[tor-commits] [torspec] branch main updated: Describe behavior on authority certs from the past or future.

gitolite role git at cupani.torproject.org
Tue Jul 12 16:55:35 UTC 2022


This is an automated email from the git hooks/post-receive script.

nickm pushed a commit to branch main
in repository torspec.

The following commit(s) were added to refs/heads/main by this push:
     new 831639e  Describe behavior on authority certs from the past or future.
     new 833d6b2  Merge remote-tracking branch 'tor-gitlab/mr/78'
831639e is described below

commit 831639e080f7b8fbe75267960bc83fa9439e0819
Author: Nick Mathewson <nickm at torproject.org>
AuthorDate: Fri Jul 8 11:11:55 2022 -0400

    Describe behavior on authority certs from the past or future.
---
 dir-spec.txt | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/dir-spec.txt b/dir-spec.txt
index 0de986f..9ae9368 100644
--- a/dir-spec.txt
+++ b/dir-spec.txt
@@ -1547,12 +1547,18 @@ Table of Contents
         The time (in UTC) when this document and corresponding key were
         last generated.
 
+        Implementations SHOULD reject certificates that are published
+        too far in the future, though they MAY tolerate some clock skew.
+
     "dir-key-expires" YYYY-MM-DD HH:MM:SS NL
 
         [Exactly once.]
 
         A time (in UTC) after which this key is no longer valid.
 
+        Implementations SHOULD reject expired certificates, though they
+        MAY tolerate some clock skew.
+
     "dir-signing-key" NL a key in PEM format
 
         [Exactly once.]

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the tor-commits mailing list