Opened 20 months ago

Closed 9 months ago

#23586 closed defect (fixed)

fingerprint in documentation is wrong

Reported by: kkuehl@… Owned by: traumschule
Priority: Medium Milestone: website redesign
Component: Webpages/Website Version:
Severity: Normal Keywords: gpg fingerprint
Cc: Actual Points:
Parent ID: #3893 Points:
Reviewer: hiro Sponsor:

Description

From https://www.torproject.org/docs/verifying-signatures.html.en
You should see:

pub 4096R/93298290 2014-12-15

Key fingerprint = EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290

uid Tor Browser Developers (signing key)
sub 4096R/F65C2036 2014-12-15
sub 4096R/D40814E0 2014-12-15
sub 4096R/C3C07136 2016-08-24

Which is probably just outdated information....

From the command line:
gpg --fingerprint 0x4E2C6E8793298290
pub rsa4096 2014-12-15 [C] [expires: 2020-08-24]

EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290

uid [ unknown] Tor Browser Developers (signing key) <torbrowser@…>
sub rsa4096 2016-08-24 [S] [expires: 2018-08-24]

Child Tickets

Change History (5)

comment:1 Changed 18 months ago by hiro

Owner: set to hiro
Status: newassigned

comment:2 Changed 14 months ago by hiro

Milestone: website redesign

comment:3 Changed 9 months ago by traumschule

Owner: changed from hiro to traumschule
Reviewer: hiro

With gpg 2.2.9 on debian it looks like this:

$ gpg --fingerprint 0x4E2C6E8793298290                                                              
pub   rsa4096/0x4E2C6E8793298290 2014-12-15 [C] [expires: 2020-08-24]                                           
      Key fingerprint = EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290                                      
uid                   [ unknown] Tor Browser Developers (signing key) <torbrowser@torproject.org>               
sub   rsa4096/0xD1483FA6C3C07136 2016-08-24 [S] [expires: 2018-08-24]                                           
      Key fingerprint = A430 0A6B C93C 0877 A445  1486 D148 3FA6 C3C0 7136                                      
sub   rsa4096/0xEB774491D9FF06E2 2018-05-26 [S] [expires: 2020-09-12]                                           
      Key fingerprint = 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2

I have no way to test it on windows but propose to update the website to resemble the output of a modern gpg assuming it looks similar with gpg4win. What do you think?

comment:4 Changed 9 months ago by traumschule

Parent ID: #3893
Status: assignedneeds_review

comment:5 Changed 9 months ago by traumschule

Resolution: fixed
Status: needs_reviewclosed

merged

Note: See TracTickets for help on using tickets.