Opened 8 years ago

Closed 7 years ago

#3504 closed defect (fixed)

Export/Maintain list of reccommended TorBrowser Bundles

Reported by: mikeperry Owned by: erinn
Priority: High Milestone: TorBrowserBundle 2.2.x-stable
Component: Applications/Tor bundles/installation Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

We really need to export a list of recommended TBB versions somewhere so that check.torproject.org can pick them up and deliver them for Torbutton to check against.

The vulnerability turnover in the union of Firefox + tor + support libs may be high enough that this just means providing the latest version only and manually updating it whenever there is a release...

Child Tickets

Change History (7)

comment:1 Changed 8 years ago by mikeperry

Milestone: TorBrowserBundle 2.2.x-stable

comment:2 Changed 8 years ago by mikeperry

For an idea of how this list will be used, see https://trac.torproject.org/projects/tor/ticket/2285#comment:25.

As for where to export list, flat file in git might work. In that case, we can just have check pull an https git url periodically.

As for what format to use, something similar to the format in prefs.js for #3654 is ideal, so Torbutton can just read the prefs.js value and look for it in the list that comes back from check.

comment:3 Changed 8 years ago by mikeperry

Ok, the format for this (and also prefs.js) should be:
$RELEASE_VER-$BUILD_NUM-$PLATFORM-$ARCH

This would expand to a list of strings like:
2.2.32-4-Linux-x64
2.2.32-3-MacOS-x86
2.2.33-1-Windows-x64

but NOT:
2.2.33-1-Windows XP SP2 Home-x64

comment:4 Changed 8 years ago by erinn

Our Windows bundles are architecture agnostic -- do you want me to leave that part blank for them?

comment:5 in reply to:  4 Changed 8 years ago by mikeperry

Replying to erinn:

Our Windows bundles are architecture agnostic -- do you want me to leave that part blank for them?

Yeah, leave it blank then. I am just going to check to see if the current version string from prefs.js is present in the list from check. If we decide to make arch-specific windows builds that supersede the generic ones, we'll just stop listing the versions without the arch.

comment:7 Changed 7 years ago by erinn

Resolution: fixed
Status: newclosed

This is implemented. Closing.

Note: See TracTickets for help on using tickets.