Commit 09ed8a5d authored by Nick Mathewson's avatar Nick Mathewson 🐚
Browse files

Tweak changes file and comment dates.

parent 46cf63bb

changes/bug11464_023

+1 −1
Original line number Diff line number Diff line 
  o Major features (security):

    - Block every authority signing key that was used on an authority

    - Block authority signing keys that were used on an authorities

      vulnerable to the "heartbleed" bug in openssl (CVE-2014-0160).

      (We don't have any evidence that these keys _were_ compromised;

      we're doing this to be prudent.) Resolves ticket 11464.

src/or/routerlist.c

+2 −2
Original line number Diff line number Diff line
@@ -460,9 +460,9 @@ authority_cert_dl_failed(const char *id_digest, int status) 


static const char *BAD_SIGNING_KEYS[] = {

  "09CD84F751FD6E955E0F8ADB497D5401470D697E", // Expires 2015-01-11 16:26:31

// dizum still needs to rotate as of 2014-04-04

// dizum still needs to rotate as of 2014-04-14

//"0E7E9C07F0969D0468AD741E172A6109DC289F3C", // Expires 2014-08-12 10:18:26

// dannenberg still needs to rotate as of 2014-04-04

// dannenberg still needs to rotate as of 2014-04-14

//"57B85409891D3FB32137F642FDEDF8B7F8CDFDCD", // Expires 2015-02-11 17:19:09

  "87326329007AF781F587AF5B594E540B2B6C7630", // Expires 2014-07-17 11:10:09

  "98CC82342DE8D298CF99D3F1A396475901E0D38E", // Expires 2014-11-10 13:18:56