[tor-talk] There is no signature of TBB sources on the torprogect.org (Re: About sources of TBB)

[James Brown]

On 25.03.2012 19:24, James Brown wrote:
> On 24.03.2012 15:43, Sebastian Hahn wrote:
>>
>> On Mar 24, 2012, at 4:29 PM, James Brown wrote:
>>
>>> On 24.03.2012 15:01, James Brown wrote:
>>>> On 24.03.2012 14:57, James Brown wrote:
>>>>> I have got TBB-sources from here:
>>>>> https://www.torproject.org/projects/torbrowser-details.html.en#build
>>>>>
>>>>> But when I try to verify that, I have so strange result:
>>>>>> ~$ gpg --verify tor-browser-2.2.35-8-src.tar.gz.asc tor-browser-2.2.35-8-src.tar.gz
>>>>>> gpg: не найдено данных формата OpenPGP.
>>>>>> gpg: Не могу проверить подпись.
>>>>>> Файл подписи (.sig или .asc) должен быть
>>>>>> первым указан в командной строке.
>>>>>
>>>>> And the next question, that as I can see there are TBB for Linux
>>>>> 2.2.35-9 in repos but 2.2.35-8 in sources, why?
>>>>
>>>> Sorry:
>>>>
>>>>> LANG=C;  gpg --verify tor-browser-2.2.35-8-src.tar.gz.asc tor-browser-2.2.35-8-src.tar.gz
>>>>> gpg: no valid OpenPGP data found.
>>>>> gpg: the signature could not be verified.
>>>>> Please remember that the signature file (.sig or .asc)
>>>>> should be the first file given on the command line.
>>>
>>>
>>> Probably attached file is not a signature:
>>> https://www.torproject.org/dist/torbrowser/tor-browser-2.2.35-8-src.tar.gz.asc
>>
>> Hrm, looks like you're quite right. I've cc'ed our
>> build engineer here to check it out.
>>
>> _______________________________________________
> 
> As can I see there are no changes in that file:
> https://www.torproject.org/dist/torbrowser/tor-browser-2.2.35-8-src.tar.gz.asc


There is no changing there:
https://www.torproject.org/dist/torbrowser/tor-browser-2.2.35-8-src.tar.gz.asc
There is no signature of the tor-browser-2.2.35-8-src.tar.gz
Please, upload it.