Katya Titov:
Georg Koppen:
Hi,
TBB 3.6.2 is ready for testing. It contains an updated tor (0.2.4.22), an updated OpenSSL (1.0.1h) due to the flaws published last week (https://lists.torproject.org/pipermail/tor-talk/2014-June/033161.html) and the security fixes of the upcoming Firefox 24.6.0 ESR. Furthermore, it supports proxies with Pluggable Transports now. The bundles can be found at:
Everything works well, apart from the initial connection to https://panopticlick.eff.org. The result is a warning page saying that the connection is untrusted (error code: sec_error_unknown_issuer) and there is no way to proceed. Toggling noscript.alwaysBlockUntrustedContent from true to false fixes the problem, and then after toggling back to true the problem does *not* reoccur when restarted. It is only the first load after extraction which is the issue. I don't recall this happening before. Maybe a change in NoScript? (The root cause appears to be that the intermediate chain isn't being pushed from the server.)
This happens with a clean, new TBB 3.6.1 as well. Thus, it is not related to anything new in TBB 3.6.2.
Georg