[tor-bugs] #22460 [Core Tor/Tor]: Received a bad CERTS cell: Link certificate does not match TLS certificate

[Tor Bug Tracker & Wiki]

#22460: Received a bad CERTS cell: Link certificate does not match TLS certificate
--------------------------+------------------------------------
 Reporter:  teor          |          Owner:
     Type:  defect        |         Status:  new
 Priority:  Medium        |      Milestone:  Tor: 0.3.1.x-final
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:                |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+------------------------------------

Comment (by arma):

 And yet another case. Man, there are a lot of ways we can be upset with
 the CERTS cell we get.
 {{{
 May 31 10:33:36.957 [info] channel_tls_process_versions_cell(): Negotiated
 version 4 with 2.86.150.234:41648; Sending cells: CERTS
 May 31 10:33:36.957 [info] or_handshake_certs_ed25519_ok(): Received a bad
 CERTS cell: At least one Ed25519 certificate was badly signed
 May 31 10:33:36.957 [info] channel_tls_process_certs_cell(): Received a
 bad CERTS cell from 2.86.150.234:41648: Invalid certificate chain!
 May 31 10:33:36.957 [info] conn_close_if_marked(): Conn (addr
 "2.86.150.234", fd 8039, type OR, state 7) marked, but wants to flush 1321
 bytes. (Marked at src/or/connection_or.c:1319)
 May 31 10:33:36.957 [info] conn_close_if_marked(): We stalled too much
 while trying to write 1321 bytes to address "2.86.150.234".  If this
 happens a lot, either something is wrong with your network connection, or
 something is wrong with theirs. (fd 8039, type OR, state 7, marked at
 src/or/connection_or.c:1319).
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22460#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online