Check onion keys in microdescriptors, too

diff --git a/changes/bug3207 b/changes/bug3207
new file mode 100644 (file)
index 0000000..65a7dac
--- /dev/null
+++ b/changes/bug3207
@@ -0,0 +1,4 @@
+  o Minor bugfixes:
+    - Require that onion keys have exponent 65537 in microdescriptors too.
+      Fixes part of bug 3207; bugfix on 0.2.2.25-alpha
+

diff --git a/src/or/routerparse.c b/src/or/routerparse.c
index be7a3fe8959257a9ba72148761d63e9f8360de13..57436f75e0a8a7c3d7b59e84f166b1d173598490 100644 (file)
--- a/src/or/routerparse.c
+++ b/src/or/routerparse.c
@@ -4336,6 +4336,11 @@ microdescs_parse_from_string(const char *s, const char *eos,
     }
 
     tok = find_by_keyword(tokens, K_ONION_KEY);
+    if (!crypto_pk_check_key_public_exponent(tok->key)) {
+      log_warn(LD_DIR,
+               "Relay's onion key had invalid exponent.");
+      goto next;
+    }
     md->onion_pkey = tok->key;
     tok->key = NULL;