Document key-pinning-journal

Closes 22347
This commit is contained in:
Nick Mathewson 2017-06-16 14:26:21 -04:00
parent 80ad374b84
commit a73d0fe9a8
2 changed files with 9 additions and 0 deletions

2
changes/bug22347 Normal file
View File

@ -0,0 +1,2 @@
o Documentation:
- Add a manpage description for the key-pinning-journal file.

View File

@ -2741,6 +2741,13 @@ __DataDirectory__**/lock**::
directory. If access to this file is locked, data directory is already
in use by Tor.
__DataDirectory__**/key-pinning-journal**::
Used by authorities. A line-based file that records mappings between
RSA1024 identity keys and Ed25519 identity keys. Authorities enforce
these mappings, so that once a relay has picked an Ed25519 key, stealing
or factoring the RSA1024 key will no longer let an attacker impersonate
the relay.
__DataDirectory__**/keys/***::
Only used by servers. Holds identity keys and onion keys.