Your message dated Mon, 7 Dec 2015 18:10:12 +0100
with message-id <[email protected]>
and subject line Re: [Pkg-privacy-maintainers] [bts-link] source package
torbrowser-launcher
has caused the Debian Bug report #756194,
regarding should verify 3 signatures are correct
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
756194: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756194
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
package: torbrowser-launcher
tags: upstream
Hi,
again about this when starting the launcher:
Running task: verify
Verifying signature
gpg: Signature made Thu Jul 24 10:45:33 2014 CEST using RSA key ID 0E3A92E4
gpg: Good signature from "Mike Perry (Regular use key)
<[email protected]>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: C963 C21D 6356 4E2B 10BB 335B 2984 6B3C 6836 86CC
Subkey fingerprint: D734 B622 C7B5 D164 D665 0CB8 717F 1F13 0E3A 92E4
Running task: extract
tbb downloads are signed by 3 signatures always, all three of them should be
checked and if there are not 3 valid signatures (or an invalid one), it should
fail and warn loudly.
cheers,
Holger
signature.asc
Description: This is a digitally signed message part.
--- End Message ---
--- Begin Message ---
Hi,
https://github.com/micahflee/torbrowser-launcher/issues/113 has been closed as
follows:
@micahflee commented Nov 9, 2015
It looks like the official Tor Browser Developers (signing key) with
fingerprint EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290 is the only
signing key now.
@micahflee micahflee closed this Nov 9, 2015
Thus closing this Debian bug now too.
cheers,
Holger
signature.asc
Description: This is a digitally signed message part.
--- End Message ---
