4 Commits

Author	SHA1	Message	Date
Nick Mathewson	57699de005	Update the copyright year.	2016-02-27 18:48:19 +01:00
Nick Mathewson	01733e2b15	New AuthDirPinKeys option to enable/disable keypinning enforcement ... Implements ticket #17135. We're going to need this one to avoid chaos as everybody figures out how ed25519 keys work.	2015-09-23 11:22:26 -04:00
Nick Mathewson	c5e87e33c7	Allow conflicts to occur in keypinning journal ... When we find a conflict in the keypinning journal, treat the new entry as superseding all old entries that overlap either of its keys. Also add a (not-yet-used) configuration option to disable keypinning enforcement.	2015-09-23 11:02:21 -04:00
Nick Mathewson	eacbe03c71	Key-pinning back-end for directory authorities. ... This module implements a key-pinning mechanism to ensure that it's safe to use RSA keys as identitifers even as we migrate to Ed25519 keys. It remembers, for every Ed25519 key we've seen, what the associated Ed25519 key is. This way, if we see a different Ed25519 key with that RSA key, we'll know that there's a mismatch. We persist these entries to disk using a simple format, where each line has a base64-encoded RSA SHA1 hash, then a base64-endoded Ed25519 key. Empty lines, misformed lines, and lines beginning with a # are ignored. Lines beginning with @ are reserved for future extensions.	2015-05-28 10:41:49 -04:00