[tor-bugs] #5595 [Tor Relay]: Some relays tried to refetch maatuska's new certificate repeatedly

[Tor Bug Tracker & Wiki]

#5595: Some relays tried to refetch maatuska's new certificate repeatedly
-----------------------+----------------------------------------------------
 Reporter:  rransom    |          Owner:     
     Type:  defect     |         Status:  new
 Priority:  critical   |      Milestone:     
Component:  Tor Relay  |        Version:     
 Keywords:             |         Parent:     
   Points:             |   Actualpoints:     
-----------------------+----------------------------------------------------

Comment(by rransom):

 Replying to [comment:1 koolfy]:
 > I had 64 of those message on my exit node, and three on my middle node.
 >
 > As rransom explained to me, certificates are fetched, not received (as
 the message might indicate), so both of those nodes did something wrong at
 some point. Might the first one being an exit node be the cause of a
 different behaviour ? (I don't know tor specs well enough to comment on
 that.)

 Yes.  Exit nodes fetch directory information earlier than most relays.

 > Tor version on both my middle and exit nodes is Tor 0.2.3.13-alpha (git-
 e783afd37ecddc1b)

 > Can somebody check on his logs that a similar version of his tor relays
 might have a similar entry ?

 This is not needed -- 64 repeated fetches of the same directory document
 are unacceptable, and must be fixed.

 We would like to know whether this bad behaviour happens in Tor 0.2.2.x,
 though.

 > Both of these nodes had an uptime of 4d21h when it happenned. They were
 launched at less than 10m appart from eachother, so it might very well be
 uptime-related somehow, as the difference in uptime matches closely the
 difference in the time at which those messages began.

 The relays' uptime is not relevant -- this happened because maatuska
 generated a new directory-signing certificate.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5595#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online