[tor-bugs] #18177 [DocTor]: Check Fallback Directory IPv4 and IPv6 addresses using DocTor

[Tor Bug Tracker & Wiki]

#18177: Check Fallback Directory IPv4 and IPv6 addresses using DocTor
-------------------------+--------------------------
 Reporter:  teor         |          Owner:  atagar
     Type:  enhancement  |         Status:  reopened
 Priority:  Medium       |      Milestone:
Component:  DocTor       |        Version:
 Severity:  Normal       |     Resolution:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
 Reviewer:               |        Sponsor:
-------------------------+--------------------------

Comment (by teor):

 Replying to [comment:17 atagar]:
 > > The fingerprint.
 > > I guess stem can't check the fingerprint unless it speaks the ORPort
 protocol?
 >
 > What value are you hoping to get from this? Would checking that the
 fingerprint matches what's in the consensus do what you're after? Stem
 validates signatures of a few descriptor types but I don't think that's
 really what you're after here.

 Clients will refuse to connect to a fallback if it's changed its
 fingerprint from the fingerprint in the hard-coded list.

 So yes, comparing the fingerprint in the fallback list to the current one
 for that IPv4:ORPort and IPv6:IPv6ORPort (if present) would discover this
 kind of failure. (And the IPv6 check wouldn't need any IPv6 connectivity!)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18177#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online