- Clients now reject any directory authority certificates lacking
a dir-key-crosscert element. These have been included since
0.2.1.9-alpha, so there's no real reason for them to be optional
- any longer. Completes proposal 157.
\ No newline at end of file
+ any longer. Completes proposal 157.
}
tok = find_by_keyword(tokens, K_DIR_KEY_CROSSCERT);
- /* XXXX Once all authorities generate cross-certified certificates,
- * make this field mandatory. */
if (check_signature_token(cert->cache_info.identity_digest,
DIGEST_LEN,
tok,