Unverified Commit a76d528b authored by teor (Tim Wilson-Brown)'s avatar teor (Tim Wilson-Brown)
Browse files

Clients no longer download descriptors for relays without ntor

parent 24e8bb2d

changes/reject-tap

+2 −0
Original line number Diff line number Diff line
@@ -5,4 +5,6 @@ 
    - Relays make sure their own descriptor has an ntor key.

    - Authorites no longer trust the version a relay claims (if any),

      instead, they check specifically for an ntor key.

    - Clients avoid downloading a descriptor if the relay version is

      too old to support ntor.

      Fixes bug 19163; bugfix on 0.2.4.18-rc.

src/or/networkstatus.c

+4 −0
Original line number Diff line number Diff line
@@ -2272,6 +2272,10 @@ client_would_use_router(const routerstatus_t *rs, time_t now, 
    /* We'd drop it immediately for being too old. */

    return 0;

  }

  if (rs->version_known && !rs->version_supports_extend2_cells) {

    /* We'd ignore it because it doesn't support ntor. */

    return 0;

  }

  return 1;

}