Tunnels: Do not select ElG routers for tunnels

This commit is contained in:
zzz
2024-08-09 09:42:18 -04:00
parent 46e429cd49
commit a8dbc29dcf
@@ -380,8 +380,11 @@ public abstract class TunnelPeerSelector extends ConnectChecker {
RouterIdentity ident = peer.getIdentity();
if (ident.getSigningPublicKey().getType() == SigType.DSA_SHA1)
return true;
// Shouldn't be any ElG routers MIN_VERSION or higher, but just to make sure,
// and prevent large build messages.
// Restricting to 25519 may also allow us to remove some of the ElG tunnel build code.
EncType type = ident.getPublicKey().getType();
if (!LeaseSetKeys.SET_BOTH.contains(type))
if (type != EncType.ECIES_X25519)
return true;
// otherwise, it contains flags we aren't trying to focus on,