[HOME] [DOWNLOAD] [DOCS] [NEWS] [SUPPORT] [TIPS] [ISSUES] [Priority Support]

Change V2 to V3 (Hidden Service) ?


#1

Dears,

i will change from V2 to V3 (with a new gateway). Is there a To Do list? What is to be considered (torrc) ?

Thank you in advance for your help !

ef86


#2

Hi ef86

There is no need to create a new Whonix-gateway. The Tor 3.2.9 client has been pushed to the stable-proposed-update repo, so all you have to do if you have stable-proposed enabled is update Whonix-gateway or sys-whonix (depending on which hypervisor you are using.) If using the stable-release repo, you will have to wait until Tor 3.2.9 client is pushed to stable.

In Whonix-gateway konsole. ( VirtalBox,KVM ) or sys-whonix ( Qubes OS )

sudo apt-get update && sudo apt-get upgrade

You may have to reboot your system for the updates to take affect. When Whonix-gateway (sys-whonix Qubes os ) is running you can check the Tor client version with this command:

tor --version

If the output comes back with the following Tor version or later, you are all set to use v3 Onion addresses

Tor version 0.3.2.9

Related:


#3

Dear 0brand,

my Tor version are 0.3.2.9. Now, what should i do next? And is it possible to use V2 and V3 together?

ef86


#4

Hi,

Once you have 3.2.9 running in Whonix-Gateway (sys-whonix), all you have to do is now use the 56 character onion address in Tor Browser’s url bar to utilize v3 onions.

So, instead of kkkkkkkkkk63ava6.onion for Whonix, cut and paste instead:

http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion

That’s it. All done! :slight_smile:

And yes, you can use both v2 and v3 onions at the same time e.g. two separate tabs using the v2 and v3 Whonix onion addresses will work in the same Tor Browser instance.


#5

Hallo torjunkie.

Thank you for your answering.

ef86


#6

Hi ef86

My problem is how must the torrc look like? Please can you give me a example ? ( V2 + V3 )

There is no difference. No changes to /etc/tor/torrc are necessary ( Unless you are running a hidden service )

Where i can find the new 56 character onion address ?

torjuckie provided you with the new Whonix v3 .onion address. The v2 onion address is www.kkkkkkkkkk63ava6.onion . The new v3 .onion address is http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion


Must i do this workaround - > https://www.whonix.org/wiki/Hidden_Services#Whonix-Gateway

You’re getting yourself confused. The only difference you need to know for web browsing, is the new v3 .onion addresses are 56 characters long, the v2 .onion addresses are 16 characters long. To get the security benefits of v3 just use the 56 character addresses. v3 can only be used for hidden services that support the new v3 protocol.

The information in the link you provided ( https://www.whonix.org/wiki/Hidden_Services#Whonix-Gateway ) is only necessary if you are running Hidden Service web server. Are you?


#7

Hallo Dear 0brand.

There is a huge misunderstanding here. I am running a Hidden Service and will change my Hidden Service from V2 to V3. That’s why the three questions above. Now, i try it again.

Best Regards

ef86


#8

Hi ef86

There is a huge misunderstanding here. I am running a Hidden Service and will change my Hidden Service from V2 to V3.

Aaaaah. I is see now. Sorry for the confusion

My problem is how must the torrc look like? Please can you give me a example ? ( V2 + V3 ) and only (V3)

You just add to your torrc. (both v2 and v3 will be supported )

HiddenServiceVersion 3

This is taken from https://blog.torproject.org/tor-0329-released-we-have-new-stable-series

Legacy (“v2”) onion services will still work for the foreseeable future, and will remain the default until this new codebase gets tested and hardened. Service operators who want to experiment with the new system can use the ‘HiddenServiceVersion 3’ torrc directive along with the regular onion service configuration options. For more information, see our blog post at “https://blog.torproject.org/fall-harvest”. Enjoy!

Where i can find the new 56 character onion address ?

Not sure

Must i do this workaround - > https://www.whonix.org/wiki/Hidden_Services#Whonix-Gateway

Yes, that is to configure sys-whonix for a Hidden Service. Not sure what you mean by a workaround.


#9

Hallo dear 0brand.

First let me say thank you to you for your great support ! No Problem, i must say sorry for the confusion.

My actuall torrc loolks like so

HiddenServiceDir /var/lib/tor/hidden_service/
HiddenServicePort 80 10.152.152.11:80

next i found this

https://trac.torproject.org/projects/tor/wiki/doc/NextGenOnions

SocksPort auto

HiddenServiceDir /home/user/tmp/hsv3
HiddenServiceVersion 3
HiddenServicePort 6667 127.0.0.1:6667

SafeLogging 0
Log notice stdout
Log notice file /home/user/tmp/hs/hs.log
Log info file /home/user/tmp/hs/hsinfo.log


HiddenServiceDir /home/user/tmp/hsv2
HiddenServicePort 6667 127.0.0.1:6667

HiddenServiceDir /home/user/tmp/hsv3
HiddenServiceVersion 3
HiddenServicePort 6668 127.0.0.1:6667

Now i am really confused. So what should i do? Can anyone help me

Best Regards

ef86


#10

Hi ef86

Understand that those torrc configs may not be Qubes Whonix specific. The link to the instructions in my last post are (qubes whonix). --> https://www.whonix.org/wiki/Hidden_Services#Whonix-Gateway

What to do now??

You said you have a functioning v2 Hidden Service Qubes Whonix ? If so, you’re almost there. Take your time, don’t rush this. I know you are anxious to get your v3 onion up and running but if you rush, you will make a mistake (and maybe not realize it). Remember Tor 0.3.2.9 just went stable so there are a lot of people that are just as confused as you are.

Keep in mind that some of your questions are not Whonix specific and can be answered using the Free Support Principal.

https://whonix.org/wiki/Support#Free_Support_Principle

Recommend:

  1. Search for your answer on https://tor.stackexchange.com . If not found, create an account and ask your question.

  2. Ask your question on Tor IRC https://www.torproject.org/about/contact.html.en#irc

  3. Subscribe to tor-onions mailing list. https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-onions/

  4. Subscribe to other Tor mailing lists. https://trac.torproject.org/projects/tor/wiki/doc/emailLists


#11

Agree that our wiki instructions require steps for people who want to host v3 onion services. I have no clue, as I don’t run onion services (like SilkRoad v8 :smile: )

Looking at our instructions (http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/wiki/Hidden_Services#Whonix-Gateway), and those ones ef86 posted, the only relevant difference seems to be the addition of the following line in the torrc at step 2:

HiddenServiceVersion 3

& presumably the v3 onion address is found out in step 4 with:

sudo cat /var/lib/tor/hidden_service/hostname

Have you tried that?

That config should work, as this guy did that for his v3 onion:

https://www.jamieweb.net/blog/onionv3-hidden-service/

In order to set up an Onion v3 Hidden Service, add the following to your torrc:

HiddenServiceDir /desired/path/to/hidden/service/config
HiddenServiceVersion 3
HiddenServicePort


#12

ef86:

HiddenServiceDir /home/user/tmp/hsv3

This might not work by default because of apparmor / systemd seccomp.
Probably easier to stick with default folder.


#13

Dear Patrick.

Thank you for the Info. I have taken the V2 (+ HSV 3) routine and works perfectly.

Problem solved!

Best Regards

ef86


#14

Dear torjunkie.

First let me say thank you so much to you for your support. Yes now it works for me. I have taken the V2 (+ HSV 3) routine and works perfectly.

Problem solved!

Best Regards

ef86


#15

Dear 0brand.

Finally I can breathe again. The problem is solved. Thank you for your excellent support.

Best Regards

ef86