[tor-commits] [tor/master] Stop accepting 0.2.2 relay uploads for the consensus.

[nickm at torproject.org]

commit a4b447604a914cedc0b85efa6e33eb1feba0443a
Author: Nick Mathewson <nickm at torproject.org>
Date:   Thu Mar 6 09:34:09 2014 -0500

    Stop accepting 0.2.2 relay uploads for the consensus.
    
    Resolves ticket 11149.
---
 changes/require_023 |    6 ++++++
 src/or/dirserv.c    |   11 +++++++----
 2 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/changes/require_023 b/changes/require_023
new file mode 100644
index 0000000..95302e1
--- /dev/null
+++ b/changes/require_023
@@ -0,0 +1,6 @@
+  o Deprecated versions:
+    - Tor 0.2.2.x is no longer supported, and has not been for a while.
+      Directory authorities will stop accepting descriptors from
+      Tor relays running any version of Tor prior to Tor 0.2.3.25.
+      Resolves ticket 11149.
+
diff --git a/src/or/dirserv.c b/src/or/dirserv.c
index 984b47d..7393a80 100644
--- a/src/or/dirserv.c
+++ b/src/or/dirserv.c
@@ -393,13 +393,15 @@ dirserv_get_status_impl(const char *id_digest, const char *nickname,
               strmap_size(fingerprint_list->fp_by_name),
               digestmap_size(fingerprint_list->status_by_digest));
 
-  /* Versions before Tor 0.2.2.35 have known security issues that
-   * make them unsuitable for the current network. */
-  if (platform && !tor_version_as_new_as(platform,"0.2.2.35")) {
+  /* Versions before Tor 0.2.3.25 are too old to support, and aren't
+   * getting any more security fixes. Disable them. */
+  if (platform && !tor_version_as_new_as(platform,"0.2.3.25")) {
     if (msg)
       *msg = "Tor version is insecure or unsupported. Please upgrade!";
     return FP_REJECT;
-  } else if (platform && tor_version_as_new_as(platform,"0.2.3.0-alpha")) {
+  }
+#if 0
+  else if (platform && tor_version_as_new_as(platform,"0.2.3.0-alpha")) {
     /* Versions from 0.2.3-alpha...0.2.3.9-alpha have known security
      * issues that make them unusable for the current network */
     if (!tor_version_as_new_as(platform, "0.2.3.10-alpha")) {
@@ -408,6 +410,7 @@ dirserv_get_status_impl(const char *id_digest, const char *nickname,
       return FP_REJECT;
     }
   }
+#endif
 
   result = dirserv_get_name_status(id_digest, nickname);
   if (result & FP_NAMED) {