Re: [tor-bugs] #15532 [Applications/Tor Browser]: Tor Browser 4.5 displays signature validation error during update

[Tor Bug Tracker & Wiki]

#15532: Tor Browser 4.5 displays signature validation error during update
-+-
 Reporter:  mikeperry|  Owner:  tbb-
 |  team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-firefox-patch, ff38-esr, tbb-|  Actual Points:
  updater|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * keywords:  tbb-firefox-patch, ff38-esr => tbb-firefox-patch, ff38-esr,
 tbb-updater


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #15532 [Applications/Tor Browser]: Tor Browser 4.5 displays signature validation error during update

[Tor Bug Tracker & Wiki]

#15532: Tor Browser 4.5 displays signature validation error during update
-+--
 Reporter:  mikeperry|  Owner:  tbb-team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-firefox-patch, ff38-esr  |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+--
Changes (by gk):

 * cc: Digitalcourage (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #15532 [Applications/Tor Browser]: Tor Browser 4.5 displays signature validation error during update

[Tor Bug Tracker & Wiki]

#15532: Tor Browser 4.5 displays signature validation error during update
-+--
 Reporter:  mikeperry|  Owner:  tbb-team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-firefox-patch, ff38-esr  |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+--

Comment (by gk):

 As I said on IRC you don't want to have just one key baked in. Think about
 losing the key/having it compromised. How are you updating your users? You
 can't sign the MAR files with the new key you are about to bake in. Even
 if that would still work (because you just want to rotate to a new key)
 every user would need to update to that particular version. Let's assume
 you need to get a chemspill release out the week afterwards if you used
 your new key to sign the MAR files a considerable amount of users will
 have a broken update experience as they won't have updated to the version
 with the new signing keys baked in yet.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #15532 [Applications/Tor Browser]: Tor Browser 4.5 displays signature validation error during update

[Tor Bug Tracker & Wiki]

#15532: Tor Browser 4.5 displays signature validation error during update
-+--
 Reporter:  mikeperry|  Owner:  tbb-team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-firefox-patch, ff38-esr  |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+--

Comment (by sukhbir):

 I had the same error message with Tor Messenger's updater and I fixed it
 by copying the DER to both release_primary and release_secondary. (I
 actually did think there was an error in verifying the update and spent
 quite a while trying to figure out why.)

 IMO this would be the easiest way to fix it unless I am missing something
 else.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #15532 [Applications/Tor Browser]: Tor Browser 4.5 displays signature validation error during update

[Tor Bug Tracker & Wiki]

#15532: Tor Browser 4.5 displays signature validation error during update
-+--
 Reporter:  mikeperry|  Owner:  tbb-team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-firefox-patch, ff38-esr  |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+--
Changes (by mcs):

 * cc: sukhbir (added)
 * severity:   => Normal


Comment:

 This will also affect Tor Messenger's updater.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs