I recently tried updating one of my relays to Tor 0.4.0.1 compiled with NSS (and without OpenSSL) but it failed to start, see the logs below. I wonder if this configuration is supported at all and whether I should try running a brand new relay instead of updating?
Alex
[warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Bootstrapped 15% (handshake_done): Handshake with a relay done [notice] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits [notice] Bootstrapped 90% (ap_handshake_done): Handshake fininshed with a relay to build circuits [notice] Bootstrapped 95% (circuit_create): Establishing a Tor circuit [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [notice] Bootstrapped 100% (done): Done [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha ) [warn] Couldn't send authenticate cell [warn] connection_or_compute_authenticate_cell_body(): Bug: TLS key export failed for unknown reason. (on Tor 0.4.0.1-alpha )
On Mon, Jan 28, 2019 at 9:52 PM Alexander Nasonov alnsn@yandex.ru wrote:
I recently tried updating one of my relays to Tor 0.4.0.1 compiled with NSS (and without OpenSSL) but it failed to start, see the logs below. I wonder if this configuration is supported at all and whether I should try running a brand new relay instead of updating?
Alex
This warning looks like the one I added for the openssl-related bug #28973. But I didn't expect it to happen on NSS! Could somebody please open a ticket here? I can take a look next week, I hope.
On Wed, Jan 30, 2019 at 05:23:40PM +0100, Nick Mathewson wrote:
On Mon, Jan 28, 2019 at 9:52 PM Alexander Nasonov alnsn@yandex.ru wrote:
I recently tried updating one of my relays to Tor 0.4.0.1 compiled with NSS (and without OpenSSL) but it failed to start, see the logs below. I wonder if this configuration is supported at all and whether I should try running a brand new relay instead of updating?
Alex
This warning looks like the one I added for the openssl-related bug #28973. But I didn't expect it to happen on NSS! Could somebody please open a ticket here? I can take a look next week, I hope.
I opened #29241 for this (because I didn't see anyone else open it).
Matthew Finkel wrote:
I opened #29241 for this (because I didn't see anyone else open it).
Thank you! I couldn't submit because trac doesn't accept my password anymore.
I'd like to add that it's only a warning and my new relay seems to work so far:
https://metrics.torproject.org/rs.html#details/839B17C459BCE9FD5178ABD4B2E34...
I'd like to add that it's only a warning and my new relay seems to work so far:
https://metrics.torproject.org/rs.html#details/839B17C459BCE9FD5178ABD4B2E34...
I spoke too soon. It went down shortly after my previous email and it never went back up.
PS See some of you in an hour at FOSDEM's tor relay operators meetup!
On Thu, Jan 31, 2019 at 6:58 PM Alexander Nasonov alnsn@yandex.ru wrote:
Matthew Finkel wrote:
I opened #29241 for this (because I didn't see anyone else open it).
Thank you! I couldn't submit because trac doesn't accept my password anymore.
FYI, I think I finally figured this one out, though it took a lot longer than I had expected. There's a patch linked from ticket 29241 (https://trac.torproject.org/projects/tor/ticket/29241) that works for me.
If all goes well, this fix should go into the next Tor 0.4.0.x release.
best wishes,
tor-relays@lists.torproject.org
-
Alexander Nasonov -
Matthew Finkel -
Nick Mathewson