From f6e07c158f3d161e570e34ab6f4ca75f351df3a6 Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Thu, 14 Nov 2013 09:37:41 -0500 Subject: Make the dir-key-crosscert element required In proposal 157, we added a cross-certification element for directory authority certificates. We implemented it in 0.2.1.9-alpha. All Tor directory authorities now generate it. Here, as planned, make it required, so that we can finally close proposal 157. The biggest change in the code is in the unit test data, where some old hardcoded certs that we made long ago have become no longer valid and now need to be replaced. --- changes/prop157-require | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 changes/prop157-require (limited to 'changes/prop157-require') diff --git a/changes/prop157-require b/changes/prop157-require new file mode 100644 index 000000000..0c35f64d2 --- /dev/null +++ b/changes/prop157-require @@ -0,0 +1,5 @@ + o Minor features: + - Clients now reject any directory authority certificates lacking + a dir-key-crosscert element. These have been included since + 0.2.1.9-alpha, so there's no real reason for them to be optional + any longer. Completes proposal 157. \ No newline at end of file -- cgit v1.2.3