If you need any additional changes to gossip to help support Tor, just let me know.

I wonder if many relays incidentally block Tor exit nodes simply by virtue of being in a data centre or on a network that does so. It would be interesting to find out.

In any case, on the master branch, gossip now honors your system-native TLS roots by default. This is to help people do TLS to .onion sites by configuring a local root certificate for these sites.  That is to support relays that are on tor.