[tor-bugs] #30509 [Circumvention/Snowflake]: snowflake-broker certificate fetch failing after update

[Tor Bug Tracker & Wiki]

#30509: snowflake-broker certificate fetch failing after update
-------------------------------------+------------------------
 Reporter:  cohosh                   |          Owner:  (none)
     Type:  defect                   |         Status:  new
 Priority:  Immediate                |      Milestone:
Component:  Circumvention/Snowflake  |        Version:
 Severity:  Normal                   |     Resolution:
 Keywords:                           |  Actual Points:
Parent ID:                           |         Points:
 Reviewer:                           |        Sponsor:
-------------------------------------+------------------------

Comment (by dcf):

 I've put a certificate and key in
 {{{
 /home/snowflake-broker/snowflake-broker.pem
 /home/snowflake-broker/snowflake-broker.key
 }}}

 The reference I gave for `--cert` and `--key` options in comment:4 is more
 complicated than it needs to be, because it has some extra code to allow
 reloading the files at runtime. The minimal solution is easier than that.
 I think you just have to provide the filenames
 [https://gitweb.torproject.org/pluggable-
 transports/snowflake.git/tree/broker/broker.go?id=d865b7c252d3a7efd789a84757fc2635b1964921#n276
 here]:
 {{{
 err = server.ListenAndServeTLS("", "")
 }}}
 You may also have to unset the `GetCertificate` callback in the
 `tls.Config`, I'm not sure.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30509#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online