Opened 4 years ago

Closed 4 years ago

#11212 closed defect (fixed)

Can't verify signature because ASC file is nowhere to be found

Reported by: lido.shuffles Owned by:
Priority: High Milestone:
Component: Applications/TorBirdy Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Self explanatory. Why the hell would you state this in the directions:

"Verifying the XPI

The TorBirdy XPI is signed by Jacob Appelbaum with the key 0x1245F783. As an example, verifying the current stable release of TorBirdy:

$ gpg --verify torbirdy-current.xpi.asc torbirdy-current.xpi
gpg: Signature made Mon 04 Nov 2013 06:43:51 AM EST using RSA key ID 1245F783
gpg: Good signature from "Jacob Appelbaum (offline long term identity key) <jacob@…>"
gpg: aka "Jacob Appelbaum (offline long term identity key) <jacob@…>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 228F AD20 3DE9 AE7D 84E2 5265 CF9A 6F91 4193 A197

Subkey fingerprint: E729 FE2D EE92 DB51 1AC9 FF91 590C 7D91 1245 F783

Instructions for verifying the XPI on Windows and OS X are available on the ​verifying signatures page. "

.....but have no download available anywhere for the ASC file?

Child Tickets

Change History (2)

comment:1 Changed 4 years ago by lido.shuffles

A google search finds this probably location for the ASC file.

https://www.torproject.org/dist/torbirdy/

Is this correct? If so then a link needs to be added to the Torbirdy pages located at

https://addons.mozilla.org/en-us/thunderbird/addon/torbirdy/

and also

https://trac.torproject.org/projects/tor/wiki/torbirdy

comment:2 Changed 4 years ago by sukhbir

Component: - Select a componentTorBirdy
Resolution: fixed
Status: newclosed

Thanks for reporting this. And, yes, the above links are correct. I have updated the wiki page.

Note: See TracTickets for help on using tickets.