Re: [tor-bugs] #25435 [Applications/rbm]: keyring/binutils.gpg modified by `make alpha`

[Tor Bug Tracker & Wiki]

#25435: keyring/binutils.gpg modified by `make alpha`
-+-
 Reporter:  dcf  |  Owner:  boklm
 Type:  defect   | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Applications/rbm |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-rbm, boklm201803,|  Actual Points:
  TorBrowserTeam201803R  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by dcf):

 Hmm, I just had this problem again, this time with keyring/tor.gpg. These
 are the commits I was using:

 tor-browser-build [https://gitweb.torproject.org/builders/tor-browser-
 build.git/commit/?id=b8bae5882eac6159c8a6ad466b9dc4a7b18ba27b
 b8bae5882eac6159c8a6ad466b9dc4a7b18ba27b] (actually one commit ahead, for
 #25579)
 rbm
 
[https://gitweb.torproject.org/builders/rbm.git/commit/?id=db41d8e754ed8cd6cee7bca18d76d59f8f7f369b
 db41d8e754ed8cd6cee7bca18d76d59f8f7f369b]

 I think I'll just ignore this for now, as I'm not 100% sure that the file
 was not modified before I started. I'll post again if it happens again.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #25435 [Applications/rbm]: keyring/binutils.gpg modified by `make alpha`

[Tor Bug Tracker & Wiki]

#25435: keyring/binutils.gpg modified by `make alpha`
-+-
 Reporter:  dcf  |  Owner:  boklm
 Type:  defect   | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Applications/rbm |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-rbm, boklm201803,|  Actual Points:
  TorBrowserTeam201803R  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-

Comment (by gk):

 This is commit 10b6ffd8b1168797a24934ae28944faf60d327c9 on `maint-7.5`.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #25435 [Applications/rbm]: keyring/binutils.gpg modified by `make alpha`

[Tor Bug Tracker & Wiki]

#25435: keyring/binutils.gpg modified by `make alpha`
-+-
 Reporter:  dcf  |  Owner:  boklm
 Type:  defect   | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Applications/rbm |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-rbm, boklm201803,|  Actual Points:
  TorBrowserTeam201803R  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  needs_review => closed
 * resolution:   => fixed


Comment:

 Looks good to me. Applied to `rbm` (commit
 db41d8e754ed8cd6cee7bca18d76d59f8f7f369b, as I fixed a typo in the commit
 description) and available in `tor-browser-build` (with commit
 058b6520125e57161753d3357fcab6ecd67496bf).

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #25435 [Applications/rbm]: keyring/binutils.gpg modified by `make alpha`

[Tor Bug Tracker & Wiki]

#25435: keyring/binutils.gpg modified by `make alpha`
-+-
 Reporter:  dcf  |  Owner:  boklm
 Type:  defect   | Status:
 |  needs_review
 Priority:  Medium   |  Milestone:
Component:  Applications/rbm |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-rbm, boklm201803,|  Actual Points:
  TorBrowserTeam201803R  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by boklm):

 * keywords:  tbb-rbm => tbb-rbm, boklm201803, TorBrowserTeam201803R
 * status:  new => needs_review
 * cc: tbb-team (added)
 * component:  Applications/Tor Browser => Applications/rbm
 * owner:  tbb-team => boklm


Comment:

 There is a patch for review in branch `bug_25435`:
 
https://gitweb.torproject.org/user/boklm/rbm.git/commit/?h=bug_25435=ddccb0de3cceee4fc83f4508ad7cf14f3b4461c1

 In this patch we add the `--no-auto-check-trustdb` option. At the same
 time, we add `--trust-model always` as we are not using the Web of Trust
 when using a keyring file.

 The `trust-model always` options means:
 > Skip key validation and assume that used keys are always fully valid.
 You generally won’t use this unless you are using some external validation
 scheme. This option also suppresses the "[uncertain]" tag printed with
 signature checks when there is no evidence that the user ID is bound to
 the key. Note that this trust model still does not allow the use of
 expired, revoked, or disabled keys.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs