[tor-commits] [tor/release-0.3.0] Changes file for the x509 link certificate case of bug22460

[nickm at torproject.org]

commit 01878fa3095a949575d922da6fc8342eeaad2afb
Author: Nick Mathewson <nickm at torproject.org>
Date:   Thu Jun 1 09:03:13 2017 -0400

    Changes file for the x509 link certificate case of bug22460
---
 changes/bug22460_case2 | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/changes/bug22460_case2 b/changes/bug22460_case2
new file mode 100644
index 0000000..0a11759
--- /dev/null
+++ b/changes/bug22460_case2
@@ -0,0 +1,8 @@
+  o Major bugfixes (relay, link handshake):
+
+    - When performing the v3 link handshake on a TLS connection, report that
+      we have the x509 certificate that we actually used on that connection,
+      even if we have changed certificates since that connection was first
+      opened. Previously, we would claim to have used our most recent x509
+      link certificate, which would sometimes make the link handshake fail.
+      Fixes one case of bug 22460; bugfix on 0.2.3.6-alpha.