[tbb-bugs] #20757 [Applications/Tor Browser]: Failure to verify tbb-windows-installer v3.1.0

[Tor Bug Tracker & Wiki]

#20757: Failure to verify tbb-windows-installer v3.1.0
------------------------------------------+----------------------
     Reporter:  dcf                       |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 Lately I've been getting this error every time in `verify-tags.sh`:
 {{{
 $ ./verify-tags.sh ../../gitian-builder/inputs/ versions
 gpg: keybox '/tmp/tmp.TYcPEvMC3B/trustedkeys.gpg' created
 gpg: /tmp/tmp.TYcPEvMC3B/trustdb.gpg: trustdb created
 gpg: key ECE921DA863B95F7: public key "Moritz Bartl
 <moritz at headstrong.de>" imported
 gpg: Total number processed: 1
 gpg:               imported: 1
 gpg: no ultimately trusted keys found
 ~/gitian-builder/inputs ~/gitian-builder/inputs
 object 400dd62230d7c219b44ee2e83362a52c5e96806e
 type commit
 tag v0.3.1
 tagger moba <m at b> 1455184284 +0100

 new pgp subkey
 gpg: keybox '/tmp/tmp.TYcPEvMC3B/pubring.kbx' created
 gpg: Signature made Thu 11 Feb 2016 01:51:24 AM PST
 gpg:                using RSA key 733018FA13A3DE49
 gpg: Can't check signature: No public key
 tbb-windows-installer: verification of tag v0.3.1 against /home/david/tor-
 browser-bundle/gitian/gpg/tbb-windows-installer.gpg failed!
 }}}

 I previously noticed it in comment:14:ticket:20023.

 I reproduced it just now with [https://gitweb.torproject.org/builders/tor-
 browser-bundle.git/log/?id=234b76caf9 234b76caf9], but it's been happening
 even before that.

 I'm using Debian stretch/sid. My gitian-builder/inputs/tbb-windows-
 installer is at commit [https://github.com/moba/tbb-windows-
 installer/commit/400dd62230d7c219b44ee2e83362a52c5e96806e 400dd62230]. My
 local gpg key was sha256sum:
 {{{
 8db030a7aa217e38fa86e141c540977b408d5029e6907811e4d88f3f1c23e9b7  gpg/tbb-
 windows-installer.gpg
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20757>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online