[tor-bugs] #31292 [Core Tor/Tor]: please sign Tor releases with an OpenPGP tool that includes Issuer Fingerprint subpackets

[Tor Bug Tracker & Wiki]

#31292: please sign Tor releases with an OpenPGP tool that includes Issuer
Fingerprint subpackets
--------------------------+------------------------------------
 Reporter:  dkg           |          Owner:  (none)
     Type:  defect        |         Status:  new
 Priority:  Medium        |      Milestone:  Tor: 0.4.2.x-final
Component:  Core Tor/Tor  |        Version:
 Severity:  Normal        |     Resolution:
 Keywords:  release       |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+------------------------------------

Comment (by nickm):

 I've tried to do this for the 0.4.1.5 release.  Apparently on Fedora
 (where I sign things), "gpg" is gpg v1, and I need to say "gpg2" to get a
 modern version.  I've added some shell aliases and set up my git
 environment.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31292#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online