[tor-bugs] #12382 [Tor bundles/installation]: Changed upstream langpack xpis prevent reproducibility of 3.6.2

[Tor Bug Tracker & Wiki]

#12382: Changed upstream langpack xpis prevent reproducibility of 3.6.2
--------------------------------------+-----------------------
 Reporter:  dcf                       |          Owner:  erinn
     Type:  defect                    |         Status:  new
 Priority:  normal                    |      Milestone:
Component:  Tor bundles/installation  |        Version:
 Keywords:  tbb-3.6                   |  Actual Points:
Parent ID:                            |         Points:
--------------------------------------+-----------------------
 Mozilla tagged an esr24 release after the release of TBB 3.6.2. In doing
 so, they rezipped the langpack xpis. Now the langpacks used to build 3.6.2
 are apparently lost.

 TBB 3.6.2 was built on or before June 9:
 https://lists.torproject.org/pipermail/tor-qa/2014-June/000415.html
 Mozilla committed something on June 10: https://github.com/mozilla/gecko-
 dev/commits/esr24
 Now, the modification date of the langpacks is June 10:
 https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/24.6.0esr/linux-i686/xpi/

 I noticed this after rebuilding the
 [[comment:19:ticket:10935|3.6.2-meek-1]] bundles. I have one build from
 June 9, and one from June 12. The en-US files match, but all the other
 languages do not match. Inside a pair of non-matching, files, the only
 file that differs is
 Data/Browser/profile.default/extensions/langpack-''lang''‍@firefox.mozilla.org.xpi.
 The two xpi files have the same contents when unzipped, but are not the
 same file and have different embedded timestamps.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12382>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online