[tor-bugs] #22460 [Core Tor/Tor]: Received a bad CERTS cell: Link certificate does not match TLS certificate

[Tor Bug Tracker & Wiki]

#22460: Received a bad CERTS cell: Link certificate does not match TLS certificate
--------------------------+------------------------------------
 Reporter:  teor          |          Owner:
     Type:  defect        |         Status:  new
 Priority:  Medium        |      Milestone:  Tor: 0.3.1.x-final
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+------------------------------------

Comment (by arma):

 Here is another case, which also looks legit:
 {{{
 May 31 09:40:36.170 [info] channel_tls_process_versions_cell(): Negotiated
 version 4 with 23.252.50.179:9001; Sending cells: CERTS
 May 31 09:40:36.170 [info] Certificate already expired. Either their clock
 is set wrong, or your clock is wrong.
 May 31 09:40:36.170 [info] (certificate lifetime runs from Sep 29 00:00:00
 2015 GMT through Feb 23 00:00:00 2016 GMT. Your time is May 31 13:40:36
 2017 UTC.)
 May 31 09:40:36.170 [info] or_handshake_certs_rsa_ok(): Received a bad
 CERTS cell: The link certificate was not valid
 May 31 09:40:36.170 [info] channel_tls_process_certs_cell(): Received a
 bad CERTS cell from 23.252.50.179:9001: Invalid certificate chain!
 May 31 09:40:36.170 [info] conn_close_if_marked(): Conn (addr
 "23.252.50.179", fd 1639, type OR, state 7) marked, but wants to flush
 1321 bytes. (Marked at src/or/connection_or.c:1319)
 May 31 09:40:36.170 [info] conn_close_if_marked(): We stalled too much
 while trying to write 1321 bytes to address "23.252.50.179".  If this
 happens a lot, either something is wrong with your network connection, or
 something is wrong with theirs. (fd 1639, type OR, state 7, marked at
 src/or/connection_or.c:1319).
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22460#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online