Bug#756193: seems not to properly verify download

2014-07-27 Thread Holger Levsen
package: torbrowser-launcher severity: important tags: upstream Hi, when running torbrowser-launcher I just saw this: Running task: download_tarball Downloading https://www.torproject.org/dist/torbrowser/3.6.3/tor-browser- linux64-3.6.3_en-US.tar.xz Updating over Tor Finished receiving body:

Bug#756193: seems not to properly verify download

2014-07-27 Thread intrigeri
Hi, Holger Levsen wrote (27 Jul 2014 11:31:20 GMT) : gpg: Signature made Thu Jul 24 10:45:33 2014 CEST using RSA key ID 0E3A92E4 gpg: Good signature from Mike Perry (Regular use key) mikepe...@torproject.org gpg: WARNING: This key is not certified with a trusted signature! gpg: