Re: Fingerprint is marked rejected

[Roger Dingledine <arma@xxxxxxx>]

On Thu, May 29, 2008 at 02:03:14PM +0300, M wrote:
> My tor-node was affected by the Debian ssl-bug. I followed the
> instructions at
> http://archives.seul.org/or/announce/May-2008/msg00000.html and deleted
> (moved them to other directory) /var/lib/tor/keys/secret_* and restared
> tor-server.
> 
> After that following lines were appearing in the logs:
> 
> May 29 13:08:11.103 [warn] http status 400 ("Fingerprint is marked
> rejected") response from dirserver '86.59.21.38:80'. Please correct.
> 
> May 29 13:08:11.277 [warn] http status 400 ("Fingerprint is marked
> rejected") response from dirserver '88.198.7.215:80'. Please correct.
> 
> I tried to google the error but all I got was some dirservers sourcecode
> and pathches that contained the following error.
> 
> Any ideas to fix this?

It means that you are still using a weak key.

Perhaps you didn't actually upgrade your openssl?

Or perhaps you have more than one datadirectory, and you removed keys
from one but your Tor is using the other?

--Roger