[tor-bugs] #19506 [Core Tor/Tor]: Tool to inspect id signing certs

[Tor Bug Tracker & Wiki]

#19506: Tool to inspect id signing certs
-------------------------------------------------+-------------------------
 Reporter:  weasel                               |          Owner:  rl1987
     Type:  enhancement                          |         Status:
                                                 |  reopened
 Priority:  High                                 |      Milestone:  Tor:
                                                 |  unspecified
Component:  Core Tor/Tor                         |        Version:  Tor:
                                                 |  0.2.8.4-rc
 Severity:  Normal                               |     Resolution:
 Keywords:  ed25519 tor-relay monitor tooling    |  Actual Points:
  admin-tools                                    |
Parent ID:                                       |         Points:  2
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by weasel):

 * status:  closed => reopened
 * resolution:  fixed =>


Comment:

 Having all this functionality in the tor binary is not ideal.

 Also, it doesn't work for me, at least not out of the box.  The problem
 appears to be that it tries to do too many things instead of just tell me
 what I care about .

 {{{
 debian-tor at odyssey:~$ tor --key-expiration
 May 28 16:48:38.933 [notice] Tor 0.3.3.6 (git-c9903102c98cd028) running on
 Linux with Libevent 2.0.21-stable, OpenSSL 1.1.0f, Zlib 1.2.8, Liblzma
 5.2.2, and Libzstd 1.1.2.
 May 28 16:48:38.933 [notice] Tor can't help you if you use it wrong! Learn
 how to be safe at https://www.torproject.org/download/download#warning
 May 28 16:48:38.933 [notice] Read configuration file "/etc/tor/torrc".
 May 28 16:48:38.938 [warn] Skipping obsolete configuration option
 'SocksListenAddress'
 May 28 16:48:38.938 [notice] Based on detected system memory,
 MaxMemInQueues is set to 5974 MB. You can override this by setting
 MaxMemInQueues by hand.
 May 28 16:48:38.939 [warn] You have used DirAuthority or
 AlternateDirAuthority to specify alternate directory authorities in your
 configuration. This is potentially dangerous: it can make you look
 different from all other Tor users, and hurt your anonymity. Even if
 you've specified the same authorities as Tor uses by default, the defaults
 could change in the future. Be sure you know what you're doing.
 May 28 16:48:38.939 [err] No key found in
 "/var/lib/tor/.tor/keys/authority_signing_key"
 May 28 16:48:38.939 [warn] No version 3 directory key found in
 /var/lib/tor/.tor/keys/authority_signing_key
 May 28 16:48:38.939 [err] We're configured as a V3 authority, but we were
 unable to load our v3 authority keys and certificate! Use tor-gencert to
 generate them. Dying.
 No valid argument to --key-expiration found!
 Currently recognised arguments are: 'sign'
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19506#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online