I'm trying to secure my onion service running on my VPS node. I followed the steps of the official tor guide and this guide. Everything works fine UNTIL I get to the point where I have to modify the torrc file on my local machine.
In the tor guide it says:
On the client side: To access a version 3 onion service with client authorization as a client, make sure you have
ClientOnionAuthDirset in your
torrc. For example, add this line to
Then, in the directory, create an
.auth_privatefile for the onion service corresponding to this key. [...] Then restart tor and you should be able to connect to the onion service address.
However, I am NOT able to restart tor... I added the line
ClientOnionAuthDir /var/lib/tor/onion_auth to the end of the torrc file (is that right or do I have to put it someplace else?).
When I try to restart tor I get the following error:
Job for tor.service failed because the control process exited with error code. See "systemctl status tor.service" and "journalctl -xeu tor.service" for details.
When I take a look at
systemctl status tor.service I get the following:
× tor.service - Anonymizing overlay network for TCP Loaded: loaded (/usr/lib/systemd/system/tor.service; enabled; vendor pres> Active: failed (Result: exit-code) since XXX XXXX-XX-XX XX:XX:XX XXX; 2mi> Process: 67134 ExecStartPre=/usr/bin/tor -f /etc/tor/torrc --verify-config> CPU: 21ms XXXXXXXXXXXXXXXX systemd: tor.service: Scheduled restart job, restart> XXXXXXXXXXXXXXXX systemd: Stopped Anonymizing overlay network for TCP. XXXXXXXXXXXXXXXX systemd: tor.service: Start request repeated too qui> XXXXXXXXXXXXXXXX systemd: tor.service: Failed with result 'exit-code'. XXXXXXXXXXXXXXXX systemd: Failed to start Anonymizing overlay network>
When I remodify the torrc and remove the
ClientOnionAuthDir option and restart tor, it's running fine.
Can anybody help me out here? What do I have to do differently concerning the
Additional information: I realized, that I have two .onion addresses: one in the
/var/lib/tor/USER/hostname file and I get displayed another one when I run the
getnetworkinfo command. Is this how it should be?
THANKS IN ADVANCE!