Re: [tor-bugs] #18925 [Webpages/Website]: Add instructions for removing the code signing parts of OS X bundles and MAR files

[Tor Bug Tracker & Wiki]

#18925: Add instructions for removing the code signing parts of OS X bundles and
MAR files
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  enhancement  | Status:
 |  needs_information
 Priority:  Medium   |  Milestone:
Component:  Webpages/Website |Version:
 Severity:  Normal   | Resolution:
 Keywords:  website-content, GeorgKoppen201806,  |  Actual Points:
  TorBrowserTeam201806   |
Parent ID:  #17413   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by traumschule):

 I cannot test it right now, but i used
 [http://blog.smalleycreative.com/administration/automating-osx-part-one/
 this guide] some time ago for testing an ansible role with travis. Here's
 my draft:
 {{{
 set -e
 # Tests the checksum of our generated mar files on macOS

 # settings
 tbbversion=8.0a10
 lang=en-US
 distdomain=https://dist.torproject.org
 #distdomain=http://rqef5a5mebgq46y5
 dmgurl="$domain/torbrowser/$tbbversion/TorBrowser-$tbbversion-
 osx64_$lang.dmg"
 martoolsurl="http://rqef5a5mebgq46y5.onion/torbrowser/$tbbversion/mar-
 tools-mac64.zip"
 sumsurl=$domain/torbrowser/$tbbversion/sha256sums-signed-build.txt

 cache="$(pwd)/cache" # Assuming this is run by a CI and it supports it,
 cache be mounted before.
 dmgfile="$cache/$(basename $dmgurl)"
 mountpath="/Volumes/$dmgfile" # TODO may differ
 signedmarfile="signed-mar-file.mar"
 unsignedmarfile="tor-browser-osx64-$tbbversion_$lang.mar"

 # preparation
 [ -n "$cache" ] && [ -d "$cache" ] || mkdir "$cache"
 cd $cache
 wget $martoolsurl
 wget $dmgurl
 wget $sumsurl
 wget $sumsurl.asc
 sumfile="$cache/$(basename $sumsurl)"

 gpg --recv 0x4E2C6E8793298290
 if [ ! $(gpg --verify $sumfile.asc|grep "Good signature"|wc -l) -gt 0 ]
 then echo "Signature verification failed: $sumfile"; exit 1; fi

 martoolszip="$(basename $martoolsurl)"
 [ -n "martoolszip" ] || exit 1
 [ -f "martoolszip" ] || exit 1
 unzip "$martoolszip" # should extract to mar-tools
 [ -f mar-tools/marsign ] || exit 1
 marpath="$cache/mar-tools"

 hdiutil mount -nobrowse $cache/$dmgfile
 cd $mountpath
 export LD_LIBRARY_PATH=$marpath
 $marpath/marsign -r $signedmarfile $unsignedmarfile
 if [ "$(sha256sum $unsignedmarfile)" -ne "$(grep $unsignedmarfile
 $sumfile)" ]
 then echo "sha256sum does not match: $unsignedmarfile"; exit 1; fi
 }}}
 Would that work?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18925 [Webpages/Website]: Add instructions for removing the code signing parts of OS X bundles and MAR files

[Tor Bug Tracker & Wiki]

#18925: Add instructions for removing the code signing parts of OS X bundles and
MAR files
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  enhancement  | Status:
 |  needs_information
 Priority:  Medium   |  Milestone:
Component:  Webpages/Website |Version:
 Severity:  Normal   | Resolution:
 Keywords:  website-content, GeorgKoppen201806,  |  Actual Points:
  TorBrowserTeam201806   |
Parent ID:  #17413   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by traumschule):

 Saw that one and I'm pretty sure you spent a lot of time on it. From my
 perspective it should get support from an apple developer. Maybe the
 donate button needs to get nearer to the mac row :)

 The formatting issue looks like a missing close tag to me but i couldn't
 find it yet. Have to go over the whole page anyway for
 https://github.com/torproject/webwml/pull/31
 What do you think of the idea? I wonder which browsers it might break.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18925 [Webpages/Website]: Add instructions for removing the code signing parts of OS X bundles and MAR files

[Tor Bug Tracker & Wiki]

#18925: Add instructions for removing the code signing parts of OS X bundles and
MAR files
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  enhancement  | Status:
 |  needs_information
 Priority:  Medium   |  Milestone:
Component:  Webpages/Website |Version:
 Severity:  Normal   | Resolution:
 Keywords:  website-content, GeorgKoppen201806,  |  Actual Points:
  TorBrowserTeam201806   |
Parent ID:  #17413   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by gk):

 Replying to [comment:57 traumschule]:
 > For some reason I assigned myself to the parent of this, but I have no
 access to mac hardware right now (and need to setup a test environment
 fist). Maybe someone can help with a hint if and how the
 [https://www.torproject.org/docs/verifying-
 signatures.html.en#MARVerification current guide] needs to be updated
 while I try to let the page look better and less confusing.

 It seems the formatting got broken, especially in the parts at the end of
 that page? That said the macOS (i.e. code-signined) related bits are
 blocked on #20254.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18925 [Webpages/Website]: Add instructions for removing the code signing parts of OS X bundles and MAR files

[Tor Bug Tracker & Wiki]

#18925: Add instructions for removing the code signing parts of OS X bundles and
MAR files
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  enhancement  | Status:
 |  needs_information
 Priority:  Medium   |  Milestone:
Component:  Webpages/Website |Version:
 Severity:  Normal   | Resolution:
 Keywords:  website-content, GeorgKoppen201806,  |  Actual Points:
  TorBrowserTeam201806   |
Parent ID:  #17413   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by traumschule):

 * status:  new => needs_information


Comment:

 For some reason I assigned myself to the parent of this, but I have no
 access to mac hardware right now (and need to setup a test environment
 fist). Maybe someone can help with a hint if and how the
 [https://www.torproject.org/docs/verifying-
 signatures.html.en#MARVerification current guide] needs to be updated
 while I try to let the page look better and less confusing.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18925 [Webpages/Website]: Add instructions for removing the code signing parts of OS X bundles and MAR files

[Tor Bug Tracker & Wiki]

#18925: Add instructions for removing the code signing parts of OS X bundles and
MAR files
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  enhancement  | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Webpages/Website |Version:
 Severity:  Normal   | Resolution:
 Keywords:  website-content, GeorgKoppen201806,  |  Actual Points:
  TorBrowserTeam201806   |
Parent ID:  #17413   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by traumschule):

 * parent:  #3893 => #17413


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18925 [Webpages/Website]: Add instructions for removing the code signing parts of OS X bundles and MAR files

[Tor Bug Tracker & Wiki]

#18925: Add instructions for removing the code signing parts of OS X bundles and
MAR files
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  enhancement  | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Webpages/Website |Version:
 Severity:  Normal   | Resolution:
 Keywords:  website-content, GeorgKoppen201806,  |  Actual Points:
  TorBrowserTeam201806   |
Parent ID:  #3893| Points:
 Reviewer:   |Sponsor:
-+-
Changes (by traumschule):

 * parent:   => #3893


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18925 [Webpages/Website]: Add instructions for removing the code signing parts of OS X bundles and MAR files

[Tor Bug Tracker & Wiki]

#18925: Add instructions for removing the code signing parts of OS X bundles and
MAR files
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  enhancement  | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Webpages/Website |Version:
 Severity:  Normal   | Resolution:
 Keywords:  GeorgKoppen201707,   |  Actual Points:
  TorBrowserTeam201707, website-content  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by hiro):

 * keywords:  GeorgKoppen201707, TorBrowserTeam201707 => GeorgKoppen201707,
 TorBrowserTeam201707, website-content


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #18925 [Webpages/Website]: Add instructions for removing the code signing parts of OS X bundles and MAR files

[Tor Bug Tracker & Wiki]

#18925: Add instructions for removing the code signing parts of OS X bundles and
MAR files
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  enhancement  | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Webpages/Website |Version:
 Severity:  Normal   | Resolution:
 Keywords:  GeorgKoppen201707,   |  Actual Points:
  TorBrowserTeam201707   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * keywords:  GeorgKoppen201704, TorBrowserTeam201707 => GeorgKoppen201707,
 TorBrowserTeam201707


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs