Hey Torix,
This is something that seems to come up with offline generated keys, I've no idea what's happening here though.
I suppose keeping an original key for a bridge doesn't matter in the slightest, because the bridges don't generate any consensus. I'm presuming this is one of your bridges that's fallen over.
If it was me, I'd just delete the key folder and start tor again.
Zim
On Mon, 8 Jun 2020 at 20:22, torix@protonmail.com wrote:
Dear LIst,
My bridge, tor version 0.4.2.7 stopped this morning with a bunch of lines like this: "It looks like I should try to generate and sign a new medium-term signing key, because the one I have is going to expire soon. To do that, I'm going to have to try to load the permanent master identity key. If the master identity key was not moved or encrypted with a passphrase, this will be done automatically and no further action is required. Otherwise, provide the necessary data using 'tor --keygen' to do it manually. [warn] We needed to load a secret key from /var/db/tor/keys/ed25519_master_id_secret_key, but i t was encrypted. Try 'tor --keygen' instead, so you can enter the passphrase."
I put it up a month ago, so I assume this is the frst time the key needed to be changed. When I look at the keys directory, it looks the same as my still-running one, put ip 42 days ago. 42day one: /var/db/tor # ll keys total 28 -rw------- 1 _tor _tor 64 Apr 27 01:49 ed25519_master_id_public_key -rw------- 1 _tor _tor 96 Apr 27 01:49 ed25519_master_id_secret_key -rw------- 1 _tor _tor 172 May 26 02:00 ed25519_signing_cert -rw------- 1 _tor _tor 96 May 26 02:00 ed25519_signing_secret_key -rw------- 1 _tor _tor 888 Apr 27 01:49 secret_id_key -rw------- 1 _tor _tor 888 May 25 02:03 secret_onion_key -rw------- 1 _tor _tor 96 May 25 02:03 secret_onion_key_ntor Expired one: /var/log/tor # ll /var/db/tor/keys/ total 28 -rw------- 1 _tor _tor 64 May 9 01:29 ed25519_master_id_public_key -rw------- 1 _tor _tor 227 May 9 01:29 ed25519_master_id_secret_key_encrypted -rw------- 1 _tor _tor 172 May 9 01:29 ed25519_signing_cert -rw------- 1 _tor _tor 96 May 9 01:29 ed25519_signing_secret_key -rw------- 1 _tor _tor 888 May 9 02:09 secret_id_key -rw------- 1 _tor _tor 888 May 30 21:11 secret_onion_key -rw------- 1 _tor _tor 96 May 30 21:11 secret_onion_key_ntor I have never encrypted any tor keys; I just downloaded and installed it. Permissions seem the same on both. I can delete the keys directory and reinstall tor, but that's probably a hammer to kill a gnat. Hope that this has happened many times before and it's something simple.
TIA,
--Torix
Sent with ProtonMail https://protonmail.com Secure Email.
tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays