[tor-bugs] #22460 [Core Tor/Tor]: Received a bad CERTS cell: Link certificate does not match TLS certificate

[Tor Bug Tracker & Wiki]

#22460: Received a bad CERTS cell: Link certificate does not match TLS certificate
--------------------------+------------------------------------
 Reporter:  teor          |          Owner:
     Type:  defect        |         Status:  new
 Priority:  Medium        |      Milestone:  Tor: 0.3.1.x-final
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+------------------------------------

Comment (by arma):

 Confirmed, I get that warning on moria1. Here's some more context:
 {{{
 May 18 13:33:47.231 [info] channel_tls_process_versions_cell(): Negotiated
 version 4 with 171.25.193.9:80; Sending cells: CERTS
 May 18 13:33:47.231 [warn] Received a bad CERTS cell: Link certificate
 does not match TLS certificate
 May 18 13:33:47.232 [info] channel_tls_process_certs_cell(): Received a
 bad CERTS cell from 171.25.193.9:80: Invalid certificate chain!
 May 18 13:33:47.232 [info] conn_close_if_marked(): Conn (addr
 "171.25.193.9", fd 6541, type OR, state 7) marked, but wants to flush 1322
 bytes. (Marked at src/or/connection_or.c:1319)
 May 18 13:33:47.232 [info] conn_close_if_marked(): We stalled too much
 while trying to write 1322 bytes to address "171.25.193.9".  If this
 happens a lot, either something is wrong with your network connection, or
 something is wrong with theirs. (fd 6541, type OR, state 7, marked at
 src/or/connection_or.c:1319).
 }}}

 Note that it's warn because I was making a connection to maatuska (an
 authority).

 But now that you mention it, I have thousands of those lines at info-level
 log.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22460#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online