Re: [tor-relays] Issues with offline master key functionality

2016-02-05 Thread Riccardo Mori
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 04/02/2016 00:00, nusenu wrote: >> Two months ago I decided to try the new ed25519 key introduced in >> Tor 2.7 with OfflineMasterKey > > great to see more people using/testing this feature. > > >> That raises two questions to me: - why does To

Re: [tor-relays] Issues with offline master key functionality

2016-02-03 Thread nusenu
> Why do you use such a value for SigningKeyLifetime when the default is > 30 days already? You can just skip --signingkeylifetime and have > medium term signing key valid for 30 days (1 month). I am not totally > sure *1 months* is a valid argument here (could be, not sure) --signingkeylifetime

Re: [tor-relays] Issues with offline master key functionality

2016-02-03 Thread nusenu
> Two months ago I decided to try the new ed25519 key introduced in Tor > 2.7 with OfflineMasterKey great to see more people using/testing this feature. > That raises two questions to me: > - why does Tor think the new keys are already expired? Did you manually verify the expire dates of the

Re: [tor-relays] Issues with offline master key functionality

2016-02-03 Thread Riccardo Mori
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Thank you s7r for helping! On 03/02/2016 17:53, s7r wrote: > Hello - see inline > > On 2/3/2016 3:49 PM, Riccardo Mori wrote: >> Hi everyone, > >> Two months ago I decided to try the new ed25519 key introduced >> in Tor 2.7 with OfflineMasterKey s

Re: [tor-relays] Issues with offline master key functionality

2016-02-03 Thread s7r
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello - see inline On 2/3/2016 3:49 PM, Riccardo Mori wrote: > Hi everyone, > > Two months ago I decided to try the new ed25519 key introduced in > Tor 2.7 with OfflineMasterKey set so I can keep the master key in > a different place and just uploa

[tor-relays] Issues with offline master key functionality

2016-02-03 Thread Riccardo Mori
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi everyone, Two months ago I decided to try the new ed25519 key introduced in Tor 2.7 with OfflineMasterKey set so I can keep the master key in a different place and just upload the medium-term signing key every month. Last month everything went ok