[tor-talk] About sources of TBB

[Sebastian Hahn]

On Mar 24, 2012, at 4:29 PM, James Brown wrote:

> On 24.03.2012 15:01, James Brown wrote:
>> On 24.03.2012 14:57, James Brown wrote:
>>> I have got TBB-sources from here:
>>> https://www.torproject.org/projects/torbrowser-details.html.en#build
>>> 
>>> But when I try to verify that, I have so strange result:
>>>> ~$ gpg --verify tor-browser-2.2.35-8-src.tar.gz.asc tor-browser-2.2.35-8-src.tar.gz
>>>> gpg: не найдено данных формата OpenPGP.
>>>> gpg: Не могу проверить подпись.
>>>> Файл подписи (.sig или .asc) должен быть
>>>> первым указан в командной строке.
>>> 
>>> And the next question, that as I can see there are TBB for Linux
>>> 2.2.35-9 in repos but 2.2.35-8 in sources, why?
>> 
>> Sorry:
>> 
>>> LANG=C;  gpg --verify tor-browser-2.2.35-8-src.tar.gz.asc tor-browser-2.2.35-8-src.tar.gz
>>> gpg: no valid OpenPGP data found.
>>> gpg: the signature could not be verified.
>>> Please remember that the signature file (.sig or .asc)
>>> should be the first file given on the command line.
> 
> 
> Probably attached file is not a signature:
> https://www.torproject.org/dist/torbrowser/tor-browser-2.2.35-8-src.tar.gz.asc

Hrm, looks like you're quite right. I've cc'ed our
build engineer here to check it out.