Clients no longer download descriptors for relays without ntor

diff --git a/changes/reject-tap b/changes/reject-tap
index 5b79485f9fc8366d4fc0646ac433ca950e4c0d62..77ca63b46e26067c62e00f6086c0707a546ccc17 100644 (file)
--- a/changes/reject-tap
+++ b/changes/reject-tap
@@ -5,4 +5,6 @@
     - Relays make sure their own descriptor has an ntor key.
     - Authorites no longer trust the version a relay claims (if any),
       instead, they check specifically for an ntor key.
+    - Clients avoid downloading a descriptor if the relay version is
+      too old to support ntor.
       Fixes bug 19163; bugfix on 0.2.4.18-rc.

diff --git a/src/or/networkstatus.c b/src/or/networkstatus.c
index 0dfb8afcce6f1f6023b19db12a4a9f9c2773a8e9..61753e5da19494a5e76fa1352f99e9ce1f87567e 100644 (file)
--- a/src/or/networkstatus.c
+++ b/src/or/networkstatus.c
@@ -2272,6 +2272,10 @@ client_would_use_router(const routerstatus_t *rs, time_t now,
     /* We'd drop it immediately for being too old. */
     return 0;
   }
+  if (rs->version_known && !rs->version_supports_extend2_cells) {
+    /* We'd ignore it because it doesn't support ntor. */
+    return 0;
+  }
   return 1;
 }