Hi, On 22/06/2019 00:20, s7r wrote:

Trying to spin some new obfs4bridges. I am using:

deb.torproject.org/torproject.org obfs4proxy main

in /etc/apt/sources.list -- I hope this is correct.

I get this:

E: Release file for https://deb.torproject.org/torproject.org/dists/obfs4proxy/InRelease is expired (invalid since 1d 15h 7min 11s). Updates for this repository will not be applied.

Just recently saw Yawning's release notification, is it somehow related?

We no longer maintain deb packages on deb.torproject.org for obfs4proxy. The packages that were there were built using an old version of Go that had known security issues, and then statically linked in libraries that also will have had unfixed security issues. The packages in Debian are rebuilt when new Go versions or libraries are available so are not affected by this issue. For installation instructions: https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/obfs4p... Thanks, Iain.