Delivery-Date: Thu, 26 Feb 2015 08:18:31 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD,UNPARSEABLE_RELAY,
	URIBL_BLOCKED autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id D6EA01E03F2
	for <archiver@seul.org>; Thu, 26 Feb 2015 08:18:29 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id A0F3E33EF0;
	Thu, 26 Feb 2015 13:18:26 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 47C7F33EC2
 for <tor-talk@lists.torproject.org>; Thu, 26 Feb 2015 13:16:17 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id cjJBpnu0Oh-T for <tor-talk@lists.torproject.org>;
 Thu, 26 Feb 2015 13:16:17 +0000 (UTC)
Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 1F47933EBD
 for <tor-talk@lists.torproject.org>; Thu, 26 Feb 2015 13:16:17 +0000 (UTC)
Received: from berryeater.riseup.net (berryeater-pn.riseup.net [10.0.1.120])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK))
 by mx1.riseup.net (Postfix) with ESMTPS id 565644103E
 for <tor-talk@lists.torproject.org>; Thu, 26 Feb 2015 13:16:14 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
 t=1424956574; bh=ek87YXI0vHtORUb3EOqL8f7EN0IK+sKuUy1/4JFT4dw=;
 h=Date:From:To:Subject:References:In-Reply-To:From;
 b=dFVM+S4QJVDXZOjR5BBNHpKdIj3xgWDmNGWipiSiIVFXGOVZmw/us3a3RVuVAyrAJ
 G290qDXzVsKd7HEZQrr74XnmHfn7FozV5SLn7JKgNoIRTkPvDaa4gY8arbLnliQO8v
 0qqilRs1VLITDHq4OtBwy1Vbg2L+yhj5Gy1Ae678=
Received: from [127.0.0.1] (localhost [127.0.0.1])
 (Authenticated sender: irregulator) with ESMTPSA id BAA45439D3
Message-ID: <54EF1C85.9080503@riseup.net>
Date: Thu, 26 Feb 2015 15:15:49 +0200
From: Alexandros <irregulator@riseup.net>
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <1424955764.2354591.232742237.2CF4B4C5@webmail.messagingengine.com>
In-Reply-To: <1424955764.2354591.232742237.2CF4B4C5@webmail.messagingengine.com>
X-Virus-Scanned: clamav-milter 0.98.6 at mx1
X-Virus-Status: Clean
Subject: Re: [tor-talk] Problems? Verifying signatures in Tor 4.0.4
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============7792305634119163685=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============7792305634119163685==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="S6upo2UU6aWD3EkLpBTwrmcTxXWD6qghu"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--S6upo2UU6aWD3EkLpBTwrmcTxXWD6qghu
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 02/26/2015 03:02 PM, andre76@fastmail.fm wrote:
> Is there anything that's wrong about the gpg verification performed on
> the version 4.0.4 as seen in the text below?
> It's quite different from previous Tor versions. No Erinn Clark.
>=20
>=20
>=20
> $ gpg --verify tor-browser-linux32-4.0.4_en-US.tar.xz.asc              =
 =20
> gpg: Signature made Wed 25 Feb 2015 02:54:55 AM EST using RSA key ID
> F65C2036
> gpg: Good signature from "Tor Browser Developers (signing key)
> <torbrowser@torproject.org>"
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg:          There is no indication that the signature belongs to the
> owner.
> Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329
> 8290
>      Subkey fingerprint: 5242 013F 02AF C851 B1C7  36B8 7017 ADCE F65C
>      2036
>=20

Hi,

please read https://blog.torproject.org/blog/tor-browser-404-released

Tor Browser is signed with a different key. You should the new public
key in order to verify the signatures.

gpg --recv-keys 'EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290'


--S6upo2UU6aWD3EkLpBTwrmcTxXWD6qghu
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Xfc3
-----END PGP SIGNATURE-----

--S6upo2UU6aWD3EkLpBTwrmcTxXWD6qghu--

--===============7792305634119163685==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============7792305634119163685==--

