commit 8506dcdeb70279fd9c40e0d7b39d8a6dfed83085
parent 0d9dc13e087c01550e5d237f298d8a5de5994df0
Author: David Goulet <dgoulet@torproject.org>
Date: Tue, 4 Dec 2018 12:55:02 -0500
Merge branch 'maint-0.3.5'
Diffstat:
2 files changed, 8 insertions(+), 0 deletions(-)
diff --git a/changes/ticket28275 b/changes/ticket28275
@@ -0,0 +1,4 @@
+ o Documentation (hidden service v3, man page):
+ - Note in the man page that the only real way to fully revoke an onion
+ service v3 client authorization is by restarting the tor process. Closes
+ ticket 28275.
diff --git a/doc/tor.1.txt b/doc/tor.1.txt
@@ -2981,6 +2981,10 @@ Note that once you've configured client authorization, anyone else with the
address won't be able to access it from this point on. If no authorization is
configured, the service will be accessible to anyone with the onion address.
+Revoking a client can be done by removing their ".auth" file, however the
+revocation will be in effect only after the tor process gets restarted even if
+a SIGHUP takes place.
+
See the Appendix G in the rend-spec-v3.txt file of
https://spec.torproject.org/[torspec] for more information.