[tor-commits] [torspec/master] Mark the dir-key-crosscert element as required.

[nickm at torproject.org]

commit 047f6dd916b906b6f5b7c1278c9fbc056e7fbf82
Author: Nick Mathewson <nickm at torproject.org>
Date:   Thu Nov 14 09:39:29 2013 -0500

    Mark the dir-key-crosscert element as required.
    
    This closes proposal 157.
---
 dir-spec.txt                             |    9 ++-------
 proposals/157-specific-cert-download.txt |    2 +-
 2 files changed, 3 insertions(+), 8 deletions(-)

diff --git a/dir-spec.txt b/dir-spec.txt
index d1d1994..39d880e 100644
--- a/dir-spec.txt
+++ b/dir-spec.txt
@@ -1076,11 +1076,7 @@
 
     "dir-key-crosscert" NL CrossSignature NL
 
-        [At most once.]
-
-        NOTE: Authorities MUST include this field in all newly generated
-        certificates.  A future version of this specification will make
-        the field required.
+        [Exactly once.]
 
         CrossSignature is a signature, made using the certificate's signing
         key, of the digest of the PKCS1-padded hash of the certificate's
@@ -1089,8 +1085,7 @@
         SIGNATURE---- and -----END ID SIGNATURE----- tags.  Implementations
         MUST allow the "ID " portion to be omitted, however.
 
-        When encountering a certificate with a dir-key-crosscert entry,
-        implementations MUST verify that the signature is a correct signature
+        Implementations MUST verify that the signature is a correct signature
         of the hash of the identity key using the signing key.
 
     "dir-key-certification" NL Signature NL
diff --git a/proposals/157-specific-cert-download.txt b/proposals/157-specific-cert-download.txt
index cf29dd9..e0ef0e8 100644
--- a/proposals/157-specific-cert-download.txt
+++ b/proposals/157-specific-cert-download.txt
@@ -2,7 +2,7 @@ Filename: 157-specific-cert-download.txt
 Title: Make certificate downloads specific
 Author: Nick Mathewson
 Created: 2-Dec-2008
-Status: Accepted
+Status: Closed
 Target: 0.2.4.x
 
 History: