diff options
| author | Nick Mathewson <nickm@torproject.org> | 2011-11-15 11:56:21 -0500 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2011-11-15 15:57:46 -0500 |
| commit | 69dd993a922fcc65e931d816e1a3c916e98133f2 (patch) | |
| tree | 9e9164074c7c867898fdf8ed07302e149a7901f9 /src/or/command.c | |
| parent | 87622e4c7e1a3b5c80e67141de7947d0304b6f31 (diff) | |
| download | tor-69dd993a922fcc65e931d816e1a3c916e98133f2.tar tor-69dd993a922fcc65e931d816e1a3c916e98133f2.tar.gz | |
Make certificate skew into a protocol warning
Diffstat (limited to 'src/or/command.c')
| -rw-r--r-- | src/or/command.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/src/or/command.c b/src/or/command.c index 5d0ebaa68..a963d4210 100644 --- a/src/or/command.c +++ b/src/or/command.c @@ -991,9 +991,9 @@ command_process_cert_cell(var_cell_t *cell, or_connection_t *conn) if (! tor_tls_cert_matches_key(conn->tls, link_cert)) { ERR("The link certificate didn't match the TLS public key"); } - if (! tor_tls_cert_is_valid(link_cert, id_cert, 0)) + if (! tor_tls_cert_is_valid(LOG_PROTOCOL_WARN, link_cert, id_cert, 0)) ERR("The link certificate was not valid"); - if (! tor_tls_cert_is_valid(id_cert, id_cert, 1)) + if (! tor_tls_cert_is_valid(LOG_PROTOCOL_WARN, id_cert, id_cert, 1)) ERR("The ID certificate was not valid"); conn->handshake_state->authenticated = 1; @@ -1026,9 +1026,9 @@ command_process_cert_cell(var_cell_t *cell, or_connection_t *conn) ERR("The certs we wanted were missing"); /* Remember these certificates so we can check an AUTHENTICATE cell */ - if (! tor_tls_cert_is_valid(auth_cert, id_cert, 1)) + if (! tor_tls_cert_is_valid(LOG_PROTOCOL_WARN, auth_cert, id_cert, 1)) ERR("The authentication certificate was not valid"); - if (! tor_tls_cert_is_valid(id_cert, id_cert, 1)) + if (! tor_tls_cert_is_valid(LOG_PROTOCOL_WARN, id_cert, id_cert, 1)) ERR("The ID certificate was not valid"); log_info(LD_OR, "Got some good certificates from %s:%d: " |