Add option to give guard flag to relays without the CVE-2011-2768 fix
commit4684ced1b3fced0543fa65bf01f75c5d81eaf464
authorRobert Ransom <rransom.8774@gmail.com>
Tue, 25 Oct 2011 19:33:21 +0000 (25 12:33 -0700)
committerSebastian Hahn <sebastian@torproject.org>
Wed, 26 Oct 2011 21:56:47 +0000 (26 23:56 +0200)
treefd515c09cd317e8d3aecce27e95da6b42979d62f
parent00fffbc1a15e2696a89c721d0c94dc333ff419ef
Add option to give guard flag to relays without the CVE-2011-2768 fix

This way, all of the DA operators can upgrade immediately, without nuking
every client's set of entry guards as soon as a majority of them upgrade.

Until enough guards have upgraded, a majority of dirauths should set this
config option so that there are still enough guards in the network. After
a few days pass, all dirauths should use the default.
src/or/config.c
src/or/dirserv.c
src/or/or.h