bug22460_case1 875 B

12345678910111213141516
  1. o Major bugfixes (relays, key management):
  2. - Regenerate link and authentication certificates whenever the key that
  3. signs them changes; also, regenerate link certificates whenever the
  4. signed key changes. Previously, these processes were only weakly
  5. coupled, and we relays could (for minutes to hours) wind up with an
  6. inconsistent set of keys and certificates, which other relays
  7. would not accept. Fixes two cases of bug 22460; bugfix on
  8. 0.3.0.1-alpha.
  9. - When sending an Ed25519 signing->link certificate in a CERTS cell,
  10. send the certificate that matches the x509 certificate that we used
  11. on the TLS connection. Previously, there was a race condition if
  12. the TLS context rotated after we began the TLS handshake but
  13. before we sent the CERTS cell. Fixes a case of bug 22460; bugfix
  14. on 0.3.0.1-alpha.