Re: [tor-relays] Running an exit? Please secure your DNS with DNSCrypt+Unbound

2016-01-04 Thread Eran Sandler
Found this post about compiling and running DnsCrypt which is rather easy. https://gist.github.com/kafene/9699074 Just need to grab the newer libsodium and dnscrypt versions. It also includes an init script. Eran On Sun, Dec 27, 2015 at 9:46 AM Jesse V wrote: > On 12/26/2015 10:33 PM, 12xBTM

Re: [tor-relays] Tor not reading medium-term signing key.

2016-01-04 Thread s7r
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 1/5/2016 12:13 AM, 12xBTM wrote: > Now I'm getting permission denied, still out-dated key, and > missing master_id_secret_key errors, which are unsurprisingly > fatal. > > Jan 04 22:41:33.000 [warn] Could not open > "/var/lib/tor/keys/ed25519_s

Re: [tor-relays] Tor not reading medium-term signing key.

2016-01-04 Thread 12xBTM
Now I'm getting permission denied, still out-dated key, and missing master_id_secret_key errors, which are unsurprisingly fatal. Jan 04 22:41:33.000 [warn] Could not open "/var/lib/tor/keys/ed25519_signing_secret_key": Permission denied Jan 04 22:41:33.000 [notice] It looks like I need to generate

Re: [tor-relays] Tor not reading medium-term signing key.

2016-01-04 Thread s7r
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello, Let's recap (hope I am not missing something): a) you make sure master_id_secret_key is available in /home/[user]/.tor/keys b) you run # tor --keygen and provide the correct passphrase c) you *move* the newly generated ed25519_signing_secret

[tor-relays] Tor not reading medium-term signing key.

2016-01-04 Thread 12xBTM
So my medium-term signing key expires tomorrow, and Tor notices.log is all up and down about: Jan 04 19:22:46.000 [notice] It looks like I should try to generate and sign a new medium-term signing key, because the one I have is going to expire soon. But OfflineMasterKey is set, so I won't try to l