[tor-relays] Recommended reject lines for relays affected by Heartbleed

Robert Smith kittenjuggler at ymail.com
Fri Apr 18 05:34:19 UTC 2014


I want to setup a Tor relay, but know nothing.  Got a minute to read a page of questions?


On Thursday, April 17, 2014 10:27:31 PM, Roger Dingledine <arma at mit.edu> wrote:
 
On Fri, Apr 18, 2014 at 01:40:17AM +0200, Tobias Markus wrote:
>> Tor circuits (a "way" through the Tor network) and thus nodes are
>> entirely chosen by clients based on the consensus given by dirauths
>> (see my earlier post). The ExcludeNodes statement you use basically
>> instructs the Tor *client* part not to use the specified nodes in
>> their circuits.
>> 
>> If you run a relay, you don't have to undertake any action because of
>> Heartbleed except rotating your keys (deleting all keys in
>> DataDir/keys), updating OpenSSL and restarting Tor. (Moritz Bartl sent
>> an E-Mail to tor-relays explaining all this in great detail on
>> 4/8/2014: "Relays vulnerable to OpenSSL bug: Please upgrade")
>
>Correct.
>
>--Roger
>
>
>_______________________________________________
>tor-relays mailing list
>tor-relays at lists.torproject.org
>https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20140417/9562fb33/attachment.html>


More information about the tor-relays mailing list