owner: dgoulet
Type: defect | Status: assigned
Priority: Medium | Milestone: Tor: 0.4.3.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Keywords: 043-must
Actual Points: | Parent ID:
Points: 0.1 | Reviewer: asn
Sponsor: Sponsor27-must |
--------------------------------+--------------------------------
When a client authorization is removed with the control command
`ONION_CLIENT_AUTH_REMOVE`, we should also remove the associated
descriptor from the cache else the .onion is still accessible even though
the credentials have been removed.
Found by mcs/brade/acat during testing:
https://trac.torproject.org/projects/tor/ticket/19757#comment:31
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33148>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list