[tor-bugs] #33148 [Core Tor/Tor]: hs-v3: Clean cached descriptor(s) on ONION_CLIENT_AUTH_REMOVE

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Feb 4 13:58:39 UTC 2020


#33148: hs-v3: Clean cached descriptor(s) on ONION_CLIENT_AUTH_REMOVE
--------------------------------+--------------------------------
     Reporter:  dgoulet         |      Owner:  dgoulet
         Type:  defect          |     Status:  assigned
     Priority:  Medium          |  Milestone:  Tor: 0.4.3.x-final
    Component:  Core Tor/Tor    |    Version:
     Severity:  Normal          |   Keywords:  043-must
Actual Points:                  |  Parent ID:
       Points:  0.1             |   Reviewer:  asn
      Sponsor:  Sponsor27-must  |
--------------------------------+--------------------------------
 When a client authorization is removed with the control command
 `ONION_CLIENT_AUTH_REMOVE`, we should also remove the associated
 descriptor from the cache else the .onion is still accessible even though
 the credentials have been removed.

 Found by mcs/brade/acat during testing:
 https://trac.torproject.org/projects/tor/ticket/19757#comment:31

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33148>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list