Opened 6 years ago

Closed 6 years ago

#8582 closed defect (fixed)

Signature problem for tor-0.2.3.25-win32.exe

Reported by: Sebastian Owned by: phobos
Priority: Medium Milestone:
Component: Webpages/Website Version:
Severity: Keywords:
Cc: erinn, helix Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

A user reports:

the detached signature file is incorrect for this file:    https://archive.torproject.org/tor-package-archive/win32/tor-0.2.3.25-win32.exe
it is even dated incorrectly, being three months earlier than the file it is supposed to support
it does not work either, when i checked it against the file.
the program file is for 06-feb-2013, while the detached signature is for 03-dec-2012

Child Tickets

Change History (6)

comment:1 Changed 6 years ago by arma

Owner: changed from erinn to phobos
Status: newassigned

If I understand correctly, phobos moves stuff to archive (and thus is the right person to look at this).

comment:2 Changed 6 years ago by arma

Component: Tor bundles/installationWebsite

Moving to the 'website' component, since, uh, it's slightly closer to accurate.

comment:3 Changed 6 years ago by phobos

There is an rsync job that runs every hour. That's the "moves stuff to archive" bit. If it was incorrect on the website, it'll be incorrect in archive.

Do we have a correct signature?

comment:4 Changed 6 years ago by arma

Cc: erinn helix added

Not that I know of. Unless Erinn still has it somewhere.

Maybe we should remove the wrong sig file from the archive in the mean time?

comment:5 Changed 6 years ago by arma

I think that means we should remove the wrong signature file.

Who has access to archive.tp.o to fix it?

comment:6 Changed 6 years ago by phobos

Resolution: fixed
Status: assignedclosed

Ok, removed.

Note: See TracTickets for help on using tickets.